Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ayR_Bs3XmSnOfYAzXuwSliVhX2c.roa
File:                     ayR_Bs3XmSnOfYAzXuwSliVhX2c.roa (raw, json)
Hash identifier:          sAJuU8jpEPp/6K4QCGZ6vrkht7HyKdb+bwxyb6TUFRw=
Subject key identifier:   6B:24:7F:06:CD:D7:99:29:CE:7D:80:33:5E:EC:12:96:25:61:5F:67
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       05A1
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ayR_Bs3XmSnOfYAzXuwSliVhX2c.roa
Signing time:             Sun 01 Mar 2026 01:56:44 +0000
ROA not before:           Sun 01 Mar 2026 01:56:44 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:60:f010::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1441 (0x5a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 01:56:44 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=6B247F06CDD79929CE7D80335EEC129625615F67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:54:b8:35:91:2d:67:cc:aa:78:2b:7b:dd:f9:
                    0d:6c:af:b1:b7:20:a0:65:30:d8:3d:4f:1b:1c:9b:
                    0b:6a:5d:72:cc:c7:e0:4b:3a:4e:d8:0b:b9:74:ba:
                    38:56:5f:3c:d3:3b:1d:73:d5:31:4f:ac:80:7d:8d:
                    12:d4:a5:64:8c:fa:f1:f4:dc:37:57:96:61:22:a5:
                    55:14:73:a2:b4:b5:7a:5e:10:cc:d9:9c:30:bb:a8:
                    40:73:d0:40:b4:db:6f:9f:c4:8f:56:1b:cf:7b:aa:
                    e1:5a:0a:66:88:b9:66:98:6c:23:ae:1e:55:4a:cb:
                    0f:22:fe:74:24:48:41:0c:01:04:36:65:9e:05:c0:
                    97:9e:f6:42:a7:0c:7e:60:fe:b3:0c:a2:ea:b2:9e:
                    4f:78:ae:11:0e:45:30:ab:ea:ff:de:c0:54:25:eb:
                    23:9e:72:75:26:e5:e0:f2:ba:ee:03:8d:3e:5c:3e:
                    49:8b:f7:dd:75:7b:21:4b:93:e5:1a:34:9f:02:10:
                    c8:6e:7d:a4:a4:66:89:22:9e:5a:5a:50:d8:17:23:
                    fd:6a:bb:b1:f2:21:df:3b:c1:b0:ab:68:81:ed:65:
                    df:ce:3a:aa:51:fa:9e:b7:0a:4b:0a:cc:a6:79:d1:
                    3b:b1:12:ef:96:f7:ae:f4:cd:3e:4c:c3:f2:ca:00:
                    cc:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:24:7F:06:CD:D7:99:29:CE:7D:80:33:5E:EC:12:96:25:61:5F:67
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ayR_Bs3XmSnOfYAzXuwSliVhX2c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:60:f010::/45

    Signature Algorithm: sha256WithRSAEncryption
         93:61:e2:21:76:64:f5:37:cc:17:06:ee:00:5d:3c:aa:52:26:
         64:62:59:c6:30:35:a5:b0:1b:06:e0:62:24:d5:3f:f2:55:c9:
         ea:b4:32:41:87:4a:bc:6f:af:14:3b:84:f9:13:6a:d8:ec:ac:
         cb:ca:11:43:11:65:17:0f:a3:58:2f:f2:94:75:fe:c3:92:6f:
         36:f7:b9:0d:82:61:25:d7:42:49:11:ea:b0:6b:a1:cc:c8:0f:
         ae:63:72:82:4e:4e:e7:6b:be:b5:06:90:60:89:15:18:71:64:
         af:14:87:5d:df:7e:95:f2:76:ce:08:45:e3:77:5f:16:f0:c9:
         d5:e3:ce:73:55:45:3e:8a:1f:49:b7:73:d2:76:67:78:60:7d:
         3f:ce:08:cc:89:04:c8:59:49:ba:17:92:25:3b:e8:e9:13:03:
         4c:79:24:8e:a0:1d:de:4d:b5:9e:ba:b9:01:2f:26:d3:2f:27:
         e1:03:2c:74:e3:e0:4a:2d:3d:26:b2:d8:ee:dc:e0:e9:d9:e4:
         dd:b1:ad:d5:68:dc:66:57:0c:1b:dd:6f:d6:13:3d:b8:f1:fa:
         b9:fc:36:de:44:c8:6a:03:43:2e:4c:49:fe:c2:5d:6f:74:97:
         13:4c:9b:c1:19:50:8f:e3:e4:0e:f0:3b:de:f1:b9:01:43:7d:
         e2:7f:44:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:26:14 2026 by rpki-client