Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/X7Q8MLQUCytEayrKW5qInahKcgY.roa
File:                     X7Q8MLQUCytEayrKW5qInahKcgY.roa (raw, json)
Hash identifier:          kKZ1aksxmkbuHA5QippPzqPCHP42/ffVaA7njZ/Zi1c=
Subject key identifier:   5F:B4:3C:30:B4:14:0B:2B:44:6B:2A:CA:5B:9A:88:9D:A8:4A:72:06
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       05E1
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/X7Q8MLQUCytEayrKW5qInahKcgY.roa
Signing time:             Sun 01 Mar 2026 02:10:59 +0000
ROA not before:           Sun 01 Mar 2026 02:10:59 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:fb00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1505 (0x5e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 02:10:59 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=5FB43C30B4140B2B446B2ACA5B9A889DA84A7206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:fe:3b:ce:f3:da:90:5c:46:bb:46:2d:14:ef:
                    35:47:32:60:a5:1c:4f:da:66:80:73:d6:4d:ce:8d:
                    0b:f4:5e:b6:df:ea:c8:05:9c:bf:ba:e4:0b:48:59:
                    b8:e8:36:f3:0c:e5:4f:63:d7:76:3b:ad:1a:2c:ad:
                    e9:0e:1a:3a:c1:b3:07:c3:48:c7:48:93:91:d6:9d:
                    39:ee:d0:42:e2:07:c6:e9:5a:2d:8b:cd:f9:89:44:
                    4d:b2:10:75:a5:b1:a2:77:b0:31:f2:18:3e:af:12:
                    12:b1:18:98:57:94:14:6d:7f:b9:31:57:58:60:9e:
                    40:2e:e2:de:d3:58:de:49:34:5e:66:8d:3c:c9:ee:
                    f7:df:4e:87:eb:6b:b3:ea:73:5c:d4:82:49:3a:88:
                    fe:a3:14:b1:04:b3:f4:3e:33:ad:79:c9:ec:e1:ff:
                    ec:53:89:7c:29:7f:81:d4:b7:d2:7b:dc:9e:7b:3c:
                    d5:55:5e:a0:3b:0d:5a:5c:3c:12:5e:bd:28:d4:18:
                    29:df:29:4a:98:3c:55:b6:fd:26:0c:a3:96:d2:bd:
                    1a:e6:8e:59:29:1e:70:f0:43:2d:ed:df:0c:32:60:
                    f9:27:24:45:f5:cf:09:58:c6:59:fd:05:30:a0:ac:
                    18:66:ae:a0:ab:93:50:85:70:80:b4:b4:60:5c:35:
                    27:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:B4:3C:30:B4:14:0B:2B:44:6B:2A:CA:5B:9A:88:9D:A8:4A:72:06
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/X7Q8MLQUCytEayrKW5qInahKcgY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:fb00::/40

    Signature Algorithm: sha256WithRSAEncryption
         05:0f:ef:8c:9f:8c:77:27:c8:85:fa:2a:e4:6a:0c:e3:3c:bb:
         11:c7:bf:5f:23:a5:7e:69:5a:6b:63:0c:fc:e2:fd:f2:25:a7:
         6e:81:ed:df:60:18:93:c3:14:e8:24:05:76:3d:1e:91:1f:94:
         e1:b4:dd:b0:05:07:14:bc:26:7e:e2:2a:8a:1e:8a:54:a7:e6:
         04:15:33:02:1f:56:4e:ee:7f:2f:80:82:da:1a:60:87:cd:7e:
         c7:12:d8:8e:d9:f3:f7:2f:8b:49:c8:e8:04:63:d6:a6:81:d2:
         c7:6d:ed:c8:38:0d:c2:12:6a:c5:37:fb:87:f4:9f:04:09:b6:
         50:05:58:89:11:c5:9c:ae:b9:e5:7a:ee:82:a1:e9:fe:91:e1:
         83:f2:49:48:07:25:6f:40:42:ff:94:91:27:96:db:ec:ad:a6:
         66:28:a8:de:b2:11:06:e3:5d:1f:86:2f:56:5f:b0:89:a4:d7:
         e5:09:a7:5f:bf:d1:4a:63:54:e7:a5:55:9e:e8:1f:16:4a:31:
         1b:6d:fb:c0:89:fb:a9:f9:ba:7e:b5:96:14:43:31:a0:1f:8c:
         2e:37:09:be:a1:1d:f7:9d:0a:de:d2:8f:08:fb:e1:b3:8d:33:
         cd:51:c6:f0:6c:90:eb:fb:4d:18:4d:87:ae:9c:53:76:64:91:
         fb:05:3c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:06:35 2026 by rpki-client