Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Zdysf1h5QVg3JHxVNHXx35bvySg.roa
File:                     Zdysf1h5QVg3JHxVNHXx35bvySg.roa (raw, json)
Hash identifier:          VG0b3VRbEe74u9HgkBH+rgX3++dtamiJB0qLzf61zjY=
Subject key identifier:   65:DC:AC:7F:58:79:41:58:37:24:7C:55:34:75:F1:DF:96:EF:C9:28
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0528
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Zdysf1h5QVg3JHxVNHXx35bvySg.roa
Signing time:             Sun 01 Mar 2026 01:34:47 +0000
ROA not before:           Sun 01 Mar 2026 01:34:47 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:c200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1320 (0x528)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 01:34:47 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=65DCAC7F5879415837247C553475F1DF96EFC928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b7:93:b9:1c:e5:d2:ac:eb:70:e7:62:01:99:
                    07:e7:43:99:1e:0f:4d:c0:fc:f5:ff:b2:97:29:83:
                    f6:e0:26:94:67:5b:c4:88:52:e1:88:e9:87:11:e6:
                    26:fa:fb:b5:2b:63:c0:00:f2:12:ad:c8:2c:27:79:
                    e4:aa:46:7e:35:b3:c5:11:07:81:ad:b7:2e:4f:b5:
                    7d:91:fc:59:5d:96:7a:c4:6a:82:fb:c8:d3:0d:a2:
                    10:f1:68:3c:02:3f:f0:41:45:0d:13:56:b4:78:44:
                    70:28:d9:31:5e:03:51:a4:33:90:16:ca:59:6d:de:
                    2f:57:8f:96:4a:88:62:93:1e:77:d4:7b:95:e4:72:
                    94:bd:cf:d4:87:c0:73:03:0b:1f:dc:94:b7:2e:6d:
                    a1:28:7e:fa:ef:59:ad:01:54:68:51:58:79:ea:84:
                    4f:86:d1:32:f3:37:11:a4:a6:4e:8b:f3:6c:a4:5c:
                    71:00:e1:16:3b:46:96:b9:61:a0:68:2e:0c:9e:47:
                    94:ae:03:51:40:14:3f:53:f1:3f:3a:71:1f:ba:3e:
                    1e:30:cc:ea:04:54:8c:3d:a2:0f:40:7b:98:3a:4e:
                    ef:ab:aa:49:78:1f:a7:27:96:1e:63:de:13:4c:6e:
                    45:49:66:f9:ac:88:a7:89:c4:f4:4a:8f:c3:7a:bb:
                    54:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:DC:AC:7F:58:79:41:58:37:24:7C:55:34:75:F1:DF:96:EF:C9:28
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Zdysf1h5QVg3JHxVNHXx35bvySg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:c200::/40

    Signature Algorithm: sha256WithRSAEncryption
         40:c2:8c:50:ac:86:3b:06:56:d9:3a:e9:99:49:13:92:5f:43:
         f9:d3:60:0a:35:93:b9:8a:2c:7e:dc:d1:6c:67:dc:6a:c0:0a:
         49:b5:0c:b2:59:ba:49:06:47:2a:f5:5c:12:47:94:5f:84:72:
         c4:e8:04:e6:56:2b:60:12:19:34:7b:85:17:c3:18:e0:c5:1a:
         38:89:eb:23:9b:44:19:fa:77:47:4c:e2:16:d3:4d:37:c3:87:
         cb:db:cb:b3:95:44:0e:f5:c4:47:6a:09:45:11:53:10:1a:6f:
         2f:b6:90:d9:05:f7:b5:78:13:97:dd:38:26:a7:ce:4b:c6:ac:
         98:d2:0a:b3:f9:cb:1b:9b:a3:2b:41:60:5c:64:f2:1d:ec:b6:
         42:75:c6:a8:82:b0:78:e5:b6:76:38:e2:ce:25:df:e8:bb:0c:
         b7:8b:4a:82:1f:97:f3:bb:79:5e:32:da:76:ac:b7:a7:73:63:
         cc:a3:8b:b2:52:1e:1c:7b:b5:b2:0c:88:55:69:b1:7f:8b:28:
         de:0e:f0:54:13:59:87:e9:ed:81:b0:1c:d8:b8:42:af:2f:6c:
         66:ea:6b:55:80:ec:c6:5d:64:80:46:10:4d:26:35:f4:c4:94:
         c3:79:f7:e3:85:28:54:fe:85:8c:33:1a:a4:a4:90:dd:91:f2:
         b2:ca:d9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:11:12 2026 by rpki-client