Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ajKLA6tsVufIY8iR_g-62ju6xro.roa
File:                     ajKLA6tsVufIY8iR_g-62ju6xro.roa (raw, json)
Hash identifier:          FRTgqJpCimdyuP34Oc4lEXtd4MwBnRDnPGcrC7KeCbI=
Subject key identifier:   6A:32:8B:03:AB:6C:56:E7:C8:63:C8:91:FE:0F:BA:DA:3B:BA:C6:BA
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0544
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ajKLA6tsVufIY8iR_g-62ju6xro.roa
Signing time:             Sun 01 Mar 2026 01:41:15 +0000
ROA not before:           Sun 01 Mar 2026 01:41:15 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:b100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1348 (0x544)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 01:41:15 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=6A328B03AB6C56E7C863C891FE0FBADA3BBAC6BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:16:88:4e:ec:3e:da:13:45:a2:12:c7:57:82:
                    ec:b9:05:06:7c:68:aa:7c:e9:22:28:67:39:5b:89:
                    95:48:b5:ae:a6:e3:4e:ca:31:b6:ca:9e:dd:60:f8:
                    cc:be:9a:f6:3c:5a:ca:48:41:cf:69:9d:9f:f1:59:
                    9f:6f:d2:71:b0:dd:1f:5c:26:25:9a:b0:24:1e:b1:
                    5b:cb:e8:85:0f:08:8e:38:27:0b:a2:32:a9:62:7e:
                    4d:d2:02:90:cc:7c:61:0e:dc:93:42:55:73:bd:38:
                    54:d4:97:f4:95:48:87:d6:a8:36:80:69:4e:f7:be:
                    e3:56:1c:3c:7b:2e:7d:e8:08:1a:76:51:54:12:8c:
                    1d:7d:2c:c4:8a:70:be:91:a9:d7:0a:0d:eb:af:ff:
                    37:00:90:2b:42:45:7e:ef:7b:37:47:6e:58:b7:e8:
                    74:c4:fe:56:c3:46:52:93:2d:96:92:a1:0a:8d:01:
                    a8:74:3b:a1:07:0c:61:6d:4e:e6:e9:07:82:27:88:
                    f0:49:1a:2f:e1:b0:97:46:4c:7f:a8:8d:b5:2f:94:
                    5b:80:36:6d:2e:7b:60:63:58:66:ad:f6:98:42:b9:
                    c0:1d:3f:86:67:16:e4:d0:94:8b:17:3b:58:5f:10:
                    f0:d6:dd:bf:19:eb:8a:df:68:f8:61:cc:ad:fe:12:
                    66:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:32:8B:03:AB:6C:56:E7:C8:63:C8:91:FE:0F:BA:DA:3B:BA:C6:BA
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ajKLA6tsVufIY8iR_g-62ju6xro.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:b100::/40

    Signature Algorithm: sha256WithRSAEncryption
         83:ee:7e:71:38:96:2b:ce:1a:a8:90:a2:9d:d6:b8:05:1b:ec:
         f4:f6:c0:24:b7:af:2f:26:e0:ce:cb:f8:28:09:c3:8e:84:7f:
         02:7a:17:70:99:ac:5a:8e:97:3c:21:18:53:18:a9:c1:3b:07:
         ce:03:5f:b8:7d:7d:1f:9e:59:bf:5e:d7:8c:0b:2e:1f:4c:bb:
         22:8b:7b:a9:32:ad:9c:61:7e:6e:e0:72:5b:6b:0f:7d:91:e8:
         83:9f:8a:9e:e2:08:2c:34:28:98:9d:eb:87:c1:e6:68:a1:f9:
         20:00:df:d0:e5:75:a5:b7:b4:1b:76:03:1d:c8:83:21:07:71:
         b2:a4:53:1a:fc:76:73:89:2b:07:0f:03:9e:24:94:8d:96:e5:
         47:bc:5f:61:bc:36:f9:1f:1b:83:39:92:3b:00:d4:a3:c2:a5:
         5a:eb:ab:59:1a:fe:e2:3a:22:e0:20:0b:88:97:5a:94:80:89:
         4e:1e:dc:f0:ad:a8:18:3c:b9:4c:7a:9a:2d:68:16:ab:43:be:
         84:8d:a3:2a:10:a3:08:38:b8:a3:65:66:1d:f3:5f:22:e3:14:
         90:a5:93:f9:c6:04:54:a3:c3:ae:5a:42:3b:ad:b4:de:bc:46:
         c2:7e:0e:52:5d:3e:c6:c1:77:97:77:44:39:9d:6d:31:db:c3:
         7b:fd:e9:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:55:41 2026 by rpki-client