Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Sgg3w2HmmZV2cJlUUBlE2Un7J3Q.roa
File:                     Sgg3w2HmmZV2cJlUUBlE2Un7J3Q.roa (raw, json)
Hash identifier:          FlRRjLhSgEjf955ofY4EwxTTJAkpEtP+P7h6ZNg3U8A=
Subject key identifier:   4A:08:37:C3:61:E6:99:95:76:70:99:54:50:19:44:D9:49:FB:27:74
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0629
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Sgg3w2HmmZV2cJlUUBlE2Un7J3Q.roa
Signing time:             Sun 01 Mar 2026 02:25:48 +0000
ROA not before:           Sun 01 Mar 2026 02:25:48 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:2100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1577 (0x629)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 02:25:48 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=4A0837C361E6999576709954501944D949FB2774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a4:a3:03:53:d6:15:78:9e:17:c6:25:fc:1a:
                    cb:18:64:e4:31:f7:98:34:27:e5:4a:35:d8:5b:19:
                    fa:13:4e:c4:9b:45:af:09:c0:d5:2c:27:88:55:d7:
                    63:17:60:de:b3:cd:1d:c4:96:17:a4:c8:fd:e7:8b:
                    52:44:15:d3:97:d4:93:a5:ae:d6:87:f4:ea:c5:e9:
                    a1:c8:d6:2c:fe:0a:63:f8:bc:15:97:a2:f4:c6:e4:
                    f4:fc:6d:92:84:37:bd:e3:70:38:03:19:de:42:ce:
                    10:1b:34:6b:cf:45:8f:b4:b4:d4:98:88:38:e4:9c:
                    3f:60:d3:d0:d6:e6:b5:d2:e9:1a:71:ef:f8:b9:a2:
                    20:f6:29:36:05:88:16:43:79:31:3c:f9:a2:4a:03:
                    d3:f3:ff:7e:93:31:1d:41:e3:f7:6b:5c:4d:80:10:
                    e3:e7:36:07:eb:ce:4b:aa:38:23:ba:c8:09:9c:a9:
                    a8:09:56:f3:a4:8a:d6:56:c7:76:20:6f:ef:f1:df:
                    d9:bc:f5:2b:39:30:f1:16:9e:e6:62:a0:a5:40:ff:
                    f4:f7:41:7a:45:d7:1d:c9:6b:0e:e6:1e:88:ef:f2:
                    70:96:d2:e8:a3:84:1a:56:7c:44:2a:41:48:5b:94:
                    32:2c:8f:27:1b:fd:d2:13:3a:ae:8c:33:45:db:81:
                    cc:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:08:37:C3:61:E6:99:95:76:70:99:54:50:19:44:D9:49:FB:27:74
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Sgg3w2HmmZV2cJlUUBlE2Un7J3Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:2100::/40

    Signature Algorithm: sha256WithRSAEncryption
         32:df:2d:99:ce:bb:08:4e:4e:01:1f:cc:42:e5:10:7a:62:a4:
         f4:ac:7f:de:a8:36:3d:3d:0a:2d:20:8d:5a:bb:0f:c5:e7:7d:
         91:cc:a1:ff:90:2b:ec:9e:f4:62:6f:b8:96:99:4f:b9:b2:e8:
         4d:10:ee:77:6e:23:5a:49:e9:1d:c1:15:10:cf:ae:49:ff:1b:
         47:da:e2:72:94:b0:36:6b:d4:47:77:c8:d0:6a:1b:7a:d8:57:
         0d:e2:95:a3:eb:a4:54:85:bc:98:e6:44:26:1f:10:02:4b:00:
         03:92:04:67:a0:4c:10:51:76:f8:54:a9:9a:4e:df:35:b2:05:
         5c:21:23:4a:4a:b6:44:24:01:71:86:ab:dd:00:f0:de:a7:d4:
         4a:eb:a6:3e:f4:2f:a6:47:ec:ab:b2:dc:cc:0f:2f:a0:8f:cc:
         05:31:9d:a8:e9:06:1a:36:ff:f9:21:0c:c1:30:a3:5c:53:92:
         56:d2:fa:22:1c:89:b1:35:4d:e9:32:b1:01:99:10:55:17:42:
         15:bc:2a:38:ce:80:8e:af:e1:bc:17:f1:ee:a1:5c:81:f7:97:
         fb:c7:db:8f:fe:87:0a:85:7a:00:8c:b5:da:4e:e7:b1:44:1c:
         63:6d:73:e1:6e:09:a8:ab:b7:ac:b6:13:95:f8:70:7e:08:c1:
         15:b7:33:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:54:15 2026 by rpki-client