Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/fOHrNPTTFc3SlthLWVRN9_Nn8V4.roa
File:                     fOHrNPTTFc3SlthLWVRN9_Nn8V4.roa (raw, json)
Hash identifier:          gzk7l1HpDQs+ND3mJMYfEjX5gwvOMk9UjiIZov/dwPY=
Subject key identifier:   7C:E1:EB:34:F4:D3:15:CD:D2:96:D8:4B:59:54:4D:F7:F3:67:F1:5E
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       058F
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/fOHrNPTTFc3SlthLWVRN9_Nn8V4.roa
Signing time:             Sun 01 Mar 2026 01:56:37 +0000
ROA not before:           Sun 01 Mar 2026 01:56:37 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:70:9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1423 (0x58f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 01:56:37 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=7CE1EB34F4D315CDD296D84B59544DF7F367F15E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:71:b5:11:e3:b6:6f:eb:25:7f:df:af:5c:ad:
                    58:de:c4:07:0c:16:69:29:4e:8d:06:6c:3a:07:ce:
                    70:6d:b5:3a:24:49:d8:b6:4e:b1:f7:81:45:a0:70:
                    ec:73:82:c2:e0:47:31:52:16:3d:7d:f2:7c:71:8c:
                    55:04:85:db:78:a8:e0:ee:bd:40:05:0e:d6:21:d6:
                    d6:95:38:de:eb:34:bd:80:55:e8:15:6b:4c:48:87:
                    94:c5:a9:67:97:8d:92:fa:44:17:39:75:c0:ef:84:
                    d5:41:a2:dd:09:fe:94:22:cf:f5:0a:4f:d9:b8:a1:
                    02:3b:79:3a:e3:d8:43:08:cf:9f:77:b5:95:07:9c:
                    41:fb:03:c2:00:25:63:1e:70:27:be:96:c3:88:bf:
                    48:13:e3:43:d7:7c:1c:d9:a9:64:95:6e:8a:80:d2:
                    f3:cc:4c:3f:94:96:78:2f:42:be:4f:fb:f7:2d:f2:
                    29:c2:69:0a:6a:66:8e:cb:89:15:a6:d8:4b:cb:b0:
                    3a:d7:8c:32:86:b7:8c:59:de:49:d2:10:cc:fa:1b:
                    49:d0:12:b5:fa:c0:17:df:08:05:d7:73:5b:11:d7:
                    35:d2:21:4f:79:8f:7c:9b:23:7b:fc:47:46:1a:aa:
                    9b:df:51:c6:a7:e2:01:70:e4:63:19:ae:66:89:a1:
                    22:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E1:EB:34:F4:D3:15:CD:D2:96:D8:4B:59:54:4D:F7:F3:67:F1:5E
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/fOHrNPTTFc3SlthLWVRN9_Nn8V4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:70:9::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:2c:b9:1c:e3:6b:f9:21:6b:10:4c:9e:36:67:9a:2a:6b:b0:
         e7:f8:d2:e7:1f:29:7e:d2:c5:33:31:f1:75:5d:4e:14:3f:c8:
         7c:d1:23:e1:38:e5:45:40:c9:cd:c2:c7:98:ff:8a:b9:84:b9:
         0d:90:e7:d3:ce:c4:39:28:44:42:b8:01:46:cb:fb:ae:00:ec:
         06:78:a3:5f:b7:75:3a:fc:a0:c1:f0:48:0c:ce:9a:d5:3b:ad:
         6c:c0:b8:08:63:1a:35:ae:16:5c:eb:53:b7:0b:53:02:80:e8:
         e3:1b:77:69:47:88:c2:09:d9:c3:e3:14:91:8b:c5:12:15:2f:
         04:60:1a:47:81:ea:ff:23:ec:ff:87:48:c4:f8:a9:f9:63:89:
         cd:ab:a9:9d:4d:89:df:29:12:97:8c:8a:ad:09:88:5d:59:be:
         3f:bd:fc:a7:f6:ea:55:0e:18:7c:00:37:94:5a:28:4d:36:48:
         16:48:90:da:60:38:d7:05:2e:5c:1c:e3:5b:99:e8:d9:37:f1:
         0f:e6:50:83:c9:64:e0:2d:81:f4:1f:3b:a8:f7:2c:c4:eb:10:
         0b:a2:68:44:94:72:1c:59:7b:d6:17:56:ae:e7:e4:6a:ab:31:
         5b:07:7d:72:b5:83:aa:75:3f:61:ba:10:53:29:6b:bb:1a:f1:
         1b:b3:14:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:19 2026 by rpki-client