Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/n6QBup39HSF_51GLddgS1VFDflk.roa
File:                     n6QBup39HSF_51GLddgS1VFDflk.roa (raw, json)
Hash identifier:          12X6Drq3gWjCCk9XDsDVeaaO5Z4zg4bz9qskcQMy4Tw=
Subject key identifier:   9F:A4:01:BA:9D:FD:1D:21:7F:E7:51:8B:75:D8:12:D5:51:43:7E:59
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       05D8
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/n6QBup39HSF_51GLddgS1VFDflk.roa
Signing time:             Sun 01 Mar 2026 02:10:54 +0000
ROA not before:           Sun 01 Mar 2026 02:10:54 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:8300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1496 (0x5d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 02:10:54 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=9FA401BA9DFD1D217FE7518B75D812D551437E59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:13:18:a4:32:92:f0:a1:00:c2:7b:93:be:27:
                    da:78:0f:db:16:c1:59:db:99:80:98:30:7d:0c:cd:
                    b9:06:cc:24:51:5b:f1:e8:ac:b7:a3:de:a9:17:66:
                    bd:f2:7d:18:ea:b9:d7:84:6b:ff:98:38:27:f9:3e:
                    25:4c:d3:56:80:e1:93:d2:5d:34:c9:78:24:c3:c4:
                    3a:03:dc:7f:8f:f6:b6:d7:2a:5f:e5:a3:40:02:15:
                    8b:6c:8b:58:7f:a9:4e:8e:7a:3a:48:c5:7c:ac:bf:
                    5a:32:f7:84:3a:54:b5:59:3a:90:cb:e3:f0:f4:a0:
                    ae:7f:75:16:45:82:cc:03:df:9b:11:69:55:ef:73:
                    f2:aa:89:29:cb:df:1a:4a:83:df:f8:ba:8d:a7:e5:
                    7b:60:dc:36:3f:26:14:52:29:5d:4f:66:09:44:29:
                    e4:98:79:c7:e2:fb:da:46:41:ea:af:e2:e3:1e:ce:
                    15:bb:ff:77:b9:3d:74:a0:04:83:28:49:b2:0a:63:
                    1a:e7:02:82:17:d3:44:66:64:11:a4:31:0d:d3:74:
                    c5:a5:da:5d:d2:4f:35:8d:70:af:35:be:7b:54:73:
                    be:18:9b:70:d1:ae:9a:41:fe:b1:c5:6f:bc:fd:66:
                    01:d6:1e:68:5c:3d:b6:ce:cc:2c:9d:32:5b:50:78:
                    e4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:A4:01:BA:9D:FD:1D:21:7F:E7:51:8B:75:D8:12:D5:51:43:7E:59
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/n6QBup39HSF_51GLddgS1VFDflk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:8300::/40

    Signature Algorithm: sha256WithRSAEncryption
         b6:cc:17:5b:b5:9d:b0:ab:f6:d1:54:1c:76:99:70:b1:76:89:
         6e:9f:d2:b6:04:05:73:11:5c:d1:33:2f:ab:d7:ed:ab:fa:74:
         28:70:83:ca:c2:d2:23:94:58:84:52:e1:43:aa:b6:13:15:1e:
         03:1d:82:a2:de:3d:2e:d0:96:bd:95:cc:d3:fe:f9:7d:70:1c:
         09:71:01:cb:b1:ba:85:4c:90:70:28:19:9f:17:06:d4:8b:46:
         ac:ba:ec:30:86:71:8d:16:8f:2e:c6:0e:6f:e4:3d:78:f7:67:
         0c:d8:c6:43:1e:81:8a:d9:bc:f2:4b:34:6f:d4:28:b9:58:5c:
         ab:79:f5:8e:63:df:00:04:9d:01:99:8b:b9:a7:2e:b5:14:b4:
         b1:a7:d8:a8:60:88:60:8c:5f:a8:53:5e:e7:71:ff:73:5e:35:
         dd:ed:40:1e:c2:3f:b9:17:10:07:5a:50:4a:f0:05:83:fc:18:
         5d:83:3d:11:22:56:64:5a:b4:37:8e:b3:a7:50:68:ef:35:9c:
         40:e5:34:3f:57:1c:73:2e:68:3f:7a:77:75:60:fe:78:2c:a2:
         d3:4b:b3:77:0b:3c:e2:5a:c2:85:99:9c:02:ea:eb:aa:48:bc:
         32:fe:ed:06:3e:8c:f7:1f:29:c0:d6:6d:bf:05:dd:1d:ad:b9:
         13:93:4e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:22:57 2026 by rpki-client