Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/RojFM8TQQXOfhOfyExReiULjkiM.roa
File:                     RojFM8TQQXOfhOfyExReiULjkiM.roa (raw, json)
Hash identifier:          9soNgWQm05LWtyXvJpX7XxGNndGWmhOpKbDPf+dugVc=
Subject key identifier:   46:88:C5:33:C4:D0:41:73:9F:84:E7:F2:13:14:5E:89:42:E3:92:23
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       053B
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/RojFM8TQQXOfhOfyExReiULjkiM.roa
Signing time:             Sun 01 Mar 2026 01:41:11 +0000
ROA not before:           Sun 01 Mar 2026 01:41:11 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:eb00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1339 (0x53b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 01:41:11 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=4688C533C4D041739F84E7F213145E8942E39223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:74:44:46:49:74:5f:5b:25:e5:09:f3:93:c1:
                    14:ca:f3:bc:4d:96:40:13:b9:4a:5f:db:03:e3:29:
                    5f:9f:74:9a:70:0d:33:85:4b:fc:47:50:35:f1:fc:
                    62:74:dd:1c:fe:1b:47:d5:ef:14:ab:01:70:d7:6f:
                    70:a6:f2:f1:8f:a3:37:cc:31:40:f6:6d:d9:f4:fa:
                    4d:90:2e:b4:1f:c3:19:94:15:cf:bb:f9:df:74:63:
                    87:8a:23:fc:07:f1:54:0f:2e:e1:36:ec:2d:a7:5a:
                    db:a9:5f:e8:3b:86:3a:e1:a9:78:df:9a:dd:7b:4e:
                    7a:8c:7d:e8:be:97:11:46:ff:94:05:10:58:ce:0e:
                    61:79:fb:54:bb:e5:88:6a:de:ae:48:09:ed:2e:e0:
                    a6:e9:b5:17:67:74:6d:57:54:21:24:de:7a:9b:09:
                    24:93:5d:6d:76:61:7a:0c:51:a3:1f:15:f6:c8:26:
                    a1:f0:97:a4:22:a5:d4:b9:80:b2:48:fd:fa:d3:05:
                    0a:89:1e:26:f4:09:3c:b6:f4:10:02:ee:4d:c4:67:
                    df:64:30:c6:eb:43:cd:2d:36:b8:6d:40:f3:ca:ec:
                    95:6e:95:40:9d:45:f3:52:91:60:72:ff:35:4d:98:
                    00:94:78:1c:33:e8:49:c4:90:8c:e5:71:b5:56:84:
                    55:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:88:C5:33:C4:D0:41:73:9F:84:E7:F2:13:14:5E:89:42:E3:92:23
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/RojFM8TQQXOfhOfyExReiULjkiM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:eb00::/40

    Signature Algorithm: sha256WithRSAEncryption
         1e:f3:d8:6f:e6:75:fa:a6:10:1d:11:13:46:24:b3:4a:c5:90:
         98:77:74:0a:09:95:2f:a1:65:c9:df:4a:4c:bf:26:21:f6:72:
         76:13:08:df:15:61:82:9e:f2:54:eb:5b:86:c3:4b:2f:ce:e0:
         e1:b6:e3:75:a1:90:fc:0f:9f:6f:82:54:d3:da:97:4d:9c:fb:
         8a:71:72:87:68:5f:55:30:26:d5:d5:d6:dd:04:ac:f9:4b:2f:
         f3:1a:f0:47:9e:6b:6c:21:4f:5d:6d:1e:84:0b:08:a4:d5:cb:
         bd:9a:56:af:37:a5:cb:94:9e:f3:da:9a:b9:64:35:b8:0e:c4:
         f8:90:c0:e2:9c:52:42:6c:c1:b7:97:0a:73:0a:fe:e0:d2:c7:
         85:24:cb:2c:57:4c:41:06:9c:d3:fb:62:6d:5a:5c:1e:69:29:
         ae:6b:7b:b1:80:76:9a:f4:64:3e:11:aa:33:f9:58:dc:f8:25:
         e4:e1:81:8b:63:00:4d:4d:78:cf:df:66:00:ad:6d:2b:42:de:
         50:0d:ba:8e:1e:8b:cc:2b:7e:8c:ff:e5:67:4e:ef:49:e4:98:
         bc:5d:74:59:3f:5f:46:64:49:ef:7f:30:97:ef:30:b8:95:c3:
         01:68:5c:cb:85:de:e0:02:e2:75:ea:34:c7:04:fa:26:ae:38:
         b8:d6:07:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:04:35 2026 by rpki-client