Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/bW6mEl4rtVTpSoFvZ9D0pFzAhxA.roa
File:                     bW6mEl4rtVTpSoFvZ9D0pFzAhxA.roa (raw, json)
Hash identifier:          Z7aJ8kz+Sa/avWr2ecHsQPmX25hmdODktgRENTIqvxM=
Subject key identifier:   6D:6E:A6:12:5E:2B:B5:54:E9:4A:81:6F:67:D0:F4:A4:5C:C0:87:10
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       063C
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/bW6mEl4rtVTpSoFvZ9D0pFzAhxA.roa
Signing time:             Sun 01 Mar 2026 02:30:47 +0000
ROA not before:           Sun 01 Mar 2026 02:30:47 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:fc00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1596 (0x63c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 02:30:47 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=6D6EA6125E2BB554E94A816F67D0F4A45CC08710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:25:bd:6b:20:90:a8:0c:4a:b4:1f:70:1f:2f:
                    c0:58:5c:4e:86:5f:6d:b7:9d:b1:b3:ac:d0:78:93:
                    83:e8:46:5e:5d:b8:d2:08:27:b4:62:72:50:6e:b0:
                    91:fa:93:38:59:1a:11:29:9f:64:63:ac:48:c3:6d:
                    89:a6:29:29:b2:0f:88:aa:75:54:e6:a9:3f:c9:e2:
                    29:12:e8:ee:8d:28:4b:c6:bd:91:18:62:11:12:9a:
                    28:14:c5:ca:ac:74:e0:92:b8:02:f8:b5:3a:06:dc:
                    a0:86:92:24:2a:65:0e:40:0f:23:a6:c6:5b:c9:1e:
                    dd:ec:68:e5:fd:7d:0e:94:75:76:1a:cd:33:13:26:
                    c2:76:5f:a2:f6:13:7d:34:65:d1:cd:3c:e6:6a:ae:
                    ba:fd:27:67:38:35:5d:d3:c8:50:83:50:68:fe:55:
                    e7:8e:6e:aa:86:a5:4d:07:c6:f2:21:f7:49:ea:10:
                    83:80:d6:58:cb:1d:68:90:a6:c7:3e:a0:fb:4e:c0:
                    94:ac:f8:d9:d6:84:47:0e:8d:19:49:a6:f8:63:0b:
                    7d:3a:be:74:b3:b1:71:93:84:df:ce:4d:e5:f3:c8:
                    4e:59:53:28:38:0e:a2:19:d6:75:64:7a:3b:b0:fa:
                    ba:4f:5b:27:bf:fe:2a:67:44:61:93:a4:8b:00:f6:
                    40:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:6E:A6:12:5E:2B:B5:54:E9:4A:81:6F:67:D0:F4:A4:5C:C0:87:10
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/bW6mEl4rtVTpSoFvZ9D0pFzAhxA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:fc00::/40

    Signature Algorithm: sha256WithRSAEncryption
         44:8f:42:a4:89:30:d1:09:fb:b8:53:1d:27:d5:57:55:27:2f:
         79:0f:65:e9:2e:93:2f:dd:d6:ea:8a:d3:0d:a5:e1:a6:05:40:
         7b:9e:7b:63:7d:84:68:f9:48:b0:44:5a:85:00:b7:35:9f:0d:
         fc:f0:19:2d:40:49:1e:01:66:6e:a2:38:ed:96:65:82:2d:e9:
         c4:73:9c:18:29:d4:0b:8b:00:36:f6:19:1e:fd:43:f8:e1:ed:
         d5:64:cf:6d:89:2a:3f:03:6f:bd:3c:0d:7d:d5:ed:e6:03:c8:
         06:b8:7c:f6:13:86:00:5b:4d:1c:2d:72:53:fc:aa:56:18:dd:
         17:f1:95:da:7e:0c:f4:a7:29:fa:10:7c:60:55:af:3f:c5:9b:
         fa:05:37:b3:06:55:2f:c4:22:58:47:ee:eb:b4:29:9a:77:51:
         c6:af:8d:2f:7c:e2:b8:01:a5:2b:15:f4:0c:e0:b4:25:37:d8:
         74:6e:cb:56:4a:76:d8:c4:e9:98:f3:34:6f:98:7d:76:80:82:
         cc:df:c2:52:e6:5a:58:94:d2:97:09:20:28:5e:e3:06:ef:95:
         f8:6b:d9:d6:d3:fe:f6:45:d6:d1:3e:df:1b:77:8a:29:89:e7:
         a0:d7:c3:06:f3:73:e8:8b:b0:54:0f:78:f5:0c:5f:1d:b1:76:
         ee:c7:b8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:23:00 2026 by rpki-client