Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/bpumhT4ucDuBaRe4MA2TkzLElZg.roa
File:                     bpumhT4ucDuBaRe4MA2TkzLElZg.roa (raw, json)
Hash identifier:          el7GBhT1Hi5DqDi2b9RYodlLHYNyynWlpedhd6ApRT0=
Subject key identifier:   6E:9B:A6:85:3E:2E:70:3B:81:69:17:B8:30:0D:93:93:32:C4:95:98
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0531
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/bpumhT4ucDuBaRe4MA2TkzLElZg.roa
Signing time:             Sun 01 Mar 2026 01:34:53 +0000
ROA not before:           Sun 01 Mar 2026 01:34:53 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:6000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1329 (0x531)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 01:34:53 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=6E9BA6853E2E703B816917B8300D939332C49598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:73:04:d7:84:13:ce:2c:0e:b3:c0:bc:11:48:
                    18:e7:d5:1e:57:ba:7d:11:7d:d2:2a:a2:0e:e2:47:
                    23:16:0f:02:fa:91:41:0d:13:56:a7:28:80:3d:69:
                    1e:d1:c0:b3:99:df:56:d5:41:57:c8:23:12:11:17:
                    0a:4b:68:73:c1:d2:9d:d7:d2:f2:f5:2d:0a:49:63:
                    2d:24:6f:2b:f5:a8:c2:eb:43:6b:d1:56:8b:30:a5:
                    94:f3:af:ce:06:75:95:88:ba:01:b6:85:8e:0b:74:
                    ed:82:72:fd:8c:2d:42:ac:71:e6:d1:61:89:02:be:
                    ee:12:d2:f8:18:cc:fb:57:2d:34:26:25:19:12:3d:
                    ce:ce:fb:ce:45:fc:80:9c:8b:e4:d1:5b:c3:3c:87:
                    cb:12:87:0e:dc:0d:6d:62:5c:b4:de:89:ec:3f:21:
                    99:c5:df:5e:92:1e:7c:e1:f3:36:f3:89:be:9d:cc:
                    2b:67:51:42:2e:58:d9:ed:c8:03:af:32:8f:cc:4b:
                    10:a4:7a:b9:96:57:26:55:f2:32:0c:a6:21:63:04:
                    2a:13:85:6c:d5:16:1a:76:25:43:c3:4b:17:54:ba:
                    b2:76:86:fa:52:70:85:75:c5:39:2a:d3:7c:99:30:
                    b3:93:c0:fe:88:60:75:bc:07:4c:41:79:ac:7f:7e:
                    77:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:9B:A6:85:3E:2E:70:3B:81:69:17:B8:30:0D:93:93:32:C4:95:98
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/bpumhT4ucDuBaRe4MA2TkzLElZg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         c2:34:17:ba:cb:50:8c:35:46:8f:40:9b:41:ff:5e:23:c7:e0:
         6d:82:54:cd:95:06:d2:2d:b0:af:ec:cd:57:45:21:00:73:3e:
         95:bd:a1:b0:58:fb:58:3a:52:8a:8c:4b:79:00:35:b1:dc:a4:
         a2:60:34:4d:39:e7:85:75:84:60:96:8e:e3:e9:82:28:7f:5a:
         81:34:f6:9e:9d:e4:93:3d:b4:51:1d:6c:0c:68:75:a1:0d:9c:
         f2:6e:3e:e9:be:75:9b:17:ca:7a:16:2c:c2:29:59:26:f7:c0:
         37:b3:10:3e:02:7e:b5:02:b8:f8:de:af:97:8f:b5:16:f8:44:
         a0:9b:08:35:68:c4:8a:57:9e:ff:a0:91:6d:18:43:c2:b8:f1:
         3d:d5:6f:d2:db:24:fc:7f:05:eb:2b:23:1b:b0:6a:0b:e0:ef:
         b1:79:23:e8:1f:de:81:57:25:1a:a4:02:f0:65:6f:60:01:f7:
         95:65:df:f6:ce:78:6a:52:40:98:e7:ec:12:0b:fa:a2:5d:10:
         c5:a5:2b:4e:f5:cf:a2:09:5c:1a:8f:4d:76:92:b3:88:13:5c:
         e6:8e:ff:b1:f8:f1:d8:fb:07:0f:5f:ec:cf:6c:2b:c9:67:12:
         e0:05:b6:37:c9:d3:be:0f:72:fa:e4:74:ba:3d:d8:d7:2c:5f:
         06:92:d5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:59:58 2026 by rpki-client