Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/lxDSE5gQbUYbmlBO026qm_-bJTg.roa
File:                     lxDSE5gQbUYbmlBO026qm_-bJTg.roa (raw, json)
Hash identifier:          De2JDVNf2ZgwWB8k0XYx4pkqNbLLwSJqIWXCpznP+ZA=
Subject key identifier:   97:10:D2:13:98:10:6D:46:1B:9A:50:4E:D3:6E:AA:9B:FF:9B:25:38
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       05C6
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/lxDSE5gQbUYbmlBO026qm_-bJTg.roa
Signing time:             Sun 01 Mar 2026 02:05:32 +0000
ROA not before:           Sun 01 Mar 2026 02:05:32 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:7000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1478 (0x5c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 02:05:32 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=9710D21398106D461B9A504ED36EAA9BFF9B2538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8f:88:32:b1:16:2b:1f:93:c6:fe:38:aa:7f:
                    5e:71:29:2d:f4:39:08:f0:6f:3e:6c:0c:c0:5b:2b:
                    a4:8e:8e:13:21:b8:2c:0b:46:b5:01:02:37:9e:08:
                    d5:f3:03:d2:0a:36:d6:c7:4d:9d:fb:8c:67:30:e5:
                    ef:c4:67:57:a1:0a:50:53:f4:75:c5:9b:5b:18:c5:
                    43:6c:c2:c9:a5:77:84:81:83:a8:f1:35:d0:04:b4:
                    85:fc:bc:bd:b9:ec:d0:92:64:5f:7d:34:d6:fd:0b:
                    70:00:62:84:42:19:02:26:d2:35:2b:37:2b:e4:6b:
                    6a:5c:e9:0e:fd:16:34:16:06:a4:73:1d:ca:b8:64:
                    68:10:2f:0b:78:54:55:6e:a8:db:0f:cf:80:4e:37:
                    b7:bc:ac:7e:1e:7b:f0:98:96:43:08:b9:7f:07:b9:
                    f8:95:b9:fb:b1:8c:ae:f7:9f:fc:93:0e:5b:0e:95:
                    c1:62:77:aa:b8:88:49:e7:aa:92:4e:dd:62:2a:38:
                    26:9b:13:27:ac:39:68:da:b4:57:22:0f:a8:97:fc:
                    f0:3c:73:b0:97:30:60:0f:1b:7c:90:63:be:8b:fe:
                    be:45:b1:93:1c:99:b0:f4:92:cd:b4:ed:54:69:ae:
                    0f:1f:06:0f:5c:f9:6a:0f:fb:74:97:1a:26:4b:cb:
                    f8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:10:D2:13:98:10:6D:46:1B:9A:50:4E:D3:6E:AA:9B:FF:9B:25:38
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/lxDSE5gQbUYbmlBO026qm_-bJTg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:7000::/40

    Signature Algorithm: sha256WithRSAEncryption
         ac:15:bd:9e:d1:f3:18:e0:9d:2b:48:20:13:81:be:bc:6d:a8:
         09:19:bb:09:1d:12:72:03:2e:7c:13:27:54:66:57:48:12:e9:
         59:54:b8:4f:86:08:c2:8c:a8:00:38:be:55:86:96:f6:09:c3:
         ac:f1:d6:8a:31:29:f1:bc:fd:9d:9d:fd:00:4a:54:87:71:3e:
         a7:39:c4:dc:e5:b7:8a:52:e5:2a:9d:26:d2:73:28:79:e6:2d:
         41:b7:af:8c:6e:0f:34:ea:cb:37:cb:e8:cf:18:53:40:a6:de:
         59:12:99:35:47:6c:4b:18:a3:39:bc:ad:fd:67:a3:87:ba:c2:
         9b:39:d1:e8:be:e1:9d:41:49:af:23:f0:43:32:15:f6:cb:c1:
         a6:ca:88:42:9b:00:f9:2d:68:02:88:73:fc:b8:12:db:ac:a5:
         9f:88:cd:da:33:ca:50:19:97:3b:48:8d:2d:86:db:59:42:72:
         94:4f:01:ab:b8:60:80:72:0e:c2:1f:60:74:c1:c1:fd:9c:ce:
         91:76:cb:e4:4c:e5:5f:7f:9c:a6:8c:b9:a4:48:0e:26:90:e0:
         5d:55:74:d8:1f:b5:96:f8:60:85:bc:53:bb:18:07:36:bf:de:
         36:26:17:a9:dc:d2:ac:93:da:7e:fd:bc:bc:56:14:91:ad:54:
         c9:a2:db:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:18:34 2026 by rpki-client