Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/h69p77HzzdAMO2iGn92mxX6-Yqo.roa
File:                     h69p77HzzdAMO2iGn92mxX6-Yqo.roa (raw, json)
Hash identifier:          0TEHrDAYcBgGl3oK1dtWdnXitpo7g90B08iKkRdb0C0=
Subject key identifier:   87:AF:69:EF:B1:F3:CD:D0:0C:3B:68:86:9F:DD:A6:C5:7E:BE:62:AA
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       05F4
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/h69p77HzzdAMO2iGn92mxX6-Yqo.roa
Signing time:             Sun 01 Mar 2026 02:16:10 +0000
ROA not before:           Sun 01 Mar 2026 02:16:10 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:4400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1524 (0x5f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 02:16:10 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=87AF69EFB1F3CDD00C3B68869FDDA6C57EBE62AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d8:f6:2f:a5:05:68:c0:3f:b0:bf:45:a2:06:
                    dc:1f:cc:e7:62:b9:ea:5b:3e:dd:44:ff:3a:da:ca:
                    68:33:d8:ba:83:e3:a4:04:9b:41:38:85:b3:37:57:
                    7e:5f:bf:54:fc:c1:ac:69:99:7c:a7:63:62:91:52:
                    6d:1f:05:2a:7c:88:6a:ee:50:94:eb:f9:5a:3e:dc:
                    f5:89:da:e0:d6:00:bd:01:9a:bb:fc:6f:e9:22:ed:
                    0f:28:40:d0:45:55:4f:5f:90:4e:07:2f:96:b7:b0:
                    a2:ef:83:b9:e4:40:b8:51:12:f7:ea:6a:71:71:e7:
                    63:f2:1b:ba:c2:b8:d2:ad:ef:67:ea:5c:b5:a4:90:
                    68:e0:3a:2c:89:46:0a:59:c7:3b:b2:44:04:bb:e6:
                    52:05:a9:60:df:5f:1e:a0:45:56:ff:90:1f:5a:e9:
                    3a:d1:c9:f3:b9:aa:ec:9e:94:31:21:df:b8:cc:c2:
                    99:ee:34:a2:08:ac:a7:07:ca:a2:38:32:68:6e:cd:
                    af:fd:80:db:15:77:00:2d:e7:aa:66:ba:12:6d:84:
                    f1:37:ad:d4:f7:08:6c:63:54:2e:8c:30:ea:cb:19:
                    43:14:70:1d:d3:c2:b0:01:43:20:79:77:80:9b:17:
                    a6:22:4c:c4:59:11:e7:d8:08:d3:57:0c:79:e2:de:
                    f2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:AF:69:EF:B1:F3:CD:D0:0C:3B:68:86:9F:DD:A6:C5:7E:BE:62:AA
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/h69p77HzzdAMO2iGn92mxX6-Yqo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:4400::/40

    Signature Algorithm: sha256WithRSAEncryption
         6c:7f:c4:5e:97:68:61:d4:5f:4f:fa:70:2c:70:38:1d:d9:a2:
         91:75:bc:6b:1a:bc:c1:bb:68:f0:64:de:8b:63:4a:66:2b:bf:
         2d:f2:71:c3:5f:84:69:b1:bb:a3:b3:e8:f6:cf:77:d0:f7:5e:
         c0:71:18:16:98:12:fc:5e:fd:36:73:c4:d8:e0:d2:07:d7:44:
         33:e8:f1:ae:c5:63:63:73:07:e0:9f:a7:59:fe:e0:5b:ab:b8:
         49:07:00:b2:16:81:59:c2:4e:21:ac:5e:23:15:f0:5b:d7:c9:
         ce:20:5c:11:18:c4:11:a7:dc:76:6e:10:53:27:eb:b4:b4:e6:
         75:2b:6d:ed:b4:86:e6:b2:bf:5d:76:ce:94:c0:bd:c0:00:8c:
         d7:62:76:a9:e0:7f:24:cb:5f:27:a0:8f:6e:4b:6e:d6:fd:4f:
         f6:6f:73:49:fb:cc:5e:2b:b6:0b:cb:bb:31:08:8c:f9:02:8b:
         36:5f:e0:0f:65:ad:8d:f5:cf:5b:be:43:83:62:f6:d2:2f:43:
         a0:2d:ce:e1:09:e8:92:b3:2e:e6:ae:94:66:47:20:71:13:ce:
         d7:03:65:ea:eb:ee:ba:f8:fa:7f:63:ad:dd:d2:0c:02:eb:9d:
         51:04:3a:2b:c9:3c:dc:45:cf:02:c4:53:cd:a4:78:e1:df:22:
         70:6e:a3:83
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICBfQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjAzMDEw
MjE2MTBaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDg3QUY2OUVGQjFGM0NE
RDAwQzNCNjg4NjlGRERBNkM1N0VCRTYyQUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDd2PYvpQVowD+wv0WiBtwfzOdiuepbPt1E/zraymgz2LqD46QE
m0E4hbM3V35fv1T8waxpmXynY2KRUm0fBSp8iGruUJTr+Vo+3PWJ2uDWAL0Bmrv8
b+ki7Q8oQNBFVU9fkE4HL5a3sKLvg7nkQLhREvfqanFx52PyG7rCuNKt72fqXLWk
kGjgOiyJRgpZxzuyRAS75lIFqWDfXx6gRVb/kB9a6TrRyfO5quyelDEh37jMwpnu
NKIIrKcHyqI4Mmhuza/9gNsVdwAt56pmuhJthPE3rdT3CGxjVC6MMOrLGUMUcB3T
wrABQyB5d4CbF6YiTMRZEefYCNNXDHni3vL1AgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUh69p77HzzdAMO2iGn92mxX6+YqowHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9oNjlwNzdIenpkQU1PMmlHbjkybXhYNi1ZcW8u
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa0QwDQYJKoZIhvcNAQELBQADggEBAGx/xF6XaGHUX0/6cCxw
OB3ZopF1vGsavMG7aPBk3otjSmYrvy3yccNfhGmxu6Oz6PbPd9D3XsBxGBaYEvxe
/TZzxNjg0gfXRDPo8a7FY2NzB+Cfp1n+4FuruEkHALIWgVnCTiGsXiMV8FvXyc4g
XBEYxBGn3HZuEFMn67S05nUrbe20huayv112zpTAvcAAjNdidqngfyTLXyegj25L
btb9T/Zvc0n7zF4rtgvLuzEIjPkCizZf4A9lrY31z1u+Q4Ni9tIvQ6AtzuEJ6JKz
LuaulGZHIHETztcDZerr7rr4+n9jrd3SDALrnVEEOivJPNxFzwLEU82keOHfInBu
o4M=
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:58:08 2026 by rpki-client