Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/iZ4c3JgUyGXqmO7kCpW8rSkSMqc.roa
File:                     iZ4c3JgUyGXqmO7kCpW8rSkSMqc.roa (raw, json)
Hash identifier:          N/ozFskY4cYIHjqGjqkRuWV2wxMDiet5/kcfXveN/+E=
Subject key identifier:   89:9E:1C:DC:98:14:C8:65:EA:98:EE:E4:0A:95:BC:AD:29:12:32:A7
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0562
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/iZ4c3JgUyGXqmO7kCpW8rSkSMqc.roa
Signing time:             Sun 01 Mar 2026 01:46:57 +0000
ROA not before:           Sun 01 Mar 2026 01:46:57 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:5700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 14:04:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1378 (0x562)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 01:46:57 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=899E1CDC9814C865EA98EEE40A95BCAD291232A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f3:23:41:f5:3c:98:24:89:99:c9:e1:59:8d:
                    48:90:70:cd:95:62:44:1f:03:7a:8f:4f:3e:d9:73:
                    4c:0d:24:d3:19:c9:57:bd:8f:9a:e2:51:ac:2f:a6:
                    ef:6c:64:dd:b6:1e:06:b5:0b:28:a8:b2:a8:a7:21:
                    74:6f:3b:7b:76:53:e6:c2:99:eb:e2:ab:42:49:32:
                    26:d7:e9:31:3f:87:d8:39:9d:d6:0d:d9:24:6e:10:
                    15:f4:9d:4a:d5:23:6b:77:8b:bf:bb:f7:98:ed:3a:
                    40:c5:c4:66:db:9e:ca:50:4b:31:b8:87:66:d4:a1:
                    fc:89:85:45:2e:49:67:45:c1:35:87:ba:2f:ba:48:
                    a6:13:a5:b4:8c:41:a3:d0:ec:9e:f8:2f:f1:27:42:
                    8a:0f:e4:23:f0:10:a6:36:ce:86:14:c9:18:b5:92:
                    67:93:5a:32:1d:9b:48:fb:15:75:25:40:1f:c6:28:
                    09:17:89:72:a5:76:79:3f:6e:f3:33:42:55:a5:ff:
                    3c:09:72:c2:4c:22:04:7d:35:2c:15:92:b4:54:01:
                    53:de:43:af:2c:24:15:49:c8:21:0e:27:42:5f:e6:
                    75:62:c3:56:7e:02:b5:57:5d:eb:04:30:34:e0:57:
                    e3:90:f2:6d:a8:42:2b:33:d2:49:ef:44:0b:17:22:
                    67:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:9E:1C:DC:98:14:C8:65:EA:98:EE:E4:0A:95:BC:AD:29:12:32:A7
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/iZ4c3JgUyGXqmO7kCpW8rSkSMqc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:5700::/40

    Signature Algorithm: sha256WithRSAEncryption
         4f:24:73:be:2a:11:61:2d:08:e2:1f:ae:bf:d4:f4:f4:f6:63:
         09:8d:62:b5:3b:de:e6:ab:79:97:6b:4f:fb:5b:7e:d6:70:97:
         e4:79:9b:1b:9c:c2:d0:52:bc:a3:88:73:81:6e:4d:5f:b5:40:
         27:9e:9e:4d:25:49:75:ff:ba:66:3f:8a:54:aa:76:90:5c:94:
         97:39:16:00:49:a4:e7:53:9d:eb:66:b4:d6:b0:20:b1:da:bd:
         1e:a7:09:45:f7:c8:45:a7:e9:b1:52:9a:25:4b:a5:e8:c9:e2:
         5b:b4:ad:ad:8c:2f:71:ee:30:b4:ba:5a:98:06:b8:7f:be:a9:
         9e:d6:58:06:85:0a:d7:11:ab:f8:38:e1:84:31:c2:6a:44:67:
         75:39:c0:3e:21:3a:b7:7e:48:82:d1:de:43:7b:d5:91:c8:6d:
         cc:94:08:f6:97:6a:cd:b9:9a:20:78:49:3e:e0:d6:0e:55:ba:
         aa:6c:d9:e6:a5:9f:e2:82:68:22:0e:e6:2a:a2:18:0d:d5:90:
         88:3f:7d:61:17:fa:57:9b:61:b0:a0:bc:51:5b:a7:a0:59:c7:
         b4:5e:91:d3:03:bb:76:4b:33:64:1d:83:9a:67:b3:a4:23:91:
         ec:8d:84:b1:42:7a:53:47:47:e8:39:06:e4:8c:73:22:07:91:
         37:e8:8b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:04:57 2026 by rpki-client