Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/WrWb_m9LAxCMqFdzhUSn9LN1QJs.roa
File:                     WrWb_m9LAxCMqFdzhUSn9LN1QJs.roa (raw, json)
Hash identifier:          xNA5dMYZVb7ctmuLqKVAzK4ZhdPBN4frD6KQQ1KC+yo=
Subject key identifier:   5A:B5:9B:FE:6F:4B:03:10:8C:A8:57:73:85:44:A7:F4:B3:75:40:9B
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       061F
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/WrWb_m9LAxCMqFdzhUSn9LN1QJs.roa
Signing time:             Sun 01 Mar 2026 02:21:05 +0000
ROA not before:           Sun 01 Mar 2026 02:21:05 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:7c00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1567 (0x61f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 02:21:05 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=5AB59BFE6F4B03108CA857738544A7F4B375409B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:49:6d:b9:93:a7:6f:ec:b6:5e:e0:9c:d1:7b:
                    40:3d:71:ce:ad:d0:88:ec:5c:11:ac:7d:f8:5d:bb:
                    b2:de:cf:95:f5:7d:48:61:25:6d:0b:84:a5:8b:da:
                    b2:ee:7b:66:f9:5f:79:ce:4a:06:7e:f7:6d:ac:21:
                    f0:75:71:b7:51:dc:8d:5c:aa:f6:76:63:ce:fc:c2:
                    c2:24:63:f8:8c:13:ac:77:8d:c5:d4:c8:08:f1:8c:
                    88:06:36:f1:b9:45:f1:85:7c:86:92:12:66:fa:d2:
                    6d:be:2f:14:e6:d9:5c:b7:92:36:0c:17:28:d2:1d:
                    30:68:f2:af:21:3e:c3:89:37:5b:5a:7a:b5:59:d4:
                    df:ca:cc:58:20:17:50:ac:ee:18:47:92:8b:eb:3b:
                    a9:f9:9c:cc:17:5d:ed:f6:8a:81:d9:65:bd:76:1d:
                    f6:6b:98:c3:14:e8:cd:4d:8d:89:e8:f0:ca:e7:ca:
                    e1:9b:7b:c2:da:3b:7a:e5:cb:76:32:18:6f:c6:38:
                    08:a4:01:b6:6f:30:fb:83:cb:e5:0c:76:d0:9f:84:
                    8b:bf:33:4f:0b:5d:26:de:34:b2:78:47:30:e5:1d:
                    71:b3:64:03:7d:06:e8:aa:c0:7e:45:1f:e3:fa:09:
                    ea:32:11:d8:85:c2:88:d8:04:06:7d:ef:d5:ec:be:
                    cf:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:B5:9B:FE:6F:4B:03:10:8C:A8:57:73:85:44:A7:F4:B3:75:40:9B
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/WrWb_m9LAxCMqFdzhUSn9LN1QJs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:7c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         51:7c:2a:e0:cd:0f:e5:4c:ba:bf:08:1d:05:4c:4b:02:1a:1e:
         d3:1b:73:93:8b:d5:40:0f:1c:a5:99:70:a8:5e:7f:52:4e:b2:
         41:a3:85:5a:a4:d7:25:ab:cc:26:ab:d5:65:c0:4a:79:56:2a:
         14:c8:bf:88:93:da:21:53:17:5d:89:e8:56:5c:7b:54:cf:f9:
         49:b6:fa:93:b5:6b:52:cc:d3:d4:93:28:db:e0:1f:5e:cd:4b:
         8f:31:2c:87:8b:ce:6b:60:86:a1:cf:cb:13:32:06:2b:1e:93:
         ef:04:5a:f8:be:d4:10:b7:84:df:f7:ce:31:22:bf:61:01:c9:
         bb:af:31:df:99:e4:07:bb:74:91:9b:a9:80:57:c9:b5:69:76:
         32:71:df:5c:25:f5:c7:6e:30:f5:09:7e:c8:13:e5:cd:e5:95:
         00:86:28:7a:5b:f5:a0:d8:b0:76:bb:55:ba:aa:0f:f2:6f:45:
         90:64:31:88:2c:d8:20:be:35:d4:af:8c:ba:11:ec:d7:b0:f7:
         76:94:ba:b3:1b:3d:0c:8e:ee:22:9e:bf:81:92:15:05:35:17:
         a6:70:14:fe:17:af:06:84:34:03:d0:af:a8:f1:bc:0d:12:17:
         70:f6:4a:cf:9d:4f:53:a9:54:d0:0c:c7:36:f1:35:ce:3e:81:
         52:ae:e9:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:26:14 2026 by rpki-client