Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/gZ0oPExJ_OKpidpT5E7Ll_Ouo6Q.roa
File:                     gZ0oPExJ_OKpidpT5E7Ll_Ouo6Q.roa (raw, json)
Hash identifier:          0lJE/6Mr2FEz9HUt1kgVe3kS23RrALM60B7evv997mk=
Subject key identifier:   81:9D:28:3C:4C:49:FC:E2:A9:89:DA:53:E4:4E:CB:97:F3:AE:A3:A4
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0577
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/gZ0oPExJ_OKpidpT5E7Ll_Ouo6Q.roa
Signing time:             Sun 01 Mar 2026 01:52:19 +0000
ROA not before:           Sun 01 Mar 2026 01:52:19 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:c00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1399 (0x577)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 01:52:19 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=819D283C4C49FCE2A989DA53E44ECB97F3AEA3A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:32:41:11:57:1d:74:db:10:8e:0b:21:f5:03:
                    de:8f:04:0b:65:3d:68:40:20:48:cf:51:08:93:f7:
                    49:04:44:c9:a0:8e:02:79:8f:15:63:41:6e:fa:65:
                    98:cd:a4:0d:ae:bd:32:05:b9:a7:44:4a:f6:5e:ea:
                    42:64:4c:ca:fe:7d:31:50:46:ee:80:dd:aa:ab:0e:
                    f8:de:f5:b8:2d:22:db:6f:2f:11:f9:c6:5c:5c:f2:
                    d4:d5:63:4c:fd:cb:fc:7f:1c:e7:dc:4d:dd:d1:4c:
                    1d:13:f1:9c:f9:a7:77:f6:48:58:d4:d9:68:32:4f:
                    52:ff:9b:39:34:b0:b9:2f:1a:15:d4:2c:7f:95:49:
                    56:7d:d6:25:08:55:a8:cb:2c:45:47:34:16:66:fc:
                    79:75:2c:45:cd:70:da:1d:d2:ff:db:9e:19:59:fe:
                    7f:46:2c:77:f1:6c:d9:08:82:9e:ae:fe:72:f1:92:
                    13:fe:7b:22:88:fb:ea:f9:a7:38:b8:39:99:b1:ae:
                    cf:7a:ad:b0:02:45:70:55:af:ba:a8:eb:8d:8e:31:
                    fb:c1:78:a3:f1:46:98:c5:1a:22:bc:31:45:66:f2:
                    0e:00:98:70:47:91:28:49:26:d3:5b:ed:71:81:88:
                    0c:62:ee:e5:ad:ff:41:da:1b:61:e7:ef:66:c2:86:
                    f0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:9D:28:3C:4C:49:FC:E2:A9:89:DA:53:E4:4E:CB:97:F3:AE:A3:A4
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/gZ0oPExJ_OKpidpT5E7Ll_Ouo6Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         7f:a9:53:47:f4:12:37:4b:43:80:22:46:15:92:d7:61:72:32:
         25:78:c6:5f:76:89:9d:2a:44:db:67:00:53:df:49:a0:f7:d3:
         bd:24:f2:79:59:b7:ec:6f:03:18:05:f0:55:c7:3a:42:30:d6:
         0b:f7:db:67:77:0e:f9:f3:8f:4b:a3:36:b5:56:2c:6a:81:2a:
         c5:0a:d9:f2:82:84:b2:46:38:be:59:f3:b6:5b:7d:e5:cb:2b:
         2d:be:2e:98:90:39:fa:27:e3:2f:88:5d:bf:46:78:a4:63:f2:
         46:f3:44:6a:fa:08:0e:7a:6b:79:82:ac:16:da:2c:95:93:a6:
         22:4a:18:f0:46:8a:ef:34:8d:e3:3c:c8:95:5a:03:d5:af:85:
         00:6c:76:75:b9:9a:eb:72:c7:0f:e5:77:05:01:96:36:1a:49:
         0d:b3:58:fe:76:c1:94:c0:9a:8c:c9:3a:6e:5b:12:74:cc:db:
         be:cd:48:64:fd:e2:67:c7:27:b2:5b:4f:93:6a:7d:7d:cf:61:
         bf:5e:20:99:6e:ba:e4:3b:e9:5c:3a:bd:77:57:b4:d8:d2:e1:
         8e:96:78:e1:54:54:37:02:64:02:65:3c:91:4f:93:72:f0:2d:
         dd:b0:81:9f:e1:9b:31:51:17:a4:40:c0:fa:3e:fb:bf:1a:d9:
         5a:2f:88:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:10:53 2026 by rpki-client