Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/d9zhWATEDyxSxvFv-SfNgqqNmoQ.roa
File:                     d9zhWATEDyxSxvFv-SfNgqqNmoQ.roa (raw, json)
Hash identifier:          7igmWEwG4zfnEpXw+2e9HoRc3hS08S3i0DT5boKxDbo=
Subject key identifier:   77:DC:E1:58:04:C4:0F:2C:52:C6:F1:6F:F9:27:CD:82:AA:8D:9A:84
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0554
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/d9zhWATEDyxSxvFv-SfNgqqNmoQ.roa
Signing time:             Sun 01 Mar 2026 01:46:50 +0000
ROA not before:           Sun 01 Mar 2026 01:46:50 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:60:f00c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1364 (0x554)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 01:46:50 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=77DCE15804C40F2C52C6F16FF927CD82AA8D9A84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:8b:63:1a:db:42:1e:3d:a9:45:00:d2:eb:69:
                    77:95:7e:15:79:b6:50:44:0f:e3:59:73:1a:a6:0a:
                    42:57:30:64:d2:e9:63:06:d2:65:b0:4f:79:49:ba:
                    fc:2f:0e:f2:d1:e5:24:43:67:af:ee:89:3a:ba:f3:
                    c5:d7:15:68:f5:3d:67:9e:91:cf:e0:a0:2f:57:97:
                    96:7c:46:42:57:88:3c:5a:42:3a:9a:0f:dc:22:72:
                    80:64:f5:90:cb:c3:99:21:eb:23:6e:7a:d0:8a:42:
                    a6:db:85:f9:73:d3:96:89:86:c6:6b:40:f7:67:84:
                    8e:e3:14:82:63:85:71:a6:84:c6:8d:06:7b:18:da:
                    6e:ca:8a:c7:de:9d:9b:55:10:15:7c:c3:bb:92:9a:
                    27:56:c5:16:68:85:c4:a5:98:e4:dc:76:d2:fd:b1:
                    6a:65:fe:0a:b0:43:72:70:71:05:c0:95:56:47:14:
                    35:4b:76:08:96:fd:67:88:f5:27:6c:a8:35:2a:4b:
                    86:09:b7:29:90:12:75:79:28:d4:80:86:e1:3e:d3:
                    8f:cf:72:49:12:ff:76:6a:4d:79:39:f9:86:6f:f5:
                    ae:1b:0d:b7:e0:14:a0:bc:eb:cc:fa:02:fb:cf:07:
                    63:e6:69:01:db:de:1a:40:97:69:16:28:ff:26:76:
                    11:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:DC:E1:58:04:C4:0F:2C:52:C6:F1:6F:F9:27:CD:82:AA:8D:9A:84
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/d9zhWATEDyxSxvFv-SfNgqqNmoQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:60:f00c::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:dd:f7:4b:84:6b:d5:18:b5:ac:76:1e:fb:4b:eb:90:39:1f:
         8c:3c:d3:af:12:59:e5:8c:d6:f4:9c:4d:b6:aa:1d:1c:23:15:
         29:80:8d:c4:d7:15:45:31:47:b8:ab:53:58:6d:ad:e2:06:9e:
         8a:79:d8:f5:f1:17:e4:f8:20:d8:9c:1a:3a:e7:4b:33:b1:e0:
         b2:ed:01:24:00:02:d3:53:f7:04:26:0e:8c:56:32:ae:87:a4:
         15:20:66:de:46:ac:12:18:f0:bf:aa:be:19:ff:f8:94:4f:72:
         9b:55:fd:85:28:34:4b:05:fd:30:f1:78:66:59:4c:c3:ab:53:
         e3:9b:4b:8c:c0:c1:ad:98:90:d6:7b:28:ad:48:66:cb:c5:26:
         04:f7:98:62:6c:4c:1b:1c:a7:76:d6:23:ed:ef:8b:37:01:e1:
         4a:4f:d3:b0:2f:71:31:f4:9a:eb:dd:fa:45:3f:d4:86:3b:26:
         f0:84:49:70:ee:53:9e:d7:8f:2a:f3:45:7d:cf:c4:f3:27:38:
         0e:20:c7:cb:d0:18:a8:ea:be:a3:b8:4b:d5:c8:23:7d:f8:96:
         02:83:72:7a:5c:44:26:5d:5c:97:67:5e:c0:60:0f:e9:f2:ca:
         65:d2:9a:c4:96:c7:73:96:5b:33:55:60:80:cf:e3:7a:d1:53:
         7b:42:4e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:40 2026 by rpki-client