Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/aTqHzIrXEzyzERK72qMjb-GWB7M.roa
File:                     aTqHzIrXEzyzERK72qMjb-GWB7M.roa (raw, json)
Hash identifier:          Pzan8wfBtkXvSD1SgnseOgdxmp3XmbffO9tT6rPqz3s=
Subject key identifier:   69:3A:87:CC:8A:D7:13:3C:B3:11:12:BB:DA:A3:23:6F:E1:96:07:B3
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0639
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/aTqHzIrXEzyzERK72qMjb-GWB7M.roa
Signing time:             Sun 01 Mar 2026 02:25:57 +0000
ROA not before:           Sun 01 Mar 2026 02:25:57 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:61::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1593 (0x639)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 02:25:57 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=693A87CC8AD7133CB31112BBDAA3236FE19607B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f8:21:ba:91:c1:6c:27:49:4b:11:2a:cd:9f:
                    0d:b4:e3:a7:ef:5d:94:f5:dc:b9:8d:01:11:d5:ae:
                    64:f0:96:b8:d4:e0:e7:c0:f5:ba:30:e8:2f:32:dc:
                    67:e1:65:33:ad:f2:0f:bc:7f:b2:2e:fd:ed:e4:31:
                    65:c1:74:bd:1a:ac:6f:28:df:0f:53:81:dd:31:08:
                    ec:a2:d6:fe:de:dd:0d:4e:1c:e8:b0:ee:fb:ed:c3:
                    37:65:80:2b:ad:28:11:83:d9:c1:f6:40:44:4f:1c:
                    40:ac:bb:b7:92:d7:10:cd:7d:bd:9f:28:7b:89:cb:
                    03:ba:33:09:fa:fd:66:83:ff:f8:ab:db:c1:a5:8d:
                    f5:57:ce:7f:2a:cd:d6:69:f7:9b:47:2c:3e:fb:13:
                    55:42:74:2c:0b:c3:4b:61:e2:d5:55:60:e1:8f:4e:
                    a4:1b:96:f7:cb:a4:a9:5d:1c:a5:c8:8d:eb:7d:1f:
                    73:dd:4d:36:3f:fc:6a:58:a9:ba:32:28:e4:6e:dc:
                    b7:c8:65:e6:37:38:a9:6a:68:c9:1b:60:90:8e:26:
                    ac:a1:36:2e:75:54:4f:0f:41:79:90:19:af:81:b0:
                    fc:4f:e1:1c:96:3b:cc:2c:d0:4b:1c:f2:fd:e7:f5:
                    55:24:2e:8d:3e:27:5d:88:4b:fb:49:8e:3b:a4:57:
                    9b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:3A:87:CC:8A:D7:13:3C:B3:11:12:BB:DA:A3:23:6F:E1:96:07:B3
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/aTqHzIrXEzyzERK72qMjb-GWB7M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61::/37

    Signature Algorithm: sha256WithRSAEncryption
         73:47:54:46:15:49:23:b0:71:bf:9c:b5:e0:15:d1:6d:53:dc:
         d1:3f:8b:5e:95:36:44:ae:77:7d:aa:d7:39:50:ad:cf:db:78:
         a3:d7:a5:25:e7:f1:7d:21:f1:0d:69:4a:0f:77:85:80:67:43:
         c9:61:e5:de:67:9a:ae:d0:6b:29:12:e7:29:25:4f:1b:bf:7e:
         b7:1a:c9:29:d3:46:ec:42:86:ca:f5:f5:73:22:1b:1c:10:c1:
         7d:c8:8e:93:57:b8:a7:d0:4f:fa:06:e7:99:16:ea:45:70:e8:
         18:47:84:ac:ba:81:54:2b:57:83:c9:a2:fd:3f:0e:73:d9:5c:
         11:fc:ee:81:0f:7a:ab:5a:ed:bc:3e:8e:40:07:08:7d:e2:9a:
         67:43:81:67:36:aa:02:77:aa:70:7c:7c:5a:b0:d9:46:f6:7e:
         a0:3b:00:28:01:ad:c0:f9:25:1c:79:f4:9b:8f:51:bc:cc:f4:
         1c:43:92:05:93:58:29:de:2d:cf:54:55:98:77:48:d7:69:85:
         33:b3:d1:dd:11:d9:9f:0c:d6:b5:b2:8e:4b:80:3f:98:2f:93:
         09:28:7f:0a:52:8b:6b:b7:2e:7b:43:62:7b:0d:82:dd:74:22:
         e7:c0:09:17:b2:df:17:8a:cb:cc:42:70:98:e3:67:42:0a:1c:
         db:21:d9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:29:06 2026 by rpki-client