Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/mE5FknlE53Nf7YFxPrwbYDjVo7s.roa
File:                     mE5FknlE53Nf7YFxPrwbYDjVo7s.roa (raw, json)
Hash identifier:          NQ8RxCXJEUPQKignrfJP+1jwddulIuTVjvhDiIQKfuE=
Subject key identifier:   98:4E:45:92:79:44:E7:73:5F:ED:81:71:3E:BC:1B:60:38:D5:A3:BB
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0522
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/mE5FknlE53Nf7YFxPrwbYDjVo7s.roa
Signing time:             Sun 01 Mar 2026 01:34:44 +0000
ROA not before:           Sun 01 Mar 2026 01:34:44 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:9300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1314 (0x522)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 01:34:44 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=984E45927944E7735FED81713EBC1B6038D5A3BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:48:fa:98:4f:0c:77:20:29:3a:67:a6:b3:ff:
                    ba:15:79:46:c6:df:4e:da:cf:d7:90:cc:c0:fa:fe:
                    12:5e:65:9c:ef:67:0e:df:0b:e5:07:47:5e:6f:89:
                    ac:1c:11:06:86:9b:55:9c:5b:24:0e:b7:7b:96:d1:
                    f7:53:ea:4f:94:ae:12:da:af:dc:d1:46:cf:a8:31:
                    d5:7f:39:48:12:06:95:07:98:f6:4d:a0:3c:32:3b:
                    81:8f:b1:25:95:2d:e9:81:75:9e:76:82:53:88:c6:
                    56:3a:4c:9e:8f:b6:83:6d:f2:f7:b3:65:da:1a:46:
                    8e:70:36:11:68:6a:73:38:c5:94:c0:98:b3:a9:25:
                    f6:a0:10:8e:af:bf:18:56:6c:ef:f3:ac:b3:93:04:
                    3f:bb:fc:26:13:b7:2b:fe:09:fd:55:50:83:04:e2:
                    69:1c:33:dd:b7:95:4a:fb:14:38:33:e2:14:d4:f8:
                    5a:c8:fc:35:f1:ab:ba:80:02:e2:a3:10:72:3a:8c:
                    d6:80:c6:0c:93:3c:b9:bf:dd:be:c8:13:3e:a9:67:
                    45:04:ee:15:9d:eb:40:dc:10:c9:cd:ea:67:2f:0f:
                    ce:b1:57:cd:ed:a9:b3:f9:31:9c:27:5a:94:41:c4:
                    f4:b6:77:dc:3c:16:cc:65:96:6a:5b:78:b1:c5:25:
                    ba:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:4E:45:92:79:44:E7:73:5F:ED:81:71:3E:BC:1B:60:38:D5:A3:BB
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/mE5FknlE53Nf7YFxPrwbYDjVo7s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:9300::/40

    Signature Algorithm: sha256WithRSAEncryption
         36:ff:9b:d3:9d:df:3f:8a:ee:85:8c:3c:d0:26:72:84:51:45:
         f7:ab:15:37:95:75:30:7c:6a:55:41:57:e5:5b:f6:da:27:18:
         6f:d4:a6:d0:85:e0:07:f8:14:b1:53:7c:80:84:b4:02:01:05:
         56:eb:57:71:90:49:ae:e3:3f:69:22:df:1f:dd:50:00:13:51:
         8e:31:32:e8:47:dd:8e:02:41:2d:59:91:b5:1f:79:44:15:e4:
         58:01:1f:18:2f:c4:bd:e6:32:1f:74:3a:15:b7:87:30:21:6b:
         c0:dd:f9:73:c0:d5:c9:d5:a7:23:bd:ff:2d:19:f2:2f:31:5c:
         92:7e:cf:b2:7e:66:22:fa:07:bc:4d:48:2e:4c:ab:86:70:9f:
         fc:67:cb:20:e2:18:5c:12:67:20:62:c2:b3:89:21:80:5f:43:
         12:4d:39:c4:de:a7:f0:1b:aa:80:73:63:f1:59:f8:81:5f:59:
         03:d3:b2:d3:ea:88:0e:f3:36:12:b6:e7:4d:9f:ec:8a:eb:39:
         98:5e:16:85:d8:af:c5:35:dc:f9:79:f5:f8:54:a5:00:1b:d8:
         6e:18:58:d4:f1:be:d5:05:93:8a:9d:43:f2:3c:a9:b9:ab:97:
         a1:9c:dc:fd:63:29:07:57:1f:39:c3:4d:22:0e:6e:53:86:9f:
         72:bb:12:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:55:00 2026 by rpki-client