Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/XBTZmP7RhE1skR2SkXh4TdTx8dQ.roa
File:                     XBTZmP7RhE1skR2SkXh4TdTx8dQ.roa (raw, json)
Hash identifier:          cvQ0lFzZHnpOfLYgUGLRdFIZ5TiRRtU/LiAcpBQKFdI=
Subject key identifier:   5C:14:D9:98:FE:D1:84:4D:6C:91:1D:92:91:78:78:4D:D4:F1:F1:D4
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       05F6
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/XBTZmP7RhE1skR2SkXh4TdTx8dQ.roa
Signing time:             Sun 01 Mar 2026 02:16:11 +0000
ROA not before:           Sun 01 Mar 2026 02:16:11 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:9400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1526 (0x5f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 02:16:11 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=5C14D998FED1844D6C911D929178784DD4F1F1D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:24:3b:6a:e8:60:6a:cf:90:d1:fb:8b:cc:5c:
                    97:4a:0c:e6:30:15:85:01:af:44:1f:d4:62:7f:89:
                    0f:4f:43:b0:f5:2e:80:76:8a:ce:ee:35:05:ab:eb:
                    77:29:00:29:88:6d:dc:c3:e7:42:d9:a8:e5:1e:c8:
                    96:dd:3b:52:51:f2:9b:d8:6a:a8:52:9e:55:94:64:
                    59:b3:16:74:bc:8f:0c:01:d9:9a:2e:37:3e:ff:43:
                    75:c4:14:e4:8d:b3:dd:47:5a:02:96:67:46:ec:1e:
                    39:25:e4:59:a7:26:a1:19:9e:f6:7d:fa:6a:2a:4e:
                    7a:3f:83:07:01:03:64:5a:73:94:31:07:84:af:08:
                    d8:67:0f:aa:aa:b6:33:79:e8:e6:98:d8:c7:b1:ba:
                    26:7b:37:17:83:31:b0:ec:e7:da:7a:1a:cc:1a:4f:
                    fa:04:3b:3d:9b:cd:d8:4c:fe:4a:db:76:a5:d4:d6:
                    6a:46:ad:66:8d:3f:ed:ba:38:ad:85:4b:98:40:16:
                    02:e5:f3:64:3f:a3:5b:81:25:23:67:90:48:2c:8f:
                    d3:62:b7:48:93:bc:8d:17:8b:10:4b:10:2f:08:b6:
                    8c:5c:a5:64:90:cf:4c:e0:35:07:db:ba:9b:c5:1b:
                    ec:a2:a5:0a:f2:b8:32:8b:6b:e1:2e:ae:17:38:bc:
                    88:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:14:D9:98:FE:D1:84:4D:6C:91:1D:92:91:78:78:4D:D4:F1:F1:D4
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/XBTZmP7RhE1skR2SkXh4TdTx8dQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:9400::/40

    Signature Algorithm: sha256WithRSAEncryption
         46:83:b7:c0:af:75:b4:88:a2:47:6c:e5:e9:a8:30:7b:d8:98:
         cc:46:3f:28:b6:04:4f:37:62:14:0a:5b:4d:a4:91:b3:19:64:
         9c:12:67:7a:55:e6:43:0d:23:a6:f8:0e:01:8b:e5:bd:39:3f:
         7a:64:de:1b:af:d3:d2:c4:70:c3:3e:b3:f1:a0:6d:a4:1b:9e:
         69:df:5f:e2:24:99:f2:55:bc:7e:da:c6:3d:ee:2b:bc:ba:d1:
         ec:fa:e5:66:0d:07:80:cb:db:14:b1:2d:51:07:9e:11:a8:36:
         2e:92:f9:43:5c:6c:65:bd:d4:be:2a:3c:d0:d6:01:66:b2:67:
         a6:1f:b8:34:3d:ef:e0:7c:17:67:65:57:96:ed:51:d6:96:82:
         4e:f9:67:00:24:11:90:f8:18:9b:77:d1:e6:99:60:8c:04:2d:
         1b:b5:15:31:3f:fe:a3:cd:06:ad:3b:43:bb:68:31:a6:6e:5c:
         6a:eb:0f:e6:07:ac:9f:8d:14:ac:c2:46:e5:85:6b:03:e1:0b:
         00:29:a7:07:7b:78:55:9b:94:c1:21:4e:cd:f6:e2:b0:64:62:
         ba:ca:fd:58:be:bc:52:7d:61:88:bf:76:29:a2:fc:9f:7b:5c:
         b4:ba:32:32:2a:67:47:46:a2:c5:6f:ce:b3:8c:25:7c:a3:ed:
         63:9b:67:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:04:19 2026 by rpki-client