Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/WoehOY17R2SPb9MbVJ2dSSMsNQs.roa
File:                     WoehOY17R2SPb9MbVJ2dSSMsNQs.roa (raw, json)
Hash identifier:          mK7eu1o7tY6ZQxXE4lSE3vS8WCVyXjpvK/dHZudZ+SM=
Subject key identifier:   5A:87:A1:39:8D:7B:47:64:8F:6F:D3:1B:54:9D:9D:49:23:2C:35:0B
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       060F
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/WoehOY17R2SPb9MbVJ2dSSMsNQs.roa
Signing time:             Sun 01 Mar 2026 02:20:55 +0000
ROA not before:           Sun 01 Mar 2026 02:20:55 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:8f00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1551 (0x60f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 02:20:55 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=5A87A1398D7B47648F6FD31B549D9D49232C350B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b6:9a:4f:96:71:c7:1d:a8:ce:3e:73:ab:cc:
                    c2:30:e0:7f:8c:40:d4:0b:27:51:da:c7:00:94:97:
                    fe:0a:e2:38:6f:8f:ac:91:85:57:11:5e:5a:1f:b2:
                    68:28:57:b2:e5:2b:45:29:52:47:a0:b8:aa:74:c7:
                    b2:b0:bf:8f:ef:a7:ae:ba:ec:9d:a9:fa:ed:1b:41:
                    fe:f9:34:df:57:e4:6d:7b:f8:f5:d4:7c:8f:f7:1e:
                    cd:1b:9d:39:ff:e8:71:ca:20:9d:42:03:3c:51:59:
                    e6:06:29:da:57:03:88:2c:04:49:de:c4:f7:3c:c0:
                    90:f8:cb:10:89:6a:ab:61:e0:35:d0:b8:b0:1b:f8:
                    00:76:60:32:2f:d8:4a:c4:10:fd:ef:03:72:9a:2c:
                    49:54:82:6d:9a:d4:0e:d4:6f:be:45:04:3b:52:12:
                    c1:5b:cc:d9:f3:26:09:f4:ae:5f:53:95:5c:e1:55:
                    7e:fd:3c:1f:e3:fd:c0:29:76:b2:2b:22:ab:b1:90:
                    a3:96:8c:06:cf:c5:ee:6e:73:de:16:67:4e:57:53:
                    a0:f8:81:88:d9:29:9e:17:96:59:d9:94:e9:1d:24:
                    29:c5:0b:7f:21:37:96:60:8b:19:bc:4e:31:e2:32:
                    fb:46:07:0d:14:9d:1f:4b:8e:61:2e:45:67:63:49:
                    eb:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:87:A1:39:8D:7B:47:64:8F:6F:D3:1B:54:9D:9D:49:23:2C:35:0B
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/WoehOY17R2SPb9MbVJ2dSSMsNQs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:8f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         34:29:2d:a8:67:50:be:cd:be:59:a7:dc:62:c6:9e:98:a6:5d:
         bd:8f:ac:66:f2:f7:99:f0:11:6b:b2:e1:a6:ee:d2:9d:be:d3:
         04:38:84:51:ed:f4:af:2d:9c:91:81:8a:9d:83:71:bd:94:e0:
         fa:56:f7:2c:81:25:a8:10:5d:3e:e6:50:49:22:0d:d9:bd:e3:
         62:9a:b1:b9:0f:a1:69:84:c5:ae:c7:18:c8:db:9e:db:50:af:
         ee:16:e0:05:f7:31:b4:47:c4:9c:6c:88:c9:d2:0e:c4:ec:17:
         0f:ba:5b:41:47:03:95:e2:35:02:98:30:a6:00:b6:9b:ad:81:
         7a:11:d3:5a:0e:34:70:cd:ff:cb:e5:b2:fb:82:93:4e:20:ca:
         b5:bb:5d:4c:bc:9d:58:db:1b:bc:e6:a6:10:51:fc:08:8b:f3:
         df:b9:03:66:fb:5b:5b:a1:fc:c9:e6:ac:02:08:db:17:71:2f:
         14:1b:de:df:b0:13:69:6a:0d:5c:91:d2:03:0b:f2:5b:7f:a5:
         44:05:95:28:65:94:aa:e7:b4:a6:ff:b1:2e:9b:66:da:54:ca:
         c4:2f:a4:5d:70:90:1e:f2:cd:00:3d:15:5a:0a:88:da:7d:ff:
         2e:d6:d1:4c:86:ee:ac:67:a9:d3:ce:e4:95:86:41:26:f2:5c:
         65:ae:56:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:57:59 2026 by rpki-client