Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/fCkGookF5UI7aIBqvNn_MRBPm9o.roa
File:                     fCkGookF5UI7aIBqvNn_MRBPm9o.roa (raw, json)
Hash identifier:          vn9keSkkGHa7kvmbe2AtaG0dCDb65/QrwG4gxrNZ/vM=
Subject key identifier:   7C:29:06:A2:89:05:E5:42:3B:68:80:6A:BC:D9:FF:31:10:4F:9B:DA
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       060E
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/fCkGookF5UI7aIBqvNn_MRBPm9o.roa
Signing time:             Sun 01 Mar 2026 02:20:55 +0000
ROA not before:           Sun 01 Mar 2026 02:20:55 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:3f00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1550 (0x60e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 02:20:55 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=7C2906A28905E5423B68806ABCD9FF31104F9BDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e8:0c:f4:a6:0e:12:4c:4a:c6:a6:f0:98:0d:
                    73:93:cf:ba:1e:8f:e6:94:f6:fd:f1:19:32:a4:c8:
                    0e:bf:92:aa:6b:b2:d2:45:73:c7:bd:4f:d8:70:8e:
                    c4:cf:3d:07:d6:37:7a:a4:68:7b:2a:bf:a0:e2:bd:
                    5d:d4:28:72:37:ae:c3:f7:59:5d:93:d8:6f:fa:54:
                    33:30:5f:48:61:31:9f:fb:d0:3d:cb:54:79:a3:d2:
                    e3:27:ec:b7:de:fc:bf:e4:e9:2f:68:d2:45:1c:ea:
                    b1:06:e6:fe:1d:8d:dc:ae:9a:3a:bf:50:d6:c7:5f:
                    b8:a7:26:1d:25:1c:c1:52:45:bd:ff:d8:8c:ca:33:
                    4b:d6:c3:78:fe:3c:20:c8:ca:e9:95:ef:73:4a:74:
                    b7:2b:55:1b:50:2d:f5:fe:6d:30:e0:c1:70:4d:47:
                    af:87:a3:a4:e8:b6:cf:a2:3c:46:cb:31:41:5c:9b:
                    28:3f:7b:26:f5:b2:6a:2c:11:d4:f2:09:cf:77:4a:
                    48:1c:ff:5a:ca:49:00:d9:42:06:e3:fa:0b:0e:48:
                    9d:5d:5d:8b:9b:1f:6a:ce:12:23:18:32:50:de:37:
                    23:55:c1:c7:36:64:71:04:4d:af:4e:6f:91:db:10:
                    0f:52:4f:4d:2a:4e:6c:ee:bc:c5:dc:6a:7d:5d:33:
                    96:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:29:06:A2:89:05:E5:42:3B:68:80:6A:BC:D9:FF:31:10:4F:9B:DA
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/fCkGookF5UI7aIBqvNn_MRBPm9o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:3f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         22:db:37:04:ac:bd:b6:dd:49:01:69:4a:f4:f5:62:73:61:36:
         de:30:55:98:fd:f5:9e:0e:c7:db:48:00:60:b9:62:d0:84:9a:
         72:75:2c:90:6f:52:71:7d:64:1d:31:8b:ba:12:5c:46:0f:93:
         ad:b3:2e:15:5c:57:d8:00:d1:bd:05:43:7c:39:98:b2:5a:10:
         f9:e8:c6:2d:ca:b7:b3:a6:84:e3:11:a9:f7:d5:e8:96:dc:9f:
         83:e4:3b:35:7d:e7:fd:0a:66:80:37:26:a2:f1:03:bc:6b:f1:
         b1:d2:24:33:26:f9:b0:90:f7:50:12:af:2d:06:f2:e2:0f:19:
         fc:f3:83:a1:b6:5c:d2:b0:9d:db:1e:2f:59:d4:91:68:07:1b:
         f2:6b:e6:48:e8:c1:1b:9d:d8:82:db:f1:b4:5f:35:b1:46:e1:
         f1:0a:bb:e1:43:af:6f:d6:f1:8e:7f:23:cd:e9:20:f9:58:2c:
         16:e3:a5:52:b8:56:46:ec:80:78:9b:97:f6:fe:58:5b:68:c9:
         81:e4:3d:d2:f0:e6:77:28:d7:48:59:b4:a7:c3:34:f8:9c:ab:
         d5:7b:a4:e8:46:aa:f8:f6:55:1b:eb:30:6f:c7:0c:92:1a:55:
         b5:ee:46:49:14:db:c8:e3:96:98:f3:e5:ca:02:26:a3:07:f5:
         a1:b1:00:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:07:58 2026 by rpki-client