Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/dMaLC0IAFO3dbpjNZKINtULiTB0.roa
File:                     dMaLC0IAFO3dbpjNZKINtULiTB0.roa (raw, json)
Hash identifier:          zS/3bQP/9tFEYTsMwgTT9Mw/HC7mY8eiWPNveK89nv8=
Subject key identifier:   74:C6:8B:0B:42:00:14:ED:DD:6E:98:CD:64:A2:0D:B5:42:E2:4C:1D
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       05C8
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/dMaLC0IAFO3dbpjNZKINtULiTB0.roa
Signing time:             Sun 01 Mar 2026 02:05:33 +0000
ROA not before:           Sun 01 Mar 2026 02:05:33 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:e700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1480 (0x5c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 02:05:33 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=74C68B0B420014EDDD6E98CD64A20DB542E24C1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e1:f9:32:64:a7:77:f0:95:20:2f:e4:d1:c6:
                    19:4c:86:87:af:e0:4d:a9:ff:db:87:16:7b:3d:bf:
                    6c:ce:2f:9f:fd:f3:a2:4c:75:77:bc:06:83:bd:e8:
                    c8:d5:69:aa:53:18:65:b2:bf:37:ef:54:5e:67:92:
                    28:eb:79:3d:fb:80:d4:ca:db:6d:ee:8c:1d:89:a1:
                    b7:6b:5b:f5:5b:78:28:91:f3:2b:1f:8a:df:a0:4f:
                    6e:2f:e4:6f:e1:4f:e9:e4:c8:2e:4f:9e:08:ec:9e:
                    23:4d:02:c7:57:b6:49:7c:44:fe:27:18:4c:30:1d:
                    b9:a5:01:af:26:2f:5d:e4:84:ee:66:22:49:43:a9:
                    15:4d:31:37:cf:40:8e:67:1d:5a:12:1c:f4:c4:e2:
                    18:6a:96:ff:5b:f5:10:8f:75:80:39:bc:a6:b0:d1:
                    e7:25:82:11:74:5f:6a:16:7c:64:62:d8:64:74:c6:
                    6b:1c:54:cf:98:3d:34:21:dd:fc:f9:fa:5e:a0:1f:
                    6a:10:3a:68:a7:89:25:86:f3:7c:48:5c:fb:19:85:
                    ca:38:61:77:b3:79:66:9a:18:ab:90:92:af:7c:57:
                    9f:c4:43:bf:26:d8:98:00:ec:0a:19:f6:7b:cf:e8:
                    dc:24:20:60:51:b8:b5:96:d7:5b:4a:98:b8:ce:1e:
                    95:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:C6:8B:0B:42:00:14:ED:DD:6E:98:CD:64:A2:0D:B5:42:E2:4C:1D
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/dMaLC0IAFO3dbpjNZKINtULiTB0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:e700::/40

    Signature Algorithm: sha256WithRSAEncryption
         31:95:71:de:19:c0:84:38:32:b9:08:e7:16:6f:b1:f5:97:73:
         40:87:67:6b:4c:fd:ae:ea:af:1c:b6:35:9d:f2:84:75:0a:ff:
         3a:d0:47:97:5d:cc:c0:23:54:72:eb:e8:7a:c4:f8:d7:25:6d:
         43:68:1c:05:ef:3b:92:fc:7b:3a:5d:71:52:70:33:bb:64:7c:
         03:69:88:88:0e:55:ab:a3:4a:b6:c1:ea:4d:4c:cd:a2:99:8e:
         cb:22:25:6e:2e:ac:06:e5:7c:4d:06:a0:29:49:9f:d7:da:e5:
         c9:bb:9e:02:f4:af:38:d2:68:17:3f:d1:ef:32:3b:3b:69:19:
         e9:6b:0c:bb:e6:22:fe:3e:64:7c:b6:42:90:ee:25:2a:c5:1e:
         f3:96:31:f6:90:38:ba:4a:a8:1c:f0:58:6c:d5:44:e0:6f:dc:
         68:3b:03:46:07:a6:a5:70:14:0d:0f:aa:03:da:9d:e8:23:d0:
         a7:a3:1d:73:fa:d4:18:09:d8:53:4c:4d:2b:a7:7d:b9:d3:8e:
         12:4d:c2:8a:97:29:13:b3:12:c7:29:a6:61:98:3d:77:91:7d:
         95:50:33:a5:00:15:94:97:79:ab:79:84:48:eb:4c:2e:87:3d:
         29:5f:60:40:cc:36:8f:33:43:21:8d:66:07:37:b4:35:2f:a4:
         ae:a8:7e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:18:24 2026 by rpki-client