Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/hKGLtFpHXPCGYdAQo6Oojgb106s.roa
File:                     hKGLtFpHXPCGYdAQo6Oojgb106s.roa (raw, json)
Hash identifier:          OiCMBzqsmsxyvkXPMeHz3tqcS7DLB+Uawqjmdu9ykfc=
Subject key identifier:   84:A1:8B:B4:5A:47:5C:F0:86:61:D0:10:A3:A3:A8:8E:06:F5:D3:AB
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0551
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/hKGLtFpHXPCGYdAQo6Oojgb106s.roa
Signing time:             Sun 01 Mar 2026 01:46:48 +0000
ROA not before:           Sun 01 Mar 2026 01:46:48 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:7b00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1361 (0x551)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 01:46:48 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=84A18BB45A475CF08661D010A3A3A88E06F5D3AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:70:40:e8:8e:59:1e:73:4c:7e:54:b1:0a:f4:
                    40:a7:9a:f2:72:2f:0a:62:27:6c:60:de:33:57:3b:
                    50:6e:a2:b0:a5:17:ba:d4:9c:89:db:aa:2c:3b:67:
                    2c:ff:6d:63:6e:b9:a7:57:84:72:c1:1c:84:94:5d:
                    a8:1d:94:0e:82:ce:7c:4d:b8:4e:d4:76:ab:51:f4:
                    5d:a5:7c:fc:61:e2:d1:8d:ad:01:0b:ac:94:39:c6:
                    18:69:23:f1:db:84:58:08:f1:32:ea:21:93:7a:69:
                    5b:e7:da:d3:4d:01:5b:67:3a:36:62:90:f3:7a:96:
                    70:8f:97:6d:f1:f5:69:d5:92:c3:ce:d7:29:fb:d9:
                    16:f0:8b:32:eb:77:d2:ac:97:19:f8:1d:f7:4e:a7:
                    5e:aa:db:4e:b1:2d:ee:03:8d:7f:24:94:c1:14:f4:
                    4d:3d:ca:00:6c:20:35:3b:41:79:38:14:12:28:0f:
                    5f:d4:fb:26:ee:13:7e:00:4c:aa:c2:a2:3a:5e:2e:
                    ca:18:ca:bd:12:d6:d6:6e:0b:42:f5:8b:55:ee:14:
                    a4:36:2f:61:71:ca:98:48:1b:10:c1:e5:53:3c:52:
                    9f:bd:c5:95:aa:ff:fa:7a:5d:6a:93:9a:4d:84:bd:
                    90:cb:ba:da:ba:9e:e4:7f:f4:b1:fc:05:c3:1a:00:
                    b7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:A1:8B:B4:5A:47:5C:F0:86:61:D0:10:A3:A3:A8:8E:06:F5:D3:AB
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/hKGLtFpHXPCGYdAQo6Oojgb106s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:7b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         7b:77:e9:a2:e2:c2:ca:a8:0f:32:23:8d:60:60:a5:60:88:bc:
         89:98:2d:a9:58:19:10:46:b5:06:cf:d4:96:db:a2:08:bc:88:
         4c:47:c2:46:25:8e:77:a5:ab:19:fa:e7:26:83:0a:56:49:90:
         5f:c4:fa:ed:57:c2:86:ba:34:35:6b:e5:95:11:de:2d:0a:3e:
         96:08:a5:37:cb:b1:e9:10:4f:43:54:67:e5:8d:2a:97:e5:89:
         3d:df:c7:fc:a2:d0:b1:41:41:ed:40:5f:af:ba:40:4f:3e:eb:
         2f:27:ee:0f:9a:61:74:53:02:57:72:35:1c:2c:6f:c5:7a:8f:
         1d:2f:db:a9:d1:40:d4:f1:07:5e:7b:eb:a2:19:eb:91:a6:60:
         d5:0d:3e:1e:d6:63:5c:f9:08:07:3c:dd:a6:c5:69:d8:20:01:
         11:95:b2:d0:2f:93:44:d8:6b:b9:79:5e:78:80:30:8b:44:a0:
         fc:54:de:13:8e:f8:54:e2:cf:9f:3a:3c:42:45:7f:df:fd:09:
         88:2e:80:8f:fa:72:7c:d6:43:c3:44:f3:a5:43:25:17:f9:4e:
         4b:a6:f2:48:87:fc:ed:9a:a0:18:7f:f0:c8:d6:86:bd:e8:b2:
         36:1f:df:85:19:39:59:65:c1:11:f8:31:96:16:b8:2d:6c:63:
         99:39:d5:ea
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICBVEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjAzMDEw
MTQ2NDhaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDg0QTE4QkI0NUE0NzVD
RjA4NjYxRDAxMEEzQTNBODhFMDZGNUQzQUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC8cEDojlkec0x+VLEK9ECnmvJyLwpiJ2xg3jNXO1BuorClF7rU
nInbqiw7Zyz/bWNuuadXhHLBHISUXagdlA6CznxNuE7UdqtR9F2lfPxh4tGNrQEL
rJQ5xhhpI/HbhFgI8TLqIZN6aVvn2tNNAVtnOjZikPN6lnCPl23x9WnVksPO1yn7
2RbwizLrd9Kslxn4HfdOp16q206xLe4DjX8klMEU9E09ygBsIDU7QXk4FBIoD1/U
+ybuE34ATKrCojpeLsoYyr0S1tZuC0L1i1XuFKQ2L2FxyphIGxDB5VM8Up+9xZWq
//p6XWqTmk2EvZDLutq6nuR/9LH8BcMaALdLAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUhKGLtFpHXPCGYdAQo6Oojgb106swHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9oS0dMdEZwSFhQQ0dZZEFRbzZPb2pnYjEwNnMu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa3swDQYJKoZIhvcNAQELBQADggEBAHt36aLiwsqoDzIjjWBg
pWCIvImYLalYGRBGtQbP1Jbbogi8iExHwkYljnelqxn65yaDClZJkF/E+u1Xwoa6
NDVr5ZUR3i0KPpYIpTfLsekQT0NUZ+WNKpfliT3fx/yi0LFBQe1AX6+6QE8+6y8n
7g+aYXRTAldyNRwsb8V6jx0v26nRQNTxB15766IZ65GmYNUNPh7WY1z5CAc83abF
adggARGVstAvk0TYa7l5XniAMItEoPxU3hOO+FTiz586PEJFf9/9CYgugI/6cnzW
Q8NE86VDJRf5Tkum8kiH/O2aoBh/8MjWhr3osjYf34UZOVllwRH4MZYWuC1sY5k5
1eo=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:17:13 2026 by rpki-client