Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/kblLfALl3V1c7GmABK-rgQplIqA.roa
File:                     kblLfALl3V1c7GmABK-rgQplIqA.roa (raw, json)
Hash identifier:          LnYYBECl0l33YhbxuZpUbclH0H05eE5hV5aybaZJo6E=
Subject key identifier:   91:B9:4B:7C:02:E5:DD:5D:5C:EC:69:80:04:AF:AB:81:0A:65:22:A0
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0532
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/kblLfALl3V1c7GmABK-rgQplIqA.roa
Signing time:             Sun 01 Mar 2026 01:34:53 +0000
ROA not before:           Sun 01 Mar 2026 01:34:53 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:60:f01e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1330 (0x532)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 01:34:53 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=91B94B7C02E5DD5D5CEC698004AFAB810A6522A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b4:3b:ca:e8:a1:0e:09:66:87:58:ec:dd:d6:
                    04:f0:e1:28:78:5c:69:6e:99:ef:24:e4:a2:2a:a6:
                    ca:43:9c:02:62:09:49:cd:ed:ca:94:23:b6:56:af:
                    d0:9d:87:33:ed:f9:17:e2:77:44:85:98:01:17:db:
                    8d:bb:ca:96:82:c7:ca:7e:37:95:22:49:e0:4a:58:
                    e5:b2:aa:51:b4:de:12:cd:08:7a:d8:78:70:8f:33:
                    97:21:2b:fe:e3:fc:f5:89:83:4f:4d:91:f0:8b:ea:
                    1b:01:f0:c4:49:f7:30:e9:eb:20:49:a0:99:d7:e2:
                    f6:d6:93:f8:92:4e:8f:d0:b8:bf:fe:31:2b:f1:9c:
                    3c:d2:ac:03:e4:f1:18:20:01:92:e7:6b:7a:6c:41:
                    ef:a6:34:b6:41:8d:16:df:36:44:e7:95:b3:9b:91:
                    b6:6e:04:a8:4d:ca:9f:f8:fc:cf:a1:1a:6a:c8:5e:
                    08:7d:e0:d9:09:11:62:14:81:11:96:27:15:52:46:
                    1a:5a:ba:95:d0:22:04:ff:f5:f2:f3:11:b0:06:51:
                    d8:c1:ce:60:7a:38:1f:8d:19:0e:2f:8c:35:de:a8:
                    ea:b8:14:ef:a0:94:31:d0:ee:8b:d4:2a:93:be:32:
                    10:8f:9b:78:f8:9b:39:d2:bc:41:2d:08:27:e0:ce:
                    59:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B9:4B:7C:02:E5:DD:5D:5C:EC:69:80:04:AF:AB:81:0A:65:22:A0
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/kblLfALl3V1c7GmABK-rgQplIqA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:60:f01e::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:53:e4:0e:f0:b8:c8:ee:04:b2:6d:59:55:c3:97:b7:c1:88:
         3a:f1:d7:00:2f:95:33:53:c1:e7:08:cf:83:92:b9:f0:c2:3d:
         bf:fb:8d:48:d7:94:83:da:ab:f1:1f:8d:36:0e:3d:16:ae:12:
         60:0a:9e:86:cc:e0:bb:35:a7:66:e2:01:8f:da:8c:30:5b:5a:
         51:c7:5f:e8:05:78:d7:fb:70:7f:cc:7e:67:f3:39:2d:7a:df:
         ed:20:cd:0f:72:d9:57:aa:12:b0:40:1f:14:ed:ec:fe:9c:a8:
         01:53:f9:26:b4:b9:57:bb:55:eb:6f:72:7d:ae:96:9b:8f:9a:
         6d:e4:62:6d:dd:6d:45:72:63:7f:41:ee:64:07:4d:05:dd:f5:
         cf:d7:1b:4e:1e:18:8e:9c:0d:98:20:7e:c2:2f:35:c2:0e:c5:
         e5:04:ef:24:f9:15:dc:fe:b7:d6:3b:36:95:39:cd:23:f7:79:
         46:77:f2:a0:86:5a:f6:46:09:57:6e:5c:8d:26:26:10:c6:91:
         69:27:ba:57:e8:ea:94:5b:b0:80:55:40:eb:32:75:97:a5:21:
         f8:0b:8a:b6:20:62:3d:07:aa:b0:ba:04:2a:5b:31:98:aa:a2:
         a2:d3:9f:e7:bc:0f:0e:ac:4b:f7:2a:ee:f6:f3:8c:22:50:03:
         02:16:a1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:24 2026 by rpki-client