Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/h-9dweOjOmLFELXFRr9fRBkvQKA.roa
File:                     h-9dweOjOmLFELXFRr9fRBkvQKA.roa (raw, json)
Hash identifier:          HUmS6gmFgdnrinRhO/AtMC7cXxz/q5QkBQQhRDuDjZ0=
Subject key identifier:   87:EF:5D:C1:E3:A3:3A:62:C5:10:B5:C5:46:BF:5F:44:19:2F:40:A0
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0527
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/h-9dweOjOmLFELXFRr9fRBkvQKA.roa
Signing time:             Sun 01 Mar 2026 01:34:46 +0000
ROA not before:           Sun 01 Mar 2026 01:34:46 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:1900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1319 (0x527)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 01:34:46 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=87EF5DC1E3A33A62C510B5C546BF5F44192F40A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:37:44:88:86:d0:b2:97:1b:2e:b3:55:06:28:
                    4d:d8:06:2a:70:ed:6c:dc:21:e9:d2:8d:cb:6b:f2:
                    3a:44:3d:22:fb:16:6c:1a:35:a9:4a:96:18:5f:86:
                    a5:b5:9e:f1:52:d1:82:4a:59:8a:11:5c:8d:e5:fd:
                    ff:64:93:2f:28:40:f9:85:c8:18:c3:11:16:6a:e6:
                    a0:de:58:30:8b:20:1c:b6:3b:d6:50:73:08:d0:39:
                    95:3c:5e:1b:20:dd:39:b4:40:b0:96:0a:0c:05:9d:
                    2e:40:a9:b5:a7:c4:d2:34:72:9d:fe:5c:74:07:50:
                    72:7a:88:1f:ad:17:f8:f2:49:f6:20:9b:be:d5:e4:
                    68:ff:0e:d7:e3:97:84:3f:01:42:1d:6c:dd:63:b8:
                    09:70:8f:ac:d7:8e:b2:6c:bf:6e:49:e4:53:2e:85:
                    37:6b:a4:83:fe:f9:5e:da:eb:f3:6a:b0:2f:71:60:
                    2f:52:a9:df:2e:14:07:06:17:3e:3f:42:2d:b1:0e:
                    5a:1d:5f:04:fa:f2:2e:8e:33:fd:06:7a:22:10:73:
                    6c:d6:47:32:7a:bf:5b:fa:05:5d:29:cf:57:72:23:
                    45:24:12:c9:df:be:55:64:0f:fc:5d:ab:36:df:00:
                    46:f9:e3:79:57:15:5c:d4:25:f8:04:3b:93:1d:6e:
                    35:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:EF:5D:C1:E3:A3:3A:62:C5:10:B5:C5:46:BF:5F:44:19:2F:40:A0
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/h-9dweOjOmLFELXFRr9fRBkvQKA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:1900::/40

    Signature Algorithm: sha256WithRSAEncryption
         26:0b:79:24:e8:ce:53:75:9e:aa:47:c3:49:f6:35:89:e8:09:
         40:8c:b8:06:72:db:5a:15:77:5f:63:a1:8c:76:49:72:c2:54:
         44:82:6b:6d:4d:1e:ef:3f:4b:d9:e3:98:78:70:c1:00:a9:c8:
         f8:96:3e:5c:32:20:6b:ea:55:be:b9:b3:3a:d2:bf:0c:07:be:
         cf:15:c5:b2:21:79:d4:b0:ce:8c:9c:5b:42:12:96:23:dd:33:
         44:1e:ae:bc:7c:e0:f6:04:3d:93:70:86:d6:be:15:20:ad:16:
         c0:1e:e6:d1:51:fa:da:dc:87:d1:65:b4:cc:34:7e:10:54:c1:
         40:e1:f3:61:ed:b9:2d:ed:6b:81:bf:67:74:c2:ad:3f:a0:8e:
         72:8f:d0:65:1c:ed:a1:43:46:e3:f6:c3:c4:f7:23:fb:8e:dc:
         07:91:af:53:22:be:f9:de:12:58:08:ac:34:2e:1f:9e:b1:54:
         ed:74:fb:3c:2c:3a:e9:f0:97:14:c4:fa:ca:9b:a1:96:de:3e:
         ea:f0:62:e5:90:87:d6:45:3a:cc:6a:c1:0a:0b:42:85:7b:c1:
         d3:80:e1:af:a9:29:7a:aa:54:32:75:0b:70:36:39:96:cf:e1:
         65:e6:4d:4e:5f:0b:27:a9:c3:0c:08:27:32:bf:50:49:7b:9e:
         c0:6c:34:69
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICBScwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjAzMDEw
MTM0NDZaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDg3RUY1REMxRTNBMzNB
NjJDNTEwQjVDNTQ2QkY1RjQ0MTkyRjQwQTAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDzN0SIhtCylxsus1UGKE3YBipw7WzcIenSjctr8jpEPSL7Fmwa
NalKlhhfhqW1nvFS0YJKWYoRXI3l/f9kky8oQPmFyBjDERZq5qDeWDCLIBy2O9ZQ
cwjQOZU8Xhsg3Tm0QLCWCgwFnS5AqbWnxNI0cp3+XHQHUHJ6iB+tF/jySfYgm77V
5Gj/Dtfjl4Q/AUIdbN1juAlwj6zXjrJsv25J5FMuhTdrpIP++V7a6/NqsC9xYC9S
qd8uFAcGFz4/Qi2xDlodXwT68i6OM/0GeiIQc2zWRzJ6v1v6BV0pz1dyI0UkEsnf
vlVkD/xdqzbfAEb543lXFVzUJfgEO5MdbjVTAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUh+9dweOjOmLFELXFRr9fRBkvQKAwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9oLTlkd2VPak9tTEZFTFhGUnI5ZlJCa3ZRS0Eu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAaxkwDQYJKoZIhvcNAQELBQADggEBACYLeSTozlN1nqpHw0n2
NYnoCUCMuAZy21oVd19joYx2SXLCVESCa21NHu8/S9njmHhwwQCpyPiWPlwyIGvq
Vb65szrSvwwHvs8VxbIhedSwzoycW0ISliPdM0Qerrx84PYEPZNwhta+FSCtFsAe
5tFR+trch9FltMw0fhBUwUDh82HtuS3ta4G/Z3TCrT+gjnKP0GUc7aFDRuP2w8T3
I/uO3AeRr1MivvneElgIrDQuH56xVO10+zwsOunwlxTE+sqboZbePurwYuWQh9ZF
OsxqwQoLQoV7wdOA4a+pKXqqVDJ1C3A2OZbP4WXmTU5fCyepwwwIJzK/UEl7nsBs
NGk=
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:23:00 2026 by rpki-client