Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/YSzx8XP__kllvSQ7gauhRW1x6pw.roa
File:                     YSzx8XP__kllvSQ7gauhRW1x6pw.roa (raw, json)
Hash identifier:          XV1JC0Bv/5B60VgjSmzKZRhT5xSa93lou8ik63s1rQQ=
Subject key identifier:   61:2C:F1:F1:73:FF:FE:49:65:BD:24:3B:81:AB:A1:45:6D:71:EA:9C
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0589
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/YSzx8XP__kllvSQ7gauhRW1x6pw.roa
Signing time:             Sun 01 Mar 2026 01:56:34 +0000
ROA not before:           Sun 01 Mar 2026 01:56:34 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:a00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1417 (0x589)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 01:56:34 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=612CF1F173FFFE4965BD243B81ABA1456D71EA9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8a:ee:29:ed:95:d3:d6:fd:15:0b:d0:4f:c9:
                    79:67:82:dc:92:b9:50:74:0e:b1:5c:ba:2e:89:e0:
                    b6:dd:e2:d2:f8:cb:26:ee:22:46:7e:f0:ac:09:4a:
                    34:04:d4:5c:6c:35:a1:70:a1:8c:61:0d:74:4a:a4:
                    61:8a:eb:e6:bb:af:53:59:52:21:ce:33:89:74:ad:
                    59:d3:35:f9:59:0d:a9:9b:bc:88:29:1b:a9:90:a1:
                    69:5c:8f:7b:23:7a:f5:18:2e:2e:54:9c:bf:3c:b6:
                    f2:a9:ac:ff:db:76:42:86:52:ff:85:a0:86:77:aa:
                    62:8b:b9:13:7d:29:88:f4:6d:3e:5c:57:8b:e2:3a:
                    93:dc:a0:91:2e:7b:a0:7f:f9:0f:79:a7:bc:53:09:
                    36:48:14:e4:b1:21:9d:9d:c9:f6:e9:47:63:4a:92:
                    fe:6d:fb:35:9f:6f:0f:89:f4:6f:78:94:9e:2e:a5:
                    0a:1e:2d:79:6d:d9:77:e6:93:97:2d:e5:de:77:a9:
                    1c:20:f8:d5:c8:c2:a8:4b:44:61:46:ef:b6:14:29:
                    9b:05:82:6a:83:aa:04:23:80:23:52:ff:03:08:51:
                    11:ab:57:22:55:5f:0c:98:a9:6d:d3:57:84:96:ca:
                    3d:9c:d6:29:cb:38:26:6e:10:16:9e:de:b8:6d:f7:
                    94:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:2C:F1:F1:73:FF:FE:49:65:BD:24:3B:81:AB:A1:45:6D:71:EA:9C
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/YSzx8XP__kllvSQ7gauhRW1x6pw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         29:57:4f:6d:fa:09:f3:1a:c6:bc:9b:e4:78:45:e9:2a:23:52:
         16:d2:94:c2:29:ad:37:82:20:0a:8e:f4:78:6d:4a:2a:ae:fb:
         eb:f8:c1:72:5e:0a:d8:72:ff:5f:e8:77:18:90:0e:e4:ad:4c:
         c5:3b:c1:60:be:b1:2a:a3:8e:d3:5f:67:c4:a3:63:c6:30:5c:
         99:74:a7:76:a1:27:45:c1:b0:51:0f:1c:52:8f:05:70:ec:7c:
         a2:0c:36:ae:27:ec:b6:b4:a8:1c:4d:4d:5d:2d:39:f7:64:a4:
         cb:98:fe:bf:a8:03:6f:17:82:36:f6:56:59:29:80:72:e7:c3:
         b6:1e:1c:4b:0a:fd:db:c7:87:0a:6c:c9:e8:92:20:5f:be:c1:
         95:a1:0c:fe:0a:19:30:26:e3:90:b5:93:8f:a0:34:b8:e3:e0:
         35:24:bf:6b:71:09:af:81:b4:c2:c3:f0:15:33:09:18:e5:52:
         bf:d0:85:d3:ae:7c:66:a6:81:62:fb:35:e6:43:18:c4:a0:d5:
         ff:64:3e:6f:ea:53:1b:f2:41:c2:4e:55:7b:48:7f:ce:cf:90:
         e4:be:c6:da:3e:35:01:d3:9f:1d:3f:54:a9:4e:88:32:07:77:
         03:a7:e9:80:cd:82:be:2f:59:f4:75:dd:79:e8:b4:9a:31:20:
         ef:c1:43:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:53:37 2026 by rpki-client