Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/aQ9iBkOMTxSJu29TCvbwOqfY0h0.roa
File:                     aQ9iBkOMTxSJu29TCvbwOqfY0h0.roa (raw, json)
Hash identifier:          K5vJkXgDRMUu8azEgpjwl+F6bVP0eIw53BkBuou7SQE=
Subject key identifier:   69:0F:62:06:43:8C:4F:14:89:BB:6F:53:0A:F6:F0:3A:A7:D8:D2:1D
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       05B0
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/aQ9iBkOMTxSJu29TCvbwOqfY0h0.roa
Signing time:             Sun 01 Mar 2026 02:00:55 +0000
ROA not before:           Sun 01 Mar 2026 02:00:55 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:4000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1456 (0x5b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 02:00:55 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=690F6206438C4F1489BB6F530AF6F03AA7D8D21D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e4:10:a1:d6:c7:ae:32:c0:94:30:43:0e:62:
                    6a:90:7a:e6:6e:4e:f3:eb:e5:69:73:50:62:03:83:
                    d0:a3:e1:c4:f5:bc:ab:05:52:af:d1:2e:bd:eb:e3:
                    1a:5f:67:b1:c5:a6:dc:a9:0a:1e:ac:de:35:d3:ab:
                    68:2f:1d:4f:75:0a:a2:19:fc:9b:f9:e2:2f:9c:3c:
                    61:cc:2a:da:0e:d7:ed:cd:87:5d:2d:59:6d:81:f5:
                    47:f7:ab:03:94:10:b6:09:a5:7f:bb:40:4e:00:14:
                    44:a6:18:81:8b:e6:e6:43:ef:82:56:5e:29:51:56:
                    22:f9:8e:77:10:8f:a4:cc:5b:2d:d2:13:1a:ac:bf:
                    b0:0f:d9:6f:1a:26:b1:be:fb:5f:96:1e:ae:00:f4:
                    ce:fb:41:fd:49:e2:b3:35:db:1c:b5:a1:d6:58:f1:
                    02:b2:95:3b:7e:bd:ef:a2:81:7e:84:67:51:0d:31:
                    44:a4:4a:f3:30:c2:c5:ca:be:39:d1:36:8d:84:c6:
                    78:7b:cb:b6:d0:af:48:1c:c3:19:4b:50:05:8f:07:
                    c6:73:01:46:49:52:6b:39:e4:6f:70:f0:43:28:96:
                    b2:1e:dc:c8:b7:85:a2:53:8b:ea:c3:74:7b:55:4d:
                    75:9b:5b:f3:ed:46:4e:22:b2:4d:26:a7:67:cf:ad:
                    d9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:0F:62:06:43:8C:4F:14:89:BB:6F:53:0A:F6:F0:3A:A7:D8:D2:1D
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/aQ9iBkOMTxSJu29TCvbwOqfY0h0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         ab:81:d8:b2:b6:7f:36:ef:dd:c3:33:1c:e3:35:8e:44:d8:14:
         cf:0d:8f:7a:ea:3a:b6:6f:b5:2f:c7:77:00:11:86:e2:32:64:
         21:c5:22:a1:bb:18:76:50:31:33:19:a8:81:8c:36:1e:a7:d5:
         dc:7c:b5:69:e6:68:e1:97:c7:2a:b1:9e:6c:26:eb:c7:fb:0e:
         ce:69:de:ec:2e:17:48:5e:8d:3c:81:58:78:59:b5:85:d8:ce:
         91:06:f1:02:91:29:36:3d:75:1f:7e:16:54:95:89:0c:d6:5f:
         11:93:28:61:c5:34:e6:ee:3e:34:b1:60:43:7e:9c:c2:4a:b7:
         44:9f:91:6f:65:bc:3f:21:d3:8e:81:d6:a1:a4:a4:56:9e:6d:
         e9:64:a6:ed:4f:4f:73:e8:c3:7b:b2:2d:43:e5:10:57:16:fe:
         ae:92:04:38:8b:fa:66:42:a2:c7:be:84:33:5a:b6:65:ad:2c:
         ef:b8:c9:dc:b9:5d:95:2c:c1:d4:d4:6d:cb:24:d0:fe:91:36:
         58:64:a8:ac:63:81:4e:92:5d:fc:a6:d0:e5:37:a3:14:d4:9a:
         86:db:33:b4:94:b2:af:34:da:99:7e:48:90:f7:4e:0a:5e:69:
         af:a5:4b:18:d0:60:ce:d4:d8:c5:fd:09:59:d7:9d:72:69:bf:
         56:81:a8:dd
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICBbAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjAzMDEw
MjAwNTVaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDY5MEY2MjA2NDM4QzRG
MTQ4OUJCNkY1MzBBRjZGMDNBQTdEOEQyMUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDX5BCh1seuMsCUMEMOYmqQeuZuTvPr5WlzUGIDg9Cj4cT1vKsF
Uq/RLr3r4xpfZ7HFptypCh6s3jXTq2gvHU91CqIZ/Jv54i+cPGHMKtoO1+3Nh10t
WW2B9Uf3qwOUELYJpX+7QE4AFESmGIGL5uZD74JWXilRViL5jncQj6TMWy3SExqs
v7AP2W8aJrG++1+WHq4A9M77Qf1J4rM12xy1odZY8QKylTt+ve+igX6EZ1ENMUSk
SvMwwsXKvjnRNo2Exnh7y7bQr0gcwxlLUAWPB8ZzAUZJUms55G9w8EMolrIe3Mi3
haJTi+rDdHtVTXWbW/PtRk4isk0mp2fPrdlXAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUaQ9iBkOMTxSJu29TCvbwOqfY0h0wHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9hUTlpQmtPTVR4U0p1MjlUQ3Zid09xZlkwaDAu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa0AwDQYJKoZIhvcNAQELBQADggEBAKuB2LK2fzbv3cMzHOM1
jkTYFM8Nj3rqOrZvtS/HdwARhuIyZCHFIqG7GHZQMTMZqIGMNh6n1dx8tWnmaOGX
xyqxnmwm68f7Ds5p3uwuF0hejTyBWHhZtYXYzpEG8QKRKTY9dR9+FlSViQzWXxGT
KGHFNObuPjSxYEN+nMJKt0SfkW9lvD8h046B1qGkpFaebelkpu1PT3Pow3uyLUPl
EFcW/q6SBDiL+mZCose+hDNatmWtLO+4ydy5XZUswdTUbcsk0P6RNlhkqKxjgU6S
Xfym0OU3oxTUmobbM7SUsq802pl+SJD3Tgpeaa+lSxjQYM7U2MX9CVnXnXJpv1aB
qN0=
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:04:24 2026 by rpki-client