Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/d5R9ns6pboOwXe7FlI3L2EsXXAs.roa
File:                     d5R9ns6pboOwXe7FlI3L2EsXXAs.roa (raw, json)
Hash identifier:          RXeAQx6yYGWwgxWm8yNQMZ1sp5YBNIYe9e2HHTLdAeg=
Subject key identifier:   77:94:7D:9E:CE:A9:6E:83:B0:5D:EE:C5:94:8D:CB:D8:4B:17:5C:0B
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0560
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/d5R9ns6pboOwXe7FlI3L2EsXXAs.roa
Signing time:             Sun 01 Mar 2026 01:46:56 +0000
ROA not before:           Sun 01 Mar 2026 01:46:56 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:b000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1376 (0x560)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 01:46:56 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=77947D9ECEA96E83B05DEEC5948DCBD84B175C0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ca:d2:c5:c5:6c:22:04:2b:39:91:38:a6:68:
                    9e:ea:87:1b:60:1a:5f:fa:00:0b:41:2e:6e:d1:57:
                    cb:51:89:b5:0b:ed:cd:2f:c4:d8:5f:87:74:bc:84:
                    13:fa:bf:7c:c8:5d:70:81:99:d2:a0:9c:1e:61:d6:
                    db:e4:0e:76:b3:27:fa:93:2a:c7:ea:ed:bb:ac:7b:
                    2a:95:ae:24:af:19:68:80:be:3b:6a:92:e5:a2:37:
                    27:2f:c4:87:bd:dc:74:f9:eb:64:8b:b0:71:9d:a6:
                    03:97:95:18:3b:66:2b:99:af:da:8b:0a:5b:01:5b:
                    e4:62:fb:af:fd:52:12:29:c6:2e:8c:66:5f:04:fa:
                    73:00:39:15:1d:ed:c7:d2:96:8a:41:8e:64:6e:52:
                    b4:22:f8:8a:bf:74:84:2f:b6:0a:7c:bd:13:c2:34:
                    95:56:02:8d:be:8c:60:49:c7:01:da:b3:7a:1c:2b:
                    82:e3:0a:40:3b:74:3d:a4:4b:19:be:57:6c:43:19:
                    07:03:70:c4:16:bc:4f:03:f2:ac:b8:f3:d0:97:d5:
                    45:e6:34:5a:8c:dd:1e:56:06:16:71:46:61:a1:89:
                    9c:6c:5e:9f:de:5d:cc:03:9e:37:ee:27:ae:b1:34:
                    b5:86:91:e2:29:45:fa:1b:34:17:02:2e:cf:d8:23:
                    20:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:94:7D:9E:CE:A9:6E:83:B0:5D:EE:C5:94:8D:CB:D8:4B:17:5C:0B
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/d5R9ns6pboOwXe7FlI3L2EsXXAs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:b000::/40

    Signature Algorithm: sha256WithRSAEncryption
         77:3b:d9:a2:71:8c:a4:d6:1b:7e:27:6e:8d:cf:1b:9b:e9:85:
         e3:e7:81:12:36:3d:a4:ca:04:ca:5f:cf:e2:da:a6:de:1b:2a:
         45:8a:80:ec:ee:b4:c6:0f:79:81:f4:a1:58:d4:3d:02:4c:46:
         99:3a:05:ae:7d:9a:66:ef:82:3a:87:2c:fb:ff:b0:52:31:59:
         4a:07:86:73:f8:e6:df:92:fa:2e:21:e2:6a:f1:3c:82:7c:97:
         7d:79:23:a1:f4:f7:49:9a:e2:9b:65:cc:49:33:6a:d8:43:28:
         70:51:8d:46:ac:1f:17:39:05:36:4d:cf:cc:af:00:75:0b:f6:
         7f:cf:bd:31:79:2a:45:97:48:de:ae:7a:4c:a7:36:bb:06:da:
         63:6c:cc:89:90:3e:bf:91:9f:69:c8:9a:26:b5:8f:10:97:a9:
         bf:8b:bc:61:08:9b:c1:0e:39:5e:06:ec:16:3d:cd:31:50:dc:
         86:c8:13:d4:d8:48:d3:9b:85:c6:e4:68:54:c8:13:c0:55:bf:
         8c:c9:ce:96:68:17:fb:2c:13:42:f8:8c:22:4d:12:89:31:b3:
         0a:b5:8e:20:fe:61:00:2c:7d:2d:c6:31:85:ee:bd:a2:37:b2:
         e5:d2:d7:4a:26:40:1e:29:5a:fc:62:6d:b2:be:7f:ce:66:2b:
         84:e5:53:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:17:34 2026 by rpki-client