Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Zh3oa62iXMlh_awrmKx8HkAnT_Y.roa
File:                     Zh3oa62iXMlh_awrmKx8HkAnT_Y.roa (raw, json)
Hash identifier:          uV3OttNi5S+hX6evEp3gVai5LhLCwDm+HV+XEZbxhqU=
Subject key identifier:   66:1D:E8:6B:AD:A2:5C:C9:61:FD:AC:2B:98:AC:7C:1E:40:27:4F:F6
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       05BA
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Zh3oa62iXMlh_awrmKx8HkAnT_Y.roa
Signing time:             Sun 01 Mar 2026 02:01:01 +0000
ROA not before:           Sun 01 Mar 2026 02:01:01 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:60:f008::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1466 (0x5ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 02:01:01 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=661DE86BADA25CC961FDAC2B98AC7C1E40274FF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c2:f4:b6:5c:8b:c8:b3:71:4f:a9:e8:58:8f:
                    f4:d9:c5:14:34:4d:d6:8d:a1:1c:fb:a0:ab:a5:8b:
                    26:69:8f:7f:0e:05:40:2c:03:cf:18:33:0c:1a:2a:
                    82:2b:d8:9e:aa:03:3b:f5:bf:4e:8e:aa:aa:83:b9:
                    63:ed:4f:a8:78:09:fa:f2:5d:a2:bf:73:b2:a1:26:
                    5b:c4:f4:0b:7a:a5:01:99:25:3d:25:b3:a1:71:8e:
                    a2:24:b9:62:98:56:11:6c:0f:21:f6:72:a0:d7:5c:
                    1e:fa:7f:83:13:8a:b9:de:64:50:43:77:c8:cc:9b:
                    15:cf:39:bb:34:75:3f:23:d5:63:df:c2:ac:1a:83:
                    b2:4e:66:0f:97:82:c4:5e:24:9b:23:82:e5:72:5a:
                    3d:89:f2:38:98:f1:bc:25:de:d4:6e:78:b1:5c:92:
                    b0:8e:86:1e:38:76:cd:3c:6b:63:86:f2:0b:01:40:
                    07:cf:f0:88:e5:89:3d:04:27:55:20:5d:3d:74:e7:
                    62:93:cc:92:17:5c:ff:fd:b6:05:d4:49:b7:43:d3:
                    81:73:9c:1c:11:32:b8:21:a0:6b:da:1b:ee:77:4b:
                    d1:d2:ed:7c:43:57:37:fb:ba:91:26:45:e9:fd:50:
                    6e:7e:96:ad:6e:13:a5:8d:a3:2c:74:ea:ad:62:30:
                    68:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:1D:E8:6B:AD:A2:5C:C9:61:FD:AC:2B:98:AC:7C:1E:40:27:4F:F6
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Zh3oa62iXMlh_awrmKx8HkAnT_Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:60:f008::/46

    Signature Algorithm: sha256WithRSAEncryption
         46:9d:9a:e0:09:4a:58:2c:87:db:98:23:74:51:00:25:50:f4:
         f1:17:4c:b1:02:99:c5:6b:5d:68:27:7b:17:5d:c4:1d:bd:f5:
         0f:c8:d8:de:26:69:0d:15:35:7f:ae:a3:e9:4c:28:5d:09:c2:
         bd:7b:20:93:8a:92:3d:21:91:5e:b1:20:78:13:33:f6:eb:3a:
         bd:85:c0:9c:63:67:b6:4b:b0:51:57:67:3e:5b:c0:b3:8f:c2:
         a8:8e:e0:fc:99:e9:3f:15:26:2d:4c:e8:a3:a0:c1:1e:07:1b:
         46:80:32:5f:f5:3c:e0:c8:cd:7a:27:8e:cb:e9:52:16:45:fb:
         c6:27:79:84:ea:38:d7:8f:64:6c:31:fc:bb:3d:cd:f5:92:2d:
         6c:da:85:38:b6:e8:aa:4b:27:1b:63:1c:77:9f:13:18:aa:26:
         e9:64:11:ef:52:35:a1:4f:64:36:d9:49:e4:ed:2a:aa:d7:4e:
         da:92:35:4b:30:12:fd:57:e6:ce:c0:04:5d:f6:ad:c1:89:1c:
         ca:87:80:77:bf:eb:f9:c2:24:1e:06:13:8c:a8:89:9f:c2:e5:
         af:a2:eb:a3:dd:81:af:aa:6d:0a:b2:1f:b6:50:99:cd:d7:8d:
         f4:49:80:d5:73:ac:50:0b:2e:0f:3a:9d:69:b8:42:7e:62:f7:
         87:26:48:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:17:22 2026 by rpki-client