Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/_RUpKk_ciPCl1p-OWpUK2pYvsag.roa
File:                     _RUpKk_ciPCl1p-OWpUK2pYvsag.roa (raw, json)
Hash identifier:          jlMH1rWqdlVgSKxwlHjwTsUoo/mBV4OaKkbqsIPxLKQ=
Subject key identifier:   FD:15:29:2A:4F:DC:88:F0:A5:D6:9F:8E:5A:95:0A:DA:96:2F:B1:A8
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       059C
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/_RUpKk_ciPCl1p-OWpUK2pYvsag.roa
Signing time:             Sun 01 Mar 2026 01:56:42 +0000
ROA not before:           Sun 01 Mar 2026 01:56:42 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:1700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1436 (0x59c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 01:56:42 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=FD15292A4FDC88F0A5D69F8E5A950ADA962FB1A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c6:f9:f2:3b:d3:d7:42:cc:f4:fa:a1:a4:84:
                    5b:cc:e5:c6:38:e8:f1:a2:bf:f0:59:33:aa:60:83:
                    f8:34:38:27:43:ae:36:fb:cc:92:d7:cc:4a:37:0b:
                    55:06:d2:24:de:1c:87:8d:a9:fc:f2:1a:b8:ca:ee:
                    9e:2d:53:06:f2:54:9f:e4:88:d8:03:00:21:5e:95:
                    c9:1c:d6:4a:ba:4e:45:fb:84:0d:fa:24:2b:2e:3b:
                    63:43:c6:b4:1b:60:9a:c9:72:20:de:0c:2e:8c:cb:
                    67:cc:a2:e5:1a:91:1d:08:e9:ba:a7:ec:39:c9:17:
                    a4:69:e0:db:e0:88:b4:7d:4d:91:44:6b:00:bd:04:
                    2a:7e:aa:33:1e:8c:13:2b:82:1f:c6:92:42:94:c5:
                    4b:14:81:fb:33:46:51:dd:44:ac:4c:67:76:77:cf:
                    2d:d6:21:cb:a0:bf:ec:cb:71:e1:7b:23:92:e4:c4:
                    c3:09:8d:23:96:bf:d5:f7:d8:37:10:d1:b3:f8:d5:
                    f0:bc:05:ab:bb:61:cf:6a:73:18:ef:ba:80:9f:db:
                    9d:b8:30:be:7f:5d:f8:46:f5:a5:98:bf:d0:1b:09:
                    a8:68:ab:1e:ad:39:92:32:9d:b1:b9:a4:27:df:ca:
                    ca:d8:0f:dd:4a:a7:7b:51:df:83:8d:ef:26:18:4b:
                    32:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:15:29:2A:4F:DC:88:F0:A5:D6:9F:8E:5A:95:0A:DA:96:2F:B1:A8
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/_RUpKk_ciPCl1p-OWpUK2pYvsag.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:1700::/40

    Signature Algorithm: sha256WithRSAEncryption
         9e:07:2e:b0:7b:ef:27:d8:98:c5:25:f4:79:06:c0:97:04:d6:
         1d:b5:24:57:5f:42:73:49:6d:2e:3c:63:e7:b6:08:eb:f3:d8:
         e2:1d:19:ac:3f:2b:d1:25:b8:84:5e:d5:03:26:a7:41:df:9f:
         05:51:ad:be:cb:89:4a:7d:48:eb:57:a5:31:d9:fe:95:ba:71:
         dd:fc:f2:41:3e:e4:9b:52:58:a1:ea:b4:5e:94:d1:22:b3:ed:
         79:36:24:dd:b6:81:35:e2:49:e0:7b:44:ac:41:1a:24:6f:7a:
         73:de:ca:d6:79:04:29:3f:e1:0f:0f:11:f9:ee:14:b9:07:f2:
         2e:e4:d0:d3:6a:d3:d9:6b:c9:44:d1:e9:67:93:6d:f7:f2:fa:
         e1:c4:9a:bd:bf:89:ef:6a:5b:82:4e:07:ad:fd:f9:b9:b0:62:
         d0:61:f8:d6:40:b4:64:a0:57:97:3a:2e:db:71:5d:9c:9f:8a:
         40:81:79:77:04:7c:0c:36:44:ba:1c:a2:e3:d2:e5:40:be:38:
         fe:7c:b9:4f:ff:db:98:bf:dc:23:eb:f3:09:f3:82:3a:3e:84:
         4b:a8:db:b6:35:2e:b7:71:14:76:63:2d:d2:64:ab:68:d0:c8:
         19:a4:c3:e5:46:c3:47:3d:18:ab:da:2c:b1:66:b4:64:68:5e:
         e0:08:bb:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:54:24 2026 by rpki-client