Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/RSH9xNTLct-kJPcFGUTaww05Ows.roa
File:                     RSH9xNTLct-kJPcFGUTaww05Ows.roa (raw, json)
Hash identifier:          f/EE5/C0t9eN2d7ZHFwiGDFib2nsbt6bY6hmGjRDPOY=
Subject key identifier:   45:21:FD:C4:D4:CB:72:DF:A4:24:F7:05:19:44:DA:C3:0D:39:3B:0B
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       052E
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/RSH9xNTLct-kJPcFGUTaww05Ows.roa
Signing time:             Sun 01 Mar 2026 01:34:51 +0000
ROA not before:           Sun 01 Mar 2026 01:34:51 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:aa00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1326 (0x52e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 01:34:51 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=4521FDC4D4CB72DFA424F7051944DAC30D393B0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e0:e9:d3:26:35:51:2b:b1:77:4f:c0:e9:8a:
                    e2:41:07:34:c4:32:b9:9a:f6:be:75:b1:20:90:d9:
                    8d:82:62:33:a0:d1:37:9a:84:eb:db:c5:04:12:1c:
                    bf:de:24:e6:23:54:b7:8e:3f:a2:74:31:d9:f8:65:
                    df:c9:ff:20:8c:01:52:5e:19:1b:c7:81:fb:7e:c5:
                    f6:15:96:9a:af:89:0d:33:95:b8:e0:a2:c6:16:e0:
                    35:61:fb:fd:18:21:75:18:b8:b3:3b:dc:f6:8a:11:
                    f7:22:67:a9:50:6b:4a:fa:a1:e1:d7:d3:bf:57:7e:
                    ff:a5:2f:57:6e:80:9c:3b:2b:23:56:25:3d:29:81:
                    f9:fa:c6:3e:51:1b:25:01:23:c5:3f:80:34:2a:0f:
                    1e:ea:5e:44:9a:f2:82:2f:78:a8:b1:83:83:9a:38:
                    65:00:eb:ed:02:f6:15:82:25:f5:74:40:8c:14:0b:
                    3b:42:50:92:7a:12:04:5a:83:d3:dc:63:dd:11:f2:
                    f8:e1:b4:fa:bd:ef:7c:c7:ad:76:56:13:cf:64:6b:
                    74:89:60:f1:3c:ae:1c:7a:7f:7d:85:12:f8:58:a6:
                    d3:e2:11:36:b2:3d:87:17:f0:91:ab:9b:9c:35:53:
                    2c:ee:ff:e4:71:2e:ad:9f:09:ba:92:27:89:e4:94:
                    b1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:21:FD:C4:D4:CB:72:DF:A4:24:F7:05:19:44:DA:C3:0D:39:3B:0B
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/RSH9xNTLct-kJPcFGUTaww05Ows.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:aa00::/40

    Signature Algorithm: sha256WithRSAEncryption
         c6:42:54:7d:82:79:30:aa:05:6a:6d:8f:21:1d:04:d5:08:01:
         d1:02:b2:9b:43:78:5a:e3:ca:bc:2b:90:9a:7d:de:d5:f9:0c:
         db:ff:3d:ad:d7:96:4f:d8:44:d1:ba:48:89:29:19:2a:14:40:
         24:e6:65:91:e5:e6:74:77:02:55:72:43:2e:91:09:43:d2:0e:
         a5:35:db:05:4a:e9:cd:76:44:44:cb:4b:83:52:d8:c6:c7:63:
         c4:9d:e5:3b:40:04:d5:3f:46:d7:a9:de:77:75:fb:76:c7:bd:
         6e:80:f3:4d:55:e9:6c:15:d5:4d:8e:e8:95:ac:d2:7b:17:de:
         16:30:99:f8:0c:a3:36:0f:17:06:f3:f7:4c:40:ef:67:d6:a3:
         b6:53:68:39:b3:d9:07:f7:d1:06:ad:ad:df:f6:01:eb:bd:44:
         43:25:d8:76:4f:7a:9c:54:0a:e8:2a:d0:60:76:be:01:b8:35:
         7d:26:79:00:2c:e0:f2:33:5f:2f:03:65:e5:10:e7:79:09:6a:
         c4:32:c9:b2:80:48:e7:55:11:76:ce:96:e4:6f:27:71:db:81:
         17:ca:4d:f7:b0:ed:8c:4e:9b:8f:bd:89:f5:fa:5e:2d:be:ee:
         99:ab:90:e1:09:6b:36:3b:0f:75:01:9b:62:c4:b2:85:0f:98:
         10:63:1d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:17:27 2026 by rpki-client