Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/aJ4NgLJJJuqptVkptosIyG_h24s.roa
File:                     aJ4NgLJJJuqptVkptosIyG_h24s.roa (raw, json)
Hash identifier:          rHfPA9o6cX0qitmyp+hRi8qoyZhZiUdNCdAahla6FN8=
Subject key identifier:   68:9E:0D:80:B2:49:26:EA:A9:B5:59:29:B6:8B:08:C8:6F:E1:DB:8B
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       052D
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/aJ4NgLJJJuqptVkptosIyG_h24s.roa
Signing time:             Sun 01 Mar 2026 01:34:50 +0000
ROA not before:           Sun 01 Mar 2026 01:34:50 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:5a00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1325 (0x52d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 01:34:50 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=689E0D80B24926EAA9B55929B68B08C86FE1DB8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:6f:dd:d3:96:51:f2:ff:c0:0a:3a:3a:76:aa:
                    bf:b2:74:cd:90:99:49:cd:4d:c3:12:e2:8d:10:cd:
                    a8:38:0a:d8:4c:7f:e2:57:36:7a:42:75:6c:61:bd:
                    06:db:be:e1:ac:36:50:bd:e0:41:f8:e6:9a:9d:68:
                    e3:37:aa:53:26:c5:b0:7c:c2:9a:62:69:78:15:02:
                    f1:e4:b3:b3:85:52:fe:67:34:9d:d6:73:c9:36:93:
                    b7:d2:cc:d5:a7:de:d3:26:4b:ae:e3:a4:9d:c8:48:
                    fa:7d:fb:fe:6b:ea:04:9e:ce:a1:b5:f9:c2:dd:a5:
                    19:fb:fe:d8:22:35:50:6f:5b:96:88:f2:e7:bc:7e:
                    c5:86:69:ab:7f:84:f2:39:69:1e:37:11:85:c1:8b:
                    97:1a:bc:1e:5c:80:db:20:0a:b1:f6:11:f7:08:35:
                    79:24:1c:02:d5:a0:79:76:4f:66:ad:e0:18:e3:d8:
                    b8:12:26:d8:15:45:f3:b1:94:49:ba:d9:95:92:68:
                    5e:59:65:b7:0f:eb:89:4b:a6:e9:f8:07:b5:06:f7:
                    a1:6e:6a:33:e8:36:e7:53:ff:8c:46:ee:e6:5f:3e:
                    4b:30:f0:dc:28:07:b8:ab:b2:71:a3:e6:82:3c:9d:
                    a4:df:a4:8e:77:f2:c8:34:02:ff:25:b6:30:2b:87:
                    0a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:9E:0D:80:B2:49:26:EA:A9:B5:59:29:B6:8B:08:C8:6F:E1:DB:8B
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/aJ4NgLJJJuqptVkptosIyG_h24s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:5a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         71:cb:63:e7:40:7f:81:2e:58:9b:eb:3c:93:3c:f3:4c:a6:77:
         25:3d:a8:91:78:dd:35:13:36:88:23:27:cc:36:ae:13:1f:a2:
         20:ea:4d:0c:2e:be:9f:41:14:27:18:94:6b:02:09:14:64:ff:
         8b:11:db:04:41:f7:e5:72:12:81:8a:0a:57:52:5f:ea:41:e6:
         b0:93:e2:5c:ca:fb:ef:48:78:16:fc:84:a5:00:9e:69:70:bc:
         24:37:2a:91:45:b2:5e:0c:e9:c8:02:3e:17:de:23:18:9c:be:
         55:59:15:47:cf:d3:35:f3:88:98:b0:0d:66:77:4c:32:13:5a:
         27:26:d7:2e:0e:14:4e:7c:1f:24:2c:36:bc:2a:d8:c2:9d:b8:
         c7:65:d6:7c:9a:90:15:0d:77:a1:de:07:a1:8d:01:f6:44:84:
         c1:f7:0e:02:c0:84:1d:7d:7f:6b:27:47:66:5c:f6:4b:ae:81:
         c9:4d:99:c0:7f:88:0a:eb:4a:fb:62:7b:d4:76:a5:b0:b9:17:
         9c:97:4a:80:78:e2:c5:d9:62:b0:2f:80:dd:5a:ee:52:3a:94:
         a0:87:b3:9c:05:61:a9:a8:f1:b8:19:85:01:aa:8f:45:14:97:
         38:e3:fc:68:c5:42:36:c8:16:8e:f9:44:65:5b:e7:09:a8:68:
         c2:ca:71:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:29:21 2026 by rpki-client