Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/m2igiKkEJVVx3fzwxHnCs7tF3u8.roa
File:                     m2igiKkEJVVx3fzwxHnCs7tF3u8.roa (raw, json)
Hash identifier:          fSTqbCGGO/SN1kn0aV0axOGDFFc0IF5wchoB2gX0eZ8=
Subject key identifier:   9B:68:A0:88:A9:04:25:55:71:DD:FC:F0:C4:79:C2:B3:BB:45:DE:EF
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0636
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/m2igiKkEJVVx3fzwxHnCs7tF3u8.roa
Signing time:             Sun 01 Mar 2026 02:25:55 +0000
ROA not before:           Sun 01 Mar 2026 02:25:55 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:9800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1590 (0x636)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 02:25:55 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=9B68A088A904255571DDFCF0C479C2B3BB45DEEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9b:35:7c:0a:a4:b2:5e:7d:bc:4c:42:45:d7:
                    02:9c:91:36:65:45:94:76:3e:6b:4c:08:9c:3c:18:
                    b5:7a:50:f3:16:69:0f:a7:c3:ca:7d:2d:22:b5:0e:
                    c0:de:ee:f5:6a:af:82:ce:ac:fe:54:f8:79:a1:9e:
                    fb:65:d8:05:4a:94:c0:a7:97:af:a4:af:ee:1f:8e:
                    6b:a6:07:cd:75:2b:77:54:0c:9f:e1:08:53:3b:45:
                    7c:07:9c:05:f2:56:1b:00:4e:27:fa:5b:9b:a2:9e:
                    56:d8:61:77:e0:84:42:fc:29:98:60:17:65:9e:67:
                    2d:ed:1c:24:0e:b1:71:53:e9:e0:31:1a:1b:7b:26:
                    f8:41:48:db:25:af:a4:27:a0:d0:34:d2:b9:b3:53:
                    63:9e:85:c8:d0:bb:ef:9f:76:75:46:f6:8b:39:2b:
                    3f:9d:68:ae:35:b5:f4:1c:22:49:02:90:cd:49:d5:
                    e2:94:27:1d:92:b3:7f:29:75:80:aa:b9:a0:1b:0c:
                    26:4e:87:e3:f5:21:7d:94:8f:52:0f:67:34:ec:5f:
                    19:99:36:9a:26:31:89:89:3d:33:2e:98:df:69:1d:
                    6f:ad:ae:3a:6c:55:40:1f:c5:3a:ae:1c:e3:98:ed:
                    14:6e:4c:0f:a6:c0:c6:2b:bd:8b:84:80:b4:f4:01:
                    89:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:68:A0:88:A9:04:25:55:71:DD:FC:F0:C4:79:C2:B3:BB:45:DE:EF
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/m2igiKkEJVVx3fzwxHnCs7tF3u8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:9800::/40

    Signature Algorithm: sha256WithRSAEncryption
         68:ca:fb:59:ec:52:45:ed:60:b0:ce:84:c5:7c:1b:10:af:1a:
         c2:d8:e0:c6:f9:57:d5:b2:07:3c:28:b3:dc:80:6a:e5:66:a1:
         f3:0c:22:e1:20:5e:24:94:76:9d:9a:f5:5f:c2:18:1a:80:2a:
         24:55:2e:81:74:9f:ef:86:62:e3:27:91:b8:7c:e6:17:e6:01:
         4f:53:26:1d:e6:fe:2a:c2:74:b9:a2:99:f3:73:5d:2d:43:12:
         08:4c:1a:d9:9f:7d:76:6f:a8:22:57:1b:12:b2:32:52:b9:16:
         9b:3d:c8:21:aa:4e:3b:92:35:22:f5:5c:58:54:5d:44:3b:97:
         0a:cb:50:a2:92:09:84:9f:a9:fb:2a:e1:5d:27:08:00:2f:25:
         de:a8:dd:6d:e8:db:c6:2a:06:0b:cb:a3:1d:0c:38:7d:80:62:
         ee:c5:85:4f:69:e8:0b:a1:2c:48:88:19:fd:20:0a:29:30:dc:
         f4:d0:38:e7:2a:fa:98:cc:33:94:03:e2:03:c1:3d:5f:66:d9:
         1e:4d:ed:f1:7d:fa:cc:be:fe:c0:41:53:ce:e7:78:32:a3:70:
         d0:04:71:42:11:b3:ba:1d:d4:5e:38:8f:3b:af:63:1c:3c:bd:
         98:2e:35:6c:f8:74:d9:74:0e:21:2d:56:01:2a:ea:78:36:e9:
         16:be:cd:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:40:33 2026 by rpki-client