Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/jiD6VTHTnwnYKF_OLr4lZVfllO4.roa
File:                     jiD6VTHTnwnYKF_OLr4lZVfllO4.roa (raw, json)
Hash identifier:          lRr8CPGXsx696Ijqm0ktwtOwSwL8nN4P5Yz9BbIMXzE=
Subject key identifier:   8E:20:FA:55:31:D3:9F:09:D8:28:5F:CE:2E:BE:25:65:57:E5:94:EE
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       05B1
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/jiD6VTHTnwnYKF_OLr4lZVfllO4.roa
Signing time:             Sun 01 Mar 2026 02:00:56 +0000
ROA not before:           Sun 01 Mar 2026 02:00:56 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1457 (0x5b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 02:00:56 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=8E20FA5531D39F09D8285FCE2EBE256557E594EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:31:b3:0a:a1:18:c4:7b:ea:ab:ed:57:58:06:
                    db:32:04:f0:d8:00:d3:4a:7d:8f:f6:fb:64:23:b4:
                    8c:27:06:42:fa:8e:cd:9c:30:84:56:38:95:7f:4b:
                    8b:16:0e:5b:c3:b2:14:f4:57:61:66:df:c2:f3:3d:
                    29:46:88:51:a2:5d:a4:36:f3:e5:1d:34:ac:57:a6:
                    6c:6b:53:0a:24:85:a9:e8:38:08:0f:84:c9:c9:85:
                    b7:b2:9c:24:7f:0c:99:7e:b5:de:c0:bb:43:e9:30:
                    fd:65:bd:22:bd:87:68:96:dd:1b:8d:86:4a:55:67:
                    67:7e:04:ac:ed:92:32:b6:e8:1d:ea:06:69:34:b7:
                    88:c8:cf:42:a6:4d:44:f5:73:8f:37:83:06:dc:1b:
                    92:73:3e:78:db:9f:a7:80:63:84:97:7f:82:38:58:
                    00:ae:cb:95:17:fe:02:a9:7f:fa:71:8b:ce:f6:3e:
                    e2:13:55:05:9c:db:e9:59:bc:9d:ff:cf:cc:13:52:
                    79:9a:ca:a9:2d:f0:f1:19:02:47:d3:31:a3:3b:45:
                    fe:35:cb:e8:3f:c5:a9:2e:da:04:e0:62:50:66:3e:
                    92:66:d0:68:24:54:67:b2:4e:04:32:02:8c:dd:ae:
                    01:3f:20:89:fd:54:a7:b1:6b:c7:ef:07:d2:76:9a:
                    d7:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:20:FA:55:31:D3:9F:09:D8:28:5F:CE:2E:BE:25:65:57:E5:94:EE
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/jiD6VTHTnwnYKF_OLr4lZVfllO4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:f4:39:6e:9d:73:89:1f:12:6d:21:99:6f:a5:4c:6e:3d:e8:
         54:16:80:31:8b:82:9f:a4:49:60:12:63:8e:f3:3c:46:17:4d:
         17:69:f5:47:2e:6b:96:6f:7b:b9:a5:58:ff:a1:b0:70:19:46:
         27:17:64:b1:c8:81:1a:be:20:70:12:14:23:7c:2e:f0:75:6c:
         86:b7:7f:2c:91:23:51:8b:d0:46:4c:74:23:1f:25:1a:1a:e0:
         4b:f8:0a:3b:53:87:c5:e3:61:b1:49:fb:54:7b:5f:d7:f4:dd:
         47:1b:be:b6:89:09:f6:50:0b:48:94:dd:96:ab:0d:41:18:53:
         83:81:c0:58:d8:5d:35:fc:73:65:90:79:de:61:e8:35:38:84:
         9c:ce:de:ab:1c:ce:bf:d2:ba:f7:81:0d:ad:08:c4:65:4c:18:
         70:e6:3d:11:d5:29:94:5c:aa:35:90:d2:65:d9:03:41:5a:dc:
         68:be:ca:64:e3:aa:8c:5c:1c:33:ef:79:64:03:10:b6:d6:91:
         b8:21:9c:16:cc:28:7d:86:99:ba:a3:72:e5:60:72:54:1d:b0:
         2a:49:d7:20:41:43:dc:1b:f0:57:34:b2:87:5c:28:6a:2a:69:
         cc:7c:61:58:20:f8:b2:44:51:c2:53:50:a6:64:cb:c1:7e:1a:
         e3:f0:2e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:17:10 2026 by rpki-client