Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/clq0lRyQsFgbYwQZG3yQ0rbj2cA.roa
File:                     clq0lRyQsFgbYwQZG3yQ0rbj2cA.roa (raw, json)
Hash identifier:          ypxl245STQ28IW100oiOa+SLxW6qvJnb/EszpIF7Fcw=
Subject key identifier:   72:5A:B4:95:1C:90:B0:58:1B:63:04:19:1B:7C:90:D2:B6:E3:D9:C0
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       05E7
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/clq0lRyQsFgbYwQZG3yQ0rbj2cA.roa
Signing time:             Sun 01 Mar 2026 02:11:05 +0000
ROA not before:           Sun 01 Mar 2026 02:11:05 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:6600::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1511 (0x5e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 02:11:05 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=725AB4951C90B0581B6304191B7C90D2B6E3D9C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8d:24:e3:76:75:49:2d:be:77:c2:68:d7:13:
                    c0:67:12:ad:4f:b3:99:de:86:b0:91:48:c2:d9:6b:
                    b7:e0:64:3f:12:5e:13:53:45:d8:ff:d5:06:4c:5e:
                    fd:6c:0e:c1:39:88:1e:c2:42:99:2a:2a:7a:4f:dd:
                    f4:4a:33:59:f7:47:97:4c:c5:bf:2c:e7:de:63:bd:
                    c9:e4:3b:33:30:c4:8c:14:18:e2:1f:6a:b7:55:29:
                    ab:84:fd:e4:fc:62:86:7d:8e:fb:64:7c:ae:90:ee:
                    27:10:a4:71:78:5d:68:ea:96:55:53:cb:4b:49:ff:
                    82:7e:ef:06:6c:b4:a2:32:e7:44:ae:c0:26:3f:72:
                    87:96:cb:53:61:35:d6:20:5a:3b:51:4d:85:52:85:
                    27:c0:14:36:40:ed:5b:23:86:9c:da:d4:c5:33:59:
                    a5:03:a7:7e:81:bd:4d:82:0f:b7:53:03:6d:1b:f6:
                    19:67:10:42:e4:a2:30:85:ee:9e:4c:c6:4e:44:a0:
                    96:15:df:ed:3e:b4:69:74:fa:6b:b7:ea:35:68:9e:
                    1d:42:3d:34:bd:a9:9c:dd:45:d1:53:f3:12:4a:83:
                    5c:1a:5d:4e:30:06:00:8d:4d:77:b5:47:87:2d:51:
                    c6:24:b2:76:27:eb:7e:14:6b:74:a6:f4:8c:e5:9d:
                    26:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:5A:B4:95:1C:90:B0:58:1B:63:04:19:1B:7C:90:D2:B6:E3:D9:C0
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/clq0lRyQsFgbYwQZG3yQ0rbj2cA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:6600::/40

    Signature Algorithm: sha256WithRSAEncryption
         4e:ee:22:f1:48:9d:8c:30:89:b1:a5:d7:f2:02:89:4b:7c:0e:
         6f:5c:1d:78:c6:34:46:3e:e4:65:cb:ec:c8:46:5a:34:7d:25:
         a4:b1:a0:33:cc:34:de:fc:de:51:39:31:13:57:db:13:fc:05:
         5d:13:21:16:5b:9d:67:3a:e6:24:8f:19:b5:cd:69:6b:29:0d:
         4e:d1:a1:2b:82:01:dc:b4:50:ba:1f:f9:08:9d:7c:0f:a2:05:
         7b:78:20:42:c2:92:e9:c7:8c:f3:0a:57:f1:63:1f:80:06:16:
         88:e5:90:47:7e:a7:e1:ec:a4:bb:24:9d:c2:fc:06:9b:e2:8e:
         49:24:0b:6d:3a:ef:c0:70:e1:c7:32:35:61:b0:1e:9a:c3:01:
         66:c2:7b:d9:f1:e1:54:49:21:aa:ce:f7:f4:7d:68:78:32:93:
         0f:36:c8:86:df:16:54:c0:9d:d4:10:39:63:9b:c6:ff:21:4a:
         19:fd:cf:b1:0c:a5:bf:b2:d5:8c:1c:f9:5c:e5:01:fe:fa:0e:
         a8:84:d5:79:56:b9:ad:0d:67:6c:80:4b:fa:d4:88:c9:02:fa:
         89:c5:f2:62:f7:9a:70:cc:cd:9b:e1:b6:ee:f9:6f:64:a3:35:
         a2:0a:f2:a7:f3:bd:53:af:63:21:22:76:3e:25:5f:57:bb:67:
         3b:2f:07:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:01:38 2026 by rpki-client