Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/TE7-fDwG_J5ATVFHwq84fa3Q_MY.roa
File:                     TE7-fDwG_J5ATVFHwq84fa3Q_MY.roa (raw, json)
Hash identifier:          ICgisTmjnE5hi12Kl57Bq9wLzdntSLJO+MQiwTvl0N4=
Subject key identifier:   4C:4E:FE:7C:3C:06:FC:9E:40:4D:51:47:C2:AF:38:7D:AD:D0:FC:C6
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       062D
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/TE7-fDwG_J5ATVFHwq84fa3Q_MY.roa
Signing time:             Sun 01 Mar 2026 02:25:51 +0000
ROA not before:           Sun 01 Mar 2026 02:25:51 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:c900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1581 (0x62d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 02:25:51 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=4C4EFE7C3C06FC9E404D5147C2AF387DADD0FCC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:91:6e:2d:f9:d7:e6:3c:68:b6:a3:11:5c:dd:
                    9c:3c:55:8a:31:53:92:19:54:fb:0a:98:e1:ae:ba:
                    b9:20:5e:52:05:d9:69:4f:6a:a2:f1:94:cc:97:2f:
                    ad:a2:85:5e:d9:23:f6:b3:3b:58:f7:fd:53:06:56:
                    15:a3:25:35:ca:53:d5:d4:50:1d:fb:0b:fe:eb:76:
                    c9:1a:09:66:9c:56:1a:0e:f0:df:9c:0d:05:60:bd:
                    a6:22:65:8a:65:75:ac:2e:a7:67:57:f8:4e:6d:7a:
                    d7:2d:07:81:16:69:52:be:15:68:10:69:cd:e0:86:
                    28:26:13:7c:5b:8b:f3:b3:8f:64:f8:cf:a1:0c:5f:
                    46:d9:19:bd:94:fb:74:70:fc:1c:88:b9:7c:6b:a0:
                    96:42:4f:33:9d:28:c8:27:da:56:de:69:16:41:76:
                    54:87:c6:76:48:14:5e:83:dc:8a:b7:86:e6:1e:ab:
                    c1:93:66:0d:c0:e7:d6:f4:0f:8d:21:24:8e:9f:9e:
                    72:2c:5f:67:af:94:ea:d1:ca:2b:f5:1d:0a:3d:90:
                    8a:2e:c2:8a:1b:ca:4d:5b:63:90:64:28:cc:5d:1d:
                    ce:d7:4d:9e:89:d4:28:47:9c:91:26:2f:44:e2:b4:
                    56:ef:be:5d:32:80:b9:d5:75:e6:25:d0:8a:00:c0:
                    b4:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:4E:FE:7C:3C:06:FC:9E:40:4D:51:47:C2:AF:38:7D:AD:D0:FC:C6
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/TE7-fDwG_J5ATVFHwq84fa3Q_MY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:c900::/40

    Signature Algorithm: sha256WithRSAEncryption
         8c:64:c6:d0:d7:d8:7f:74:71:57:64:1f:8f:de:20:ff:bb:73:
         e8:8f:f3:f9:64:94:64:bf:1c:ef:77:7d:7b:d4:ec:3a:96:5e:
         b8:f2:c7:ba:c7:4f:25:ab:fd:c2:ca:51:84:9c:ac:db:8a:e6:
         5f:ad:f1:bd:de:75:ce:02:bf:31:17:ea:95:c5:cb:c2:cf:6b:
         4f:16:8a:b8:6a:19:88:7a:59:7e:e9:c6:35:ae:45:79:3d:1c:
         a8:d7:b1:60:f0:ff:78:1e:c6:cb:0d:75:ec:de:5f:d9:ab:46:
         32:90:83:b5:b0:2d:ab:b8:18:cf:34:54:47:7d:27:1f:79:d8:
         de:71:61:de:7c:9b:83:e8:69:5c:9c:db:6f:79:65:df:3e:01:
         48:dd:95:95:53:39:00:55:b3:52:97:85:28:fe:c0:8c:5f:ee:
         e0:2c:f0:ca:af:9b:f0:af:d2:bb:1e:2c:2b:b8:44:80:ea:4f:
         76:e7:c4:d3:8e:21:25:cc:f0:6e:1e:56:5e:8e:df:81:1d:c2:
         e1:e1:e5:f2:6b:71:d0:01:11:21:45:d4:77:be:6b:0c:3f:0d:
         24:ad:2d:1f:35:d8:0f:22:49:33:47:17:83:02:91:05:4f:16:
         69:6b:95:97:68:12:cd:c8:94:23:83:4f:e4:06:97:19:62:a3:
         e8:5c:b1:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:40:25 2026 by rpki-client