Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/a-913G1C5XKvTM-Mz3Xo2uRyBO0.roa
File:                     a-913G1C5XKvTM-Mz3Xo2uRyBO0.roa (raw, json)
Hash identifier:          8trSdroeNRyrX9lpcztgfRUJ3uMAvtuoWw5sRGBUD2Y=
Subject key identifier:   6B:EF:75:DC:6D:42:E5:72:AF:4C:CF:8C:CF:75:E8:DA:E4:72:04:ED
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       059A
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/a-913G1C5XKvTM-Mz3Xo2uRyBO0.roa
Signing time:             Sun 01 Mar 2026 01:56:41 +0000
ROA not before:           Sun 01 Mar 2026 01:56:41 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:4c00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1434 (0x59a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 01:56:41 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=6BEF75DC6D42E572AF4CCF8CCF75E8DAE47204ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:78:78:6b:92:79:3b:72:9f:e2:71:d3:08:df:
                    d0:01:55:d8:d6:66:4a:61:3a:ca:81:85:81:c3:2f:
                    d4:16:fb:ff:da:f0:54:c4:44:62:89:0e:d6:76:66:
                    d6:98:0f:6d:91:61:b7:01:af:47:50:ff:a4:c9:f2:
                    cb:55:af:25:14:08:12:e9:61:6b:90:09:68:4d:d7:
                    38:e2:03:8c:8d:f0:42:e0:43:f5:cd:94:c3:12:bc:
                    fc:2f:82:44:bf:50:f8:5e:20:6c:1a:30:ea:24:70:
                    d4:93:96:dc:df:c3:03:a1:90:1e:d7:f3:80:49:ce:
                    ec:b6:91:92:bc:07:13:aa:d8:c9:8c:8a:d1:5f:08:
                    66:96:44:e6:a2:29:10:a4:86:f8:41:6b:e3:87:15:
                    0b:b4:40:bb:f1:4e:4c:a3:eb:b8:87:e2:af:a2:d8:
                    e9:34:16:19:d7:7e:a2:c1:86:7e:24:59:13:34:69:
                    ab:37:cb:89:d2:9a:8a:f6:67:a4:32:00:3a:3a:95:
                    8c:72:35:cc:2a:1a:4f:ed:a3:c5:05:c0:6a:69:57:
                    bf:59:1c:91:27:fe:d4:39:9c:3a:d8:a8:bf:5f:a5:
                    8d:fa:03:fd:54:00:63:43:51:87:b8:f6:c1:23:b7:
                    0c:fe:56:02:1d:da:6e:33:c9:17:12:64:b3:13:d7:
                    f4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:EF:75:DC:6D:42:E5:72:AF:4C:CF:8C:CF:75:E8:DA:E4:72:04:ED
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/a-913G1C5XKvTM-Mz3Xo2uRyBO0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:4c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         ba:4e:a3:c5:d3:ec:48:d7:5b:10:62:23:5b:d0:69:27:be:e7:
         de:c0:f4:77:d5:c2:f3:3b:7c:35:45:76:6c:52:a3:c9:1d:a2:
         13:f5:25:ff:56:b8:f2:19:fc:3e:b9:a8:94:ef:7d:18:4f:0c:
         8f:57:a4:8f:5d:e9:1c:ed:fc:13:d2:0a:13:a8:2e:67:8c:98:
         e8:e3:e4:c8:e9:64:04:3e:af:2c:5f:4b:8f:e0:bc:24:4b:b9:
         9e:75:c2:8f:06:91:f8:cb:3e:c2:e3:40:4e:55:c7:e9:c1:b1:
         e0:05:2c:75:5f:b4:f1:6e:90:02:ed:aa:12:e3:f5:4f:c4:39:
         a1:27:41:70:0d:b8:35:06:4d:1b:db:61:7f:e3:c8:1d:55:68:
         dd:6d:3b:4b:ad:10:5d:3b:96:ab:3b:ea:91:04:80:c1:f8:56:
         80:fa:47:a2:f2:43:55:8f:d8:29:71:3c:45:0a:5f:6d:6a:fb:
         b6:86:eb:b7:26:02:d1:27:13:9c:a8:1a:18:b2:bc:74:9c:f3:
         49:96:0a:b7:5a:b9:27:d8:e7:79:27:52:1f:8a:99:78:3d:f2:
         de:a1:50:92:b1:f7:a9:65:bd:85:4e:65:ca:61:6f:b1:7c:4b:
         5b:d0:17:84:c1:94:07:c8:e0:2f:ea:06:8c:d3:8d:e1:63:14:
         ff:74:b6:99
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICBZowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjAzMDEw
MTU2NDFaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDZCRUY3NURDNkQ0MkU1
NzJBRjRDQ0Y4Q0NGNzVFOERBRTQ3MjA0RUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCoeHhrknk7cp/icdMI39ABVdjWZkphOsqBhYHDL9QW+//a8FTE
RGKJDtZ2ZtaYD22RYbcBr0dQ/6TJ8stVryUUCBLpYWuQCWhN1zjiA4yN8ELgQ/XN
lMMSvPwvgkS/UPheIGwaMOokcNSTltzfwwOhkB7X84BJzuy2kZK8BxOq2MmMitFf
CGaWROaiKRCkhvhBa+OHFQu0QLvxTkyj67iH4q+i2Ok0FhnXfqLBhn4kWRM0aas3
y4nSmor2Z6QyADo6lYxyNcwqGk/to8UFwGppV79ZHJEn/tQ5nDrYqL9fpY36A/1U
AGNDUYe49sEjtwz+VgId2m4zyRcSZLMT1/SJAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUa+913G1C5XKvTM+Mz3Xo2uRyBO0wHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9hLTkxM0cxQzVYS3ZUTS1NejNYbzJ1UnlCTzAu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa0wwDQYJKoZIhvcNAQELBQADggEBALpOo8XT7EjXWxBiI1vQ
aSe+597A9HfVwvM7fDVFdmxSo8kdohP1Jf9WuPIZ/D65qJTvfRhPDI9XpI9d6Rzt
/BPSChOoLmeMmOjj5MjpZAQ+ryxfS4/gvCRLuZ51wo8GkfjLPsLjQE5Vx+nBseAF
LHVftPFukALtqhLj9U/EOaEnQXANuDUGTRvbYX/jyB1VaN1tO0utEF07lqs76pEE
gMH4VoD6R6LyQ1WP2ClxPEUKX21q+7aG67cmAtEnE5yoGhiyvHSc80mWCrdauSfY
53knUh+KmXg98t6hUJKx96llvYVOZcphb7F8S1vQF4TBlAfI4C/qBozTjeFjFP90
tpk=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:17:29 2026 by rpki-client