Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/UZt6mXN3EDgSJqTHJaF-V4XqHp8.roa
File:                     UZt6mXN3EDgSJqTHJaF-V4XqHp8.roa (raw, json)
Hash identifier:          25261FGHpChnBL55ibEq0j8BqLF5wtm2T1EV2REBKOY=
Subject key identifier:   51:9B:7A:99:73:77:10:38:12:26:A4:C7:25:A1:7E:57:85:EA:1E:9F
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       05F8
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/UZt6mXN3EDgSJqTHJaF-V4XqHp8.roa
Signing time:             Sun 01 Mar 2026 02:16:12 +0000
ROA not before:           Sun 01 Mar 2026 02:16:12 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:da00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1528 (0x5f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 02:16:12 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=519B7A99737710381226A4C725A17E5785EA1E9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2f:c1:d8:da:a1:94:d0:05:45:4c:5e:5e:59:
                    65:de:72:12:f4:d1:85:cd:53:a4:cd:b6:64:37:97:
                    11:5c:17:4f:3a:6f:07:1f:24:2a:38:4c:cf:6b:27:
                    53:3a:8b:3b:b7:2e:b4:a8:23:47:74:03:ef:a2:57:
                    15:63:5d:3f:88:d6:f5:85:12:b3:fa:69:a5:56:86:
                    ec:f4:ed:b6:12:47:79:21:b6:3b:0c:d3:a9:5a:38:
                    3f:6b:7f:07:da:96:c3:96:f7:86:5e:39:b1:d3:72:
                    68:1d:69:76:0c:9d:2d:97:59:5e:a1:50:df:ce:61:
                    f2:96:86:cf:ed:2e:20:25:84:1d:be:ed:6e:70:f4:
                    8c:eb:ee:cf:71:35:82:9a:bf:b9:28:9d:26:e1:2e:
                    54:8b:39:bb:38:0f:fc:6c:cd:4e:6d:2c:f6:26:23:
                    dc:e7:43:0f:45:42:b4:9e:3f:9c:12:33:98:2f:93:
                    a6:72:87:4f:32:9c:da:7b:4b:c9:e4:1e:2a:2b:91:
                    21:23:18:92:37:7c:9b:57:6e:5e:ba:0b:9f:af:7f:
                    36:26:bf:e6:6d:32:f6:e6:aa:ea:67:bd:20:e6:74:
                    cd:9c:bb:d8:59:54:ed:db:c6:db:a2:52:f5:25:70:
                    91:8d:dc:88:a9:7d:22:4d:1c:a1:e2:6b:2e:94:e7:
                    a6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:9B:7A:99:73:77:10:38:12:26:A4:C7:25:A1:7E:57:85:EA:1E:9F
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/UZt6mXN3EDgSJqTHJaF-V4XqHp8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:da00::/40

    Signature Algorithm: sha256WithRSAEncryption
         9e:49:b1:8a:3b:c1:db:b0:47:71:73:7c:08:a1:28:fe:c7:37:
         da:bb:05:21:c4:23:2d:c3:10:67:67:aa:05:51:76:58:6a:0e:
         a0:a7:88:00:41:89:d6:e7:9b:11:45:33:83:da:28:7e:ca:91:
         00:b4:e7:69:ea:0a:5b:33:23:aa:a1:f7:44:79:ba:a6:d0:98:
         2f:c1:74:f7:5c:22:d8:35:6c:37:fe:75:d9:83:bc:25:aa:11:
         47:4e:eb:b4:f5:91:b2:ae:bc:26:7b:3a:64:4d:b3:0f:6b:67:
         76:b9:44:ff:f9:45:cd:d6:21:4e:1a:60:c0:f2:3e:40:c3:e0:
         53:71:4c:f4:9b:81:a1:46:9b:ad:9e:22:1d:09:f2:b1:71:70:
         4a:30:8a:ac:32:ca:3a:94:60:aa:6a:73:f8:81:8d:f1:02:2e:
         09:a7:8e:5c:a7:f1:32:a7:66:bd:f1:bf:6e:b9:c0:d3:74:b1:
         a4:12:62:33:96:f1:20:b9:e0:3b:40:96:21:62:89:f7:12:72:
         b9:1e:6c:82:f9:9a:5d:48:f1:9f:11:57:b1:c9:08:47:34:fe:
         3e:2d:cd:9a:28:bb:95:39:7d:ac:21:77:8c:3c:64:75:a4:e0:
         19:48:a6:d6:76:13:d0:22:bb:bc:16:20:1e:8d:76:57:05:7f:
         54:00:14:a5
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICBfgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjAzMDEw
MjE2MTJaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDUxOUI3QTk5NzM3NzEw
MzgxMjI2QTRDNzI1QTE3RTU3ODVFQTFFOUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC2L8HY2qGU0AVFTF5eWWXechL00YXNU6TNtmQ3lxFcF086bwcf
JCo4TM9rJ1M6izu3LrSoI0d0A++iVxVjXT+I1vWFErP6aaVWhuz07bYSR3khtjsM
06laOD9rfwfalsOW94ZeObHTcmgdaXYMnS2XWV6hUN/OYfKWhs/tLiAlhB2+7W5w
9Izr7s9xNYKav7konSbhLlSLObs4D/xszU5tLPYmI9znQw9FQrSeP5wSM5gvk6Zy
h08ynNp7S8nkHiorkSEjGJI3fJtXbl66C5+vfzYmv+ZtMvbmqupnvSDmdM2cu9hZ
VO3bxtuiUvUlcJGN3IipfSJNHKHiay6U56YfAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUUZt6mXN3EDgSJqTHJaF+V4XqHp8wHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9VWnQ2bVhOM0VEZ1NKcVRISmFGLVY0WHFIcDgu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa9owDQYJKoZIhvcNAQELBQADggEBAJ5JsYo7wduwR3FzfAih
KP7HN9q7BSHEIy3DEGdnqgVRdlhqDqCniABBidbnmxFFM4PaKH7KkQC052nqClsz
I6qh90R5uqbQmC/BdPdcItg1bDf+ddmDvCWqEUdO67T1kbKuvCZ7OmRNsw9rZ3a5
RP/5Rc3WIU4aYMDyPkDD4FNxTPSbgaFGm62eIh0J8rFxcEowiqwyyjqUYKpqc/iB
jfECLgmnjlyn8TKnZr3xv265wNN0saQSYjOW8SC54DtAliFiifcScrkebIL5ml1I
8Z8RV7HJCEc0/j4tzZoou5U5fawhd4w8ZHWk4BlIptZ2E9Aiu7wWIB6NdlcFf1QA
FKU=
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:53:36 2026 by rpki-client