Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/m-S-xO6Gzqw-ueC_5EwxFnSWurI.roa
File:                     m-S-xO6Gzqw-ueC_5EwxFnSWurI.roa (raw, json)
Hash identifier:          Q12MmfC2DUs5y7bIiL28bSaMHjiNU6M7slAxaONevp4=
Subject key identifier:   9B:E4:BE:C4:EE:86:CE:AC:3E:B9:E0:BF:E4:4C:31:16:74:96:BA:B2
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0594
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/m-S-xO6Gzqw-ueC_5EwxFnSWurI.roa
Signing time:             Sun 01 Mar 2026 01:56:38 +0000
ROA not before:           Sun 01 Mar 2026 01:56:38 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:61:800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1428 (0x594)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 01:56:38 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=9BE4BEC4EE86CEAC3EB9E0BFE44C31167496BAB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:17:e3:d9:2e:ad:7e:7a:fc:22:24:61:ef:13:
                    cb:36:cf:f4:1a:76:a4:10:03:32:de:a9:b4:fc:98:
                    de:35:24:bd:8a:1b:20:42:a3:ac:2a:5e:a9:7a:9f:
                    d5:7f:7a:8d:0d:a6:9c:70:43:ac:1f:3f:59:6b:04:
                    5a:61:10:1c:97:73:6f:5e:79:eb:30:84:c3:88:e6:
                    30:36:18:23:3d:8a:01:ab:66:bc:6d:c8:99:37:4b:
                    0f:fe:39:13:f8:f6:9c:4e:cf:45:2f:6f:36:e7:19:
                    b7:dd:31:1c:0d:36:4f:70:a5:d9:3f:ca:45:dc:ee:
                    46:42:22:dd:56:19:6f:33:b0:b6:27:43:65:c0:92:
                    08:e9:aa:ef:0b:94:9b:a2:ce:1b:63:b8:05:1e:3a:
                    9a:a8:c0:74:fe:ce:29:91:f9:31:b6:02:70:ea:5e:
                    0e:92:3f:44:e1:1e:4c:07:c9:ef:e1:fa:07:43:b9:
                    fd:7a:a0:5e:31:62:4c:b8:6c:f5:83:eb:ba:7b:c2:
                    98:98:d3:81:b5:ae:f4:c6:8a:66:af:cc:18:eb:16:
                    a8:3d:63:cf:88:2b:e9:25:01:6c:0c:98:ca:5b:0b:
                    91:6c:c3:a1:4e:af:13:35:a9:c3:0f:c9:fa:2f:d1:
                    54:bd:58:0f:34:70:57:92:e8:57:71:7e:61:2d:fb:
                    28:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:E4:BE:C4:EE:86:CE:AC:3E:B9:E0:BF:E4:4C:31:16:74:96:BA:B2
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/m-S-xO6Gzqw-ueC_5EwxFnSWurI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:800::/38

    Signature Algorithm: sha256WithRSAEncryption
         c6:d7:7a:bf:e3:55:d8:44:81:26:8e:d3:bc:83:cd:cd:19:ea:
         d8:d7:3b:62:d1:43:0d:dd:7d:f4:0c:13:71:3b:1f:d5:c5:0c:
         90:c8:4b:28:80:6f:53:83:b3:51:2b:71:17:a8:25:d7:8e:d0:
         5c:a8:d0:ac:d1:95:b8:3e:ee:0b:12:d2:48:f3:fd:d6:d2:66:
         64:36:aa:bd:43:0d:21:a5:7e:e6:98:2f:2a:35:48:04:5c:eb:
         f5:b2:e2:c4:0a:b6:c5:e5:58:5b:62:9c:4d:cf:b6:b6:c9:e5:
         12:6d:e8:71:0d:94:04:f1:17:44:e8:20:0e:9f:e8:2c:82:2c:
         45:96:fe:66:b8:f7:ee:39:49:d6:94:4b:79:89:b3:62:74:cb:
         92:80:56:67:c8:8a:14:65:21:60:fb:01:89:7d:b0:0b:af:0c:
         5f:f8:a6:3e:7c:3c:ed:c7:7f:39:94:a1:d9:bb:c7:5f:59:5a:
         b3:41:94:38:70:a6:3b:cf:76:f9:ae:64:f7:a7:b1:4f:7f:ba:
         7b:32:e4:d7:29:a0:84:30:01:45:30:44:ec:9b:74:36:9b:1b:
         16:99:18:a8:40:3f:30:43:c1:24:f6:14:74:b7:5c:b6:f1:a1:
         91:aa:d5:9a:9c:4e:be:f3:16:7e:98:ee:7f:12:15:be:27:f1:
         00:56:29:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:56:19 2026 by rpki-client