Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/TIU9XPs9_RuM0VzT6kqu6mLRBj8.roa
File:                     TIU9XPs9_RuM0VzT6kqu6mLRBj8.roa (raw, json)
Hash identifier:          lRC7PxOdE7y9VemoEyXRrPI1K3/dhxMOwXZZxLLPpKo=
Subject key identifier:   4C:85:3D:5C:FB:3D:FD:1B:8C:D1:5C:D3:EA:4A:AE:EA:62:D1:06:3F
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       05A6
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/TIU9XPs9_RuM0VzT6kqu6mLRBj8.roa
Signing time:             Sun 01 Mar 2026 02:00:48 +0000
ROA not before:           Sun 01 Mar 2026 02:00:48 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:a800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1446 (0x5a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 02:00:48 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=4C853D5CFB3DFD1B8CD15CD3EA4AAEEA62D1063F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:95:8d:5d:29:a4:01:85:b4:5e:61:14:0a:4b:
                    2f:e7:db:42:36:ad:94:c5:8d:51:76:34:91:9a:81:
                    5f:3e:fb:70:ed:db:e3:ec:46:69:78:c5:af:03:11:
                    9d:5f:9a:c4:2b:8a:38:8d:e0:29:2d:02:e7:c6:9c:
                    0a:11:b0:4a:54:46:db:b9:3d:80:3e:7c:a5:f5:1b:
                    86:fe:a2:4d:fa:07:01:79:e8:b8:ac:14:bb:d8:d3:
                    d4:07:8f:df:ea:ad:e2:f0:3e:c7:a7:45:b0:b6:fb:
                    64:07:9f:b9:5a:16:97:55:81:40:09:95:90:8b:c7:
                    d9:b9:dc:5a:be:70:80:59:e8:66:de:18:f7:ec:6d:
                    9f:94:37:b0:0c:3f:d2:7b:fa:de:5c:f9:f5:08:8d:
                    48:80:03:5c:93:37:c5:70:6f:67:e4:4a:b6:a8:4a:
                    66:da:f8:a1:46:86:50:43:04:ab:73:00:23:0b:59:
                    f3:6d:d7:ae:80:d9:1c:45:1c:a0:53:f5:f4:38:74:
                    ea:65:4e:69:ba:01:52:51:a1:37:2f:89:ee:3f:b0:
                    0f:b8:2e:bc:ef:55:23:12:21:64:aa:09:af:56:6e:
                    05:a9:fa:f7:ea:f8:bf:95:a0:ce:03:46:91:12:bd:
                    9f:9e:cd:23:71:b5:f4:b2:ca:c5:ec:59:64:fa:d6:
                    48:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:85:3D:5C:FB:3D:FD:1B:8C:D1:5C:D3:EA:4A:AE:EA:62:D1:06:3F
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/TIU9XPs9_RuM0VzT6kqu6mLRBj8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:a800::/40

    Signature Algorithm: sha256WithRSAEncryption
         13:92:36:a4:43:55:2e:bb:91:60:9d:2e:db:8c:b3:d7:03:ec:
         6b:0b:06:67:a6:da:ec:56:f6:88:c2:05:6d:5c:a0:76:ae:fd:
         44:2b:ed:76:0e:e2:1c:17:0c:49:87:a8:ec:c2:88:62:8c:79:
         83:6f:07:6b:eb:18:7e:ae:35:f1:45:8e:c9:6e:6b:33:37:2d:
         b0:85:75:35:b2:29:34:f2:f9:db:39:51:87:d0:5e:c9:f7:4d:
         4b:a3:ff:e4:99:51:7f:6c:0c:31:a8:c7:85:53:5c:1c:ee:a2:
         af:6f:a6:90:ea:39:6e:2b:8d:10:fe:4f:a8:68:9d:47:21:72:
         37:b7:43:83:d2:c4:00:4f:fa:e0:d1:f2:3b:6c:2f:2a:82:91:
         1f:7e:d0:e5:e0:5b:ee:39:86:75:a9:2f:9e:c6:12:7a:84:8e:
         a7:ba:15:f6:18:36:82:4a:d6:de:85:32:06:2f:21:04:d9:55:
         90:4e:d4:c3:c7:b9:53:84:d4:72:02:a6:46:de:9d:9d:57:26:
         b5:f8:46:4d:f2:c8:9f:41:80:79:75:f4:41:1a:a5:f2:1d:76:
         58:28:70:c5:cd:a5:ed:4d:6e:3a:49:57:a8:59:ef:87:e8:d1:
         58:ac:cf:a1:b8:e1:38:ce:aa:e5:47:46:21:89:1f:7b:e3:14:
         88:e7:d0:a5
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICBaYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjAzMDEw
MjAwNDhaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDRDODUzRDVDRkIzREZE
MUI4Q0QxNUNEM0VBNEFBRUVBNjJEMTA2M0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDIlY1dKaQBhbReYRQKSy/n20I2rZTFjVF2NJGagV8++3Dt2+Ps
Rml4xa8DEZ1fmsQrijiN4CktAufGnAoRsEpURtu5PYA+fKX1G4b+ok36BwF56Lis
FLvY09QHj9/qreLwPsenRbC2+2QHn7laFpdVgUAJlZCLx9m53Fq+cIBZ6GbeGPfs
bZ+UN7AMP9J7+t5c+fUIjUiAA1yTN8Vwb2fkSraoSmba+KFGhlBDBKtzACMLWfNt
166A2RxFHKBT9fQ4dOplTmm6AVJRoTcvie4/sA+4LrzvVSMSIWSqCa9WbgWp+vfq
+L+VoM4DRpESvZ+ezSNxtfSyysXsWWT61kh/AgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUTIU9XPs9/RuM0VzT6kqu6mLRBj8wHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9USVU5WFBzOV9SdU0wVnpUNmtxdTZtTFJCajgu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa6gwDQYJKoZIhvcNAQELBQADggEBABOSNqRDVS67kWCdLtuM
s9cD7GsLBmem2uxW9ojCBW1coHau/UQr7XYO4hwXDEmHqOzCiGKMeYNvB2vrGH6u
NfFFjsluazM3LbCFdTWyKTTy+ds5UYfQXsn3TUuj/+SZUX9sDDGox4VTXBzuoq9v
ppDqOW4rjRD+T6honUchcje3Q4PSxABP+uDR8jtsLyqCkR9+0OXgW+45hnWpL57G
EnqEjqe6FfYYNoJK1t6FMgYvIQTZVZBO1MPHuVOE1HICpkbenZ1XJrX4Rk3yyJ9B
gHl19EEapfIddlgocMXNpe1NbjpJV6hZ74fo0Visz6G44TjOquVHRiGJH3vjFIjn
0KU=
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:54:23 2026 by rpki-client