Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/jiLoVxjIKK5wo0G-6aK_-g_Sq3o.roa
File:                     jiLoVxjIKK5wo0G-6aK_-g_Sq3o.roa (raw, json)
Hash identifier:          XC3I+vCde7FUq4R8aRl9QaAja5KBUjjzgZYv8sBfWck=
Subject key identifier:   8E:22:E8:57:18:C8:28:AE:70:A3:41:BE:E9:A2:BF:FA:0F:D2:AB:7A
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0584
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/jiLoVxjIKK5wo0G-6aK_-g_Sq3o.roa
Signing time:             Sun 01 Mar 2026 01:52:25 +0000
ROA not before:           Sun 01 Mar 2026 01:52:25 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:61:1e00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1412 (0x584)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 01:52:25 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=8E22E85718C828AE70A341BEE9A2BFFA0FD2AB7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:e3:86:d8:e4:2c:83:f7:89:02:06:e1:bf:32:
                    5c:ef:17:6e:60:2c:c6:a7:16:bd:e6:77:be:60:55:
                    37:31:12:27:30:4d:c3:9b:11:a6:1e:46:98:42:c2:
                    03:f0:1b:2b:03:36:13:13:4c:13:96:7a:a7:84:6e:
                    c4:bd:34:37:d4:f0:f8:22:19:20:54:72:9e:2b:11:
                    86:d8:e1:55:80:c8:a0:81:91:ff:d9:d4:64:5f:cf:
                    0a:d8:93:13:90:31:a6:53:75:ae:df:55:d6:a0:d3:
                    a7:ce:dc:f9:23:d8:7f:e9:33:89:30:02:cf:f3:a2:
                    3e:dc:4e:4b:11:73:4a:31:61:73:b9:cf:25:a7:f6:
                    c2:54:be:90:2c:69:31:47:ea:b2:04:a0:65:4d:57:
                    a8:cf:fb:39:31:26:f6:4e:d9:89:10:b1:c3:e4:0d:
                    6e:ba:95:cf:5f:30:00:de:6d:cb:07:f6:e9:e3:9f:
                    90:74:f2:3a:af:ed:a8:a3:c2:a0:3a:18:8e:42:a3:
                    f5:7a:63:3e:49:75:ec:18:39:8f:a0:a4:0a:47:a1:
                    51:36:f1:6c:81:8d:04:42:bd:de:57:b9:cf:3f:23:
                    9f:b0:3b:26:79:28:95:b8:07:d8:91:6c:ee:25:a2:
                    90:51:ef:e9:75:5a:53:93:43:8f:b8:63:66:f5:d0:
                    03:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:22:E8:57:18:C8:28:AE:70:A3:41:BE:E9:A2:BF:FA:0F:D2:AB:7A
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/jiLoVxjIKK5wo0G-6aK_-g_Sq3o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:1e00::/48

    Signature Algorithm: sha256WithRSAEncryption
         24:2f:3e:ae:df:47:14:18:9c:ff:bf:ad:b4:79:88:62:bd:5b:
         f4:53:81:93:9a:80:cd:92:4e:da:d9:9e:25:8a:db:23:73:a8:
         a2:2d:71:58:ee:04:6c:2d:14:02:d5:a9:89:60:74:fa:18:b9:
         83:15:21:35:33:6c:e4:77:d7:1e:5a:57:c8:9b:c0:d2:d0:81:
         8f:62:59:1a:dc:95:70:d7:56:08:66:22:c9:85:fb:8c:82:2c:
         dd:46:02:2a:d0:a5:06:eb:9f:99:ec:20:60:45:c2:ab:63:01:
         7c:7b:3f:1d:45:e7:7b:7c:9e:78:b0:7c:46:9d:68:12:e6:d6:
         11:60:11:a8:35:03:2b:99:79:9c:06:14:c5:16:fb:f3:c2:0c:
         3d:91:6d:8d:ef:b0:56:73:58:ea:09:52:6b:b8:44:35:7f:04:
         2b:e9:2d:ed:5e:ad:d0:bf:79:61:cc:2b:0f:82:85:f6:f9:8b:
         55:61:aa:a0:56:2d:e6:0b:d3:60:2a:ea:8a:84:99:98:5d:68:
         7a:89:c9:6c:cd:44:ca:47:97:73:e4:58:55:fd:df:30:5d:45:
         23:ac:01:27:28:55:28:b7:13:19:14:a1:6b:b2:a3:e6:b6:4c:
         08:9b:2e:a2:bf:08:8c:da:95:08:d1:32:f9:40:e9:4c:4d:07:
         5f:a0:2c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:01:10 2026 by rpki-client