Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/m1jRAyAxBL_1_an-py-_RfRjqe0.roa
File:                     m1jRAyAxBL_1_an-py-_RfRjqe0.roa (raw, json)
Hash identifier:          ZHfp9syMn5KKqKA9wG/I1zZ5mDZ7+8bLQ1ukp2zffgE=
Subject key identifier:   9B:58:D1:03:20:31:04:BF:F5:FD:A9:FE:A7:2F:BF:45:F4:63:A9:ED
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0546
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/m1jRAyAxBL_1_an-py-_RfRjqe0.roa
Signing time:             Sun 01 Mar 2026 01:41:16 +0000
ROA not before:           Sun 01 Mar 2026 01:41:16 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:fe00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1350 (0x546)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 01:41:16 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=9B58D103203104BFF5FDA9FEA72FBF45F463A9ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:17:85:89:87:0a:cf:9d:57:3e:67:ba:2c:8b:
                    16:87:ca:cd:ee:b5:32:a9:25:08:1c:3e:de:27:da:
                    89:83:2a:94:6e:31:41:f3:81:21:78:72:93:00:a7:
                    fb:84:67:02:83:42:22:44:a0:22:b5:fe:9d:86:28:
                    62:fb:d0:21:93:f0:a1:ed:72:96:79:13:2e:95:3d:
                    5b:fd:7c:1f:fa:fd:15:24:49:00:c5:6a:6c:e9:5f:
                    5f:2b:51:77:66:e6:49:14:c1:08:b3:7f:30:43:67:
                    f8:d3:dd:9b:28:3d:d3:cf:a9:de:d8:cb:d4:8b:f4:
                    6a:41:0d:b6:b2:41:8b:75:fc:d1:f4:ec:7b:ee:fe:
                    d9:60:d9:43:39:1c:55:d9:52:39:fe:79:d3:53:5f:
                    b4:47:6d:bf:58:3d:69:d4:b6:36:04:7c:2e:8f:df:
                    f6:39:10:f6:1f:69:0d:11:76:2b:9c:a8:11:04:ba:
                    6c:69:9e:72:59:47:e0:62:93:35:36:86:bc:c2:d3:
                    a6:df:3c:7f:76:14:1f:88:e3:8e:3e:b1:c8:19:44:
                    ee:5e:14:29:d8:9f:56:93:5c:40:9d:31:d4:a4:e2:
                    09:d9:ed:03:99:d5:e6:53:54:a4:dc:89:2f:01:38:
                    d8:68:b4:db:b3:ff:28:9b:4e:1c:28:a7:00:b4:cb:
                    96:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:58:D1:03:20:31:04:BF:F5:FD:A9:FE:A7:2F:BF:45:F4:63:A9:ED
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/m1jRAyAxBL_1_an-py-_RfRjqe0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:fe00::/40

    Signature Algorithm: sha256WithRSAEncryption
         59:39:3e:01:2b:06:70:2e:bd:11:c3:80:ec:14:b9:87:a5:07:
         a2:91:ba:1f:12:63:83:9e:f3:d2:db:eb:3b:31:92:ae:25:20:
         f5:34:83:22:f8:99:0c:74:f9:67:b2:21:ec:a6:ec:61:5a:11:
         5e:28:f0:d5:e2:d8:07:1c:a7:84:2d:f9:a8:bd:af:3c:5b:89:
         17:88:c3:46:a9:a6:d6:3f:54:4e:31:c3:2c:b8:a3:d5:87:38:
         e7:82:4f:e6:19:56:0a:81:36:71:5b:d6:f8:c9:8d:7d:e1:58:
         e1:9c:57:de:1d:7b:45:c7:e2:57:ce:c5:a9:d1:d7:1f:ab:de:
         e6:c5:5e:fc:a6:7b:d2:49:d8:f8:d7:12:a9:88:1b:c2:d3:0c:
         dd:84:97:2a:fb:10:cd:c7:e5:e9:56:7e:07:94:88:9e:81:53:
         c1:fd:20:29:e9:40:2a:b1:29:6c:c0:0a:9d:46:95:96:c1:ee:
         ad:dd:e4:82:5e:a8:8e:2f:3f:ea:8c:85:08:20:4e:f5:eb:ce:
         4a:b1:d4:d1:63:1c:da:5a:ec:81:80:05:35:d8:e3:fa:9b:6c:
         31:39:18:3b:45:b2:c0:11:3b:11:dc:3a:27:04:4a:ed:c5:26:
         04:db:6d:d0:94:2e:ad:dd:25:d6:27:e1:28:ce:af:f0:94:09:
         df:92:26:ce
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICBUYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjAzMDEw
MTQxMTZaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDlCNThEMTAzMjAzMTA0
QkZGNUZEQTlGRUE3MkZCRjQ1RjQ2M0E5RUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDSF4WJhwrPnVc+Z7osixaHys3utTKpJQgcPt4n2omDKpRuMUHz
gSF4cpMAp/uEZwKDQiJEoCK1/p2GKGL70CGT8KHtcpZ5Ey6VPVv9fB/6/RUkSQDF
amzpX18rUXdm5kkUwQizfzBDZ/jT3ZsoPdPPqd7Yy9SL9GpBDbayQYt1/NH07Hvu
/tlg2UM5HFXZUjn+edNTX7RHbb9YPWnUtjYEfC6P3/Y5EPYfaQ0RdiucqBEEumxp
nnJZR+BikzU2hrzC06bfPH92FB+I444+scgZRO5eFCnYn1aTXECdMdSk4gnZ7QOZ
1eZTVKTciS8BONhotNuz/yibThwopwC0y5aTAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUm1jRAyAxBL/1/an+py+/RfRjqe0wHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9tMWpSQXlBeEJMXzFfYW4tcHktX1JmUmpxZTAu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa/4wDQYJKoZIhvcNAQELBQADggEBAFk5PgErBnAuvRHDgOwU
uYelB6KRuh8SY4Oe89Lb6zsxkq4lIPU0gyL4mQx0+WeyIeym7GFaEV4o8NXi2Acc
p4Qt+ai9rzxbiReIw0apptY/VE4xwyy4o9WHOOeCT+YZVgqBNnFb1vjJjX3hWOGc
V94de0XH4lfOxanR1x+r3ubFXvyme9JJ2PjXEqmIG8LTDN2Elyr7EM3H5elWfgeU
iJ6BU8H9ICnpQCqxKWzACp1GlZbB7q3d5IJeqI4vP+qMhQggTvXrzkqx1NFjHNpa
7IGABTXY4/qbbDE5GDtFssAROxHcOicESu3FJgTbbdCULq3dJdYn4SjOr/CUCd+S
Js4=
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:59:47 2026 by rpki-client