Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/S8ADe1TsV6sufFHBjuUZG2rqNQY.roa
File:                     S8ADe1TsV6sufFHBjuUZG2rqNQY.roa (raw, json)
Hash identifier:          2qGIWHvq0LQkfB78FXgyE4BFjL9JSe+Ydqw3UEkOa3k=
Subject key identifier:   4B:C0:03:7B:54:EC:57:AB:2E:7C:51:C1:8E:E5:19:1B:6A:EA:35:06
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0609
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/S8ADe1TsV6sufFHBjuUZG2rqNQY.roa
Signing time:             Sun 01 Mar 2026 02:20:52 +0000
ROA not before:           Sun 01 Mar 2026 02:20:52 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:61:3000::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1545 (0x609)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 02:20:52 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=4BC0037B54EC57AB2E7C51C18EE5191B6AEA3506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f5:b6:56:ff:12:5f:8d:5d:59:54:52:b3:09:
                    80:31:45:ab:83:3d:45:e2:db:62:4c:15:35:b3:de:
                    28:ae:4f:65:96:10:88:0e:29:15:6c:fc:1d:28:26:
                    95:8e:d4:cd:40:ff:e8:29:02:4a:df:b8:c9:e0:26:
                    a6:4b:3d:e1:0d:40:b2:4e:de:66:90:aa:58:4a:98:
                    d2:2c:d9:dc:42:49:85:e6:41:0c:ba:dd:d8:8c:9e:
                    1a:ce:e6:bb:29:1c:67:8c:e7:65:e0:51:75:3f:d8:
                    6f:87:18:da:a0:2a:46:17:e9:88:73:c9:4b:cb:24:
                    75:fe:52:b5:c6:ab:e8:c8:7e:1a:46:57:46:9c:24:
                    05:42:82:57:9d:cc:69:cd:c5:1e:a8:0c:ac:60:66:
                    10:a8:68:f6:f7:aa:03:bd:3c:87:a1:0e:fd:3e:6e:
                    26:f9:c7:41:a0:d2:e9:eb:1b:a4:f2:59:63:c2:f7:
                    b8:bc:0d:cb:17:fb:44:19:78:76:5d:69:01:75:d1:
                    29:ca:99:1e:3e:cf:27:f2:eb:48:33:8f:c4:8b:b3:
                    82:d1:23:e7:22:8d:8a:c9:08:cf:1a:d9:2d:9e:2d:
                    3f:07:e9:7e:30:31:b8:f7:07:81:18:61:6c:d2:5e:
                    59:be:7b:4d:11:71:fd:ff:33:8e:c4:9b:31:3b:52:
                    d3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:C0:03:7B:54:EC:57:AB:2E:7C:51:C1:8E:E5:19:1B:6A:EA:35:06
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/S8ADe1TsV6sufFHBjuUZG2rqNQY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:3000::/37

    Signature Algorithm: sha256WithRSAEncryption
         4c:57:5d:a8:07:3d:e5:81:12:24:6c:9a:cf:2a:68:7d:fb:9c:
         5b:e5:d0:85:9a:a1:ee:a4:61:8e:76:f6:bf:b7:ff:4d:6d:a3:
         5d:6d:4d:e1:09:61:12:bf:5b:3b:f3:d7:43:02:bc:5f:9b:93:
         99:ad:06:e1:6d:db:87:47:57:0a:b3:2d:9c:8f:cf:4c:c5:5d:
         07:f4:d2:51:e6:b6:47:c4:3f:8c:ee:9a:fa:17:d6:ef:1c:a0:
         85:fb:3d:66:fa:0d:88:2a:5f:00:f0:8c:75:57:44:42:28:f4:
         27:49:70:47:a4:f7:9e:01:9a:b4:e1:e3:f6:bf:0e:90:34:73:
         18:ea:c0:54:88:95:e8:3b:2b:2c:16:bd:e7:e7:80:75:84:5e:
         9a:2d:51:f9:21:c0:b3:4d:78:43:37:8a:c8:df:d7:3b:63:a7:
         28:23:c8:ee:b6:d4:d5:d5:1b:68:67:2a:18:dc:41:3d:79:4d:
         4b:eb:c1:a5:08:cb:ad:ed:ed:0c:aa:3d:06:c4:08:fc:62:11:
         fa:3d:98:b9:df:06:83:11:b2:04:21:4f:87:5d:85:6d:1a:a4:
         8a:c3:b7:d9:6e:86:f1:f3:9e:d4:2e:b4:71:dc:95:7f:fd:c3:
         7e:f5:c3:c7:b8:80:d9:7b:50:d4:bd:2c:77:12:81:07:82:df:
         a4:de:62:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:19:00 2026 by rpki-client