Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/TTZNid6_0AzgC62s5EtOVkxGQqM.roa
File:                     TTZNid6_0AzgC62s5EtOVkxGQqM.roa (raw, json)
Hash identifier:          qLbiUcmnKBGR1TPjb9WA4i0SlcDt2nfdiv8IGNNywFw=
Subject key identifier:   4D:36:4D:89:DE:BF:D0:0C:E0:0B:AD:AC:E4:4B:4E:56:4C:46:42:A3
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       05FB
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/TTZNid6_0AzgC62s5EtOVkxGQqM.roa
Signing time:             Sun 01 Mar 2026 02:16:13 +0000
ROA not before:           Sun 01 Mar 2026 02:16:13 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:1a00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1531 (0x5fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 02:16:13 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=4D364D89DEBFD00CE00BADACE44B4E564C4642A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:bb:e4:3c:45:f0:6f:2b:da:da:a5:2a:d2:12:
                    61:96:bc:77:13:bd:42:c5:41:5e:f2:d8:d5:79:a8:
                    e6:aa:91:23:06:ce:fa:c9:8b:e4:ae:3a:80:5d:dd:
                    91:88:60:ae:04:a5:72:33:c7:94:ff:5b:19:a6:ba:
                    76:dd:d8:31:a3:64:cb:c1:0b:2d:ff:b1:b1:da:61:
                    bf:e1:43:a0:f8:2a:74:f7:6b:64:9f:2d:ac:3d:4f:
                    7c:d7:56:a1:84:29:16:08:ed:b8:d6:3c:17:b9:36:
                    9a:be:c7:ca:e8:ab:8a:69:b4:a5:0c:a3:43:96:bc:
                    5a:a2:5d:8a:a0:f5:4f:f5:c9:9e:c5:66:9a:13:41:
                    3f:28:75:3a:4a:a0:bd:06:27:13:7b:ca:4c:40:96:
                    33:80:e9:bf:8d:7a:fb:16:ea:83:63:36:77:83:ef:
                    3d:e1:24:8d:36:5e:a8:32:c2:60:c7:64:6f:38:95:
                    94:16:3a:7d:49:ac:5f:a1:d1:f3:ab:64:b6:c1:ab:
                    a1:2f:99:49:63:46:cf:b7:fc:77:bd:a4:bf:6c:f9:
                    bc:11:f7:23:33:dd:a9:48:1c:9a:18:79:a0:28:5e:
                    9f:5b:10:29:ff:90:47:b4:1f:fc:ca:60:1a:15:84:
                    b1:56:ee:51:7e:f4:5d:08:a2:55:0f:52:a8:d5:ed:
                    dd:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:36:4D:89:DE:BF:D0:0C:E0:0B:AD:AC:E4:4B:4E:56:4C:46:42:A3
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/TTZNid6_0AzgC62s5EtOVkxGQqM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:1a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         88:2d:a9:21:3f:45:03:54:b9:89:fd:41:ea:48:ec:b2:8c:9a:
         2b:77:f7:58:07:b6:80:30:3d:40:4c:9e:fe:8b:16:e5:5e:72:
         3c:53:d2:5b:b6:75:4b:03:fe:fe:31:5d:7e:47:89:f1:7b:32:
         58:af:55:98:8d:1a:2e:74:2a:1b:4c:ba:0a:c2:c0:78:87:14:
         d7:4b:dc:e1:34:3b:c4:43:e6:ca:2f:0f:b2:fd:98:9a:d4:de:
         ad:2c:39:a8:36:d0:de:62:40:50:94:f3:0e:c4:83:7e:c9:ab:
         bd:54:c8:1f:77:af:0b:ea:9f:98:38:4f:4a:56:ed:3e:89:d8:
         83:99:d6:0c:93:11:c9:b6:69:e1:6e:a4:d2:4b:44:bd:10:a9:
         97:c2:84:f3:79:99:be:5c:01:2b:22:00:8f:ea:18:37:2b:5d:
         ac:74:21:e2:1b:48:85:d8:2c:2d:fc:28:48:0a:f5:c2:62:67:
         79:34:aa:5b:a6:1d:39:6d:bf:29:a9:33:95:d2:8f:03:f1:94:
         4e:f6:f3:71:cc:e5:b6:a8:1d:b8:50:3d:20:71:d2:cd:08:e8:
         1b:55:12:d2:0f:81:e9:d6:22:06:dc:cc:0d:7d:d7:ec:15:8f:
         22:10:4b:9a:e1:85:12:08:b2:27:10:a2:07:29:8e:2a:81:41:
         3d:ca:70:a0
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICBfswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjAzMDEw
MjE2MTNaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDREMzY0RDg5REVCRkQw
MENFMDBCQURBQ0U0NEI0RTU2NEM0NjQyQTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDOu+Q8RfBvK9rapSrSEmGWvHcTvULFQV7y2NV5qOaqkSMGzvrJ
i+SuOoBd3ZGIYK4EpXIzx5T/Wxmmunbd2DGjZMvBCy3/sbHaYb/hQ6D4KnT3a2Sf
Law9T3zXVqGEKRYI7bjWPBe5Npq+x8roq4pptKUMo0OWvFqiXYqg9U/1yZ7FZpoT
QT8odTpKoL0GJxN7ykxAljOA6b+NevsW6oNjNneD7z3hJI02XqgywmDHZG84lZQW
On1JrF+h0fOrZLbBq6EvmUljRs+3/He9pL9s+bwR9yMz3alIHJoYeaAoXp9bECn/
kEe0H/zKYBoVhLFW7lF+9F0IolUPUqjV7d3jAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUTTZNid6/0AzgC62s5EtOVkxGQqMwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9UVFpOaWQ2XzBBemdDNjJzNUV0T1ZreEdRcU0u
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAaxowDQYJKoZIhvcNAQELBQADggEBAIgtqSE/RQNUuYn9QepI
7LKMmit391gHtoAwPUBMnv6LFuVecjxT0lu2dUsD/v4xXX5HifF7MlivVZiNGi50
KhtMugrCwHiHFNdL3OE0O8RD5sovD7L9mJrU3q0sOag20N5iQFCU8w7Eg37Jq71U
yB93rwvqn5g4T0pW7T6J2IOZ1gyTEcm2aeFupNJLRL0QqZfChPN5mb5cASsiAI/q
GDcrXax0IeIbSIXYLC38KEgK9cJiZ3k0qlumHTltvympM5XSjwPxlE7283HM5bao
HbhQPSBx0s0I6BtVEtIPgenWIgbczA191+wVjyIQS5rhhRIIsicQogcpjiqBQT3K
cKA=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:17:20 2026 by rpki-client