Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/dy7agwa3LLnARtdQ_MC7uE42vqQ.roa
File:                     dy7agwa3LLnARtdQ_MC7uE42vqQ.roa (raw, json)
Hash identifier:          XXA0O32o+8yLan0uESMjP7aD3e5HQ9Dc/Ba7Ei0T07o=
Subject key identifier:   77:2E:DA:83:06:B7:2C:B9:C0:46:D7:50:FC:C0:BB:B8:4E:36:BE:A4
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       057E
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/dy7agwa3LLnARtdQ_MC7uE42vqQ.roa
Signing time:             Sun 01 Mar 2026 01:52:22 +0000
ROA not before:           Sun 01 Mar 2026 01:52:22 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:f400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1406 (0x57e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 01:52:22 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=772EDA8306B72CB9C046D750FCC0BBB84E36BEA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0a:9a:52:78:ec:83:87:e6:59:3c:15:23:0e:
                    49:72:28:a9:0a:28:ca:7f:db:e7:51:38:91:a1:03:
                    93:13:f5:93:7d:4a:b9:6f:38:2e:68:80:17:54:70:
                    1f:9e:c4:19:1b:ac:8d:60:19:78:9f:1d:0c:f3:ed:
                    4a:6c:9f:c9:9f:cb:15:a7:1e:ef:d9:46:5d:3a:da:
                    80:0a:fc:a6:4e:ef:71:28:56:9c:d5:33:ff:62:2e:
                    32:98:e1:5e:6f:4a:d2:54:2b:8b:f6:3c:ac:82:9a:
                    58:56:a5:88:8c:9c:2a:d0:6c:64:94:65:bd:b3:b4:
                    63:15:2f:ab:33:e4:7f:5d:00:c7:f3:e4:46:23:f5:
                    97:b2:c7:93:5e:a4:51:19:a6:33:de:63:78:07:19:
                    29:dc:3a:6f:9a:97:d6:2f:96:79:1d:d2:fa:4f:57:
                    da:56:42:04:9d:a9:6e:7b:d3:fc:f6:7d:93:63:e1:
                    8b:0b:a3:86:c9:39:2d:8d:50:e0:14:e4:6a:db:f8:
                    b3:e3:9e:bb:54:cd:25:53:47:10:0a:fc:2c:4d:63:
                    4a:1c:c5:dd:a8:01:d3:26:e5:60:59:43:1a:f8:5a:
                    a4:56:d2:f5:7d:30:05:f3:c5:a4:f4:b4:f1:08:e2:
                    dd:73:a8:d9:1d:e4:69:30:45:37:b2:71:d4:29:fd:
                    d7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:2E:DA:83:06:B7:2C:B9:C0:46:D7:50:FC:C0:BB:B8:4E:36:BE:A4
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/dy7agwa3LLnARtdQ_MC7uE42vqQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:f400::/40

    Signature Algorithm: sha256WithRSAEncryption
         6c:27:ad:ba:58:0b:eb:e8:85:ed:eb:32:65:18:ce:e0:f0:60:
         6b:03:fd:0f:4f:92:bf:31:5e:a9:a6:f6:f8:e4:3b:b8:79:9f:
         84:e8:b9:39:d8:91:6a:21:45:32:34:4c:63:ce:bd:6c:cd:95:
         5c:a4:dd:29:04:2d:53:8b:30:05:02:b9:33:7b:e9:8b:d3:b6:
         d5:c0:8b:5d:a3:88:4d:e3:7b:2d:e0:76:35:3e:16:29:d8:ad:
         1c:17:6b:83:27:38:48:9c:86:f4:fe:f8:a2:6e:0f:71:9f:03:
         7e:2a:88:8f:f3:9c:5d:61:d3:0c:45:33:30:68:75:50:d4:12:
         05:08:b1:2b:10:d6:43:05:7d:80:ac:f3:7b:61:23:01:8e:b4:
         11:56:00:83:46:e7:7c:79:f4:2e:30:27:9a:0f:db:f0:b0:08:
         52:7d:77:b2:b1:46:91:f4:19:a4:bb:66:50:ca:12:67:d3:6b:
         fa:70:63:be:1a:52:dd:b4:e4:f5:c6:1f:71:d7:72:22:40:a3:
         b0:36:27:81:c4:be:91:94:01:63:70:e3:c7:b6:98:1b:67:3d:
         55:14:ac:42:d0:0c:dd:a6:6a:66:1b:f7:7c:37:c5:eb:58:f2:
         aa:bd:b8:fc:94:28:39:ad:a7:00:b1:10:28:42:79:f1:62:f2:
         9a:01:15:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:04:38 2026 by rpki-client