Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/n9ADewsPGpX9AkOxvnWuDTuQHVI.roa
File:                     n9ADewsPGpX9AkOxvnWuDTuQHVI.roa (raw, json)
Hash identifier:          uodI4+YpYimh/ECPH652zGOhPAid40CmctAybkHTSq0=
Subject key identifier:   9F:D0:03:7B:0B:0F:1A:95:FD:02:43:B1:BE:75:AE:0D:3B:90:1D:52
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0644
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/n9ADewsPGpX9AkOxvnWuDTuQHVI.roa
Signing time:             Sun 01 Mar 2026 02:30:51 +0000
ROA not before:           Sun 01 Mar 2026 02:30:51 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:d200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1604 (0x644)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 02:30:51 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=9FD0037B0B0F1A95FD0243B1BE75AE0D3B901D52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9c:de:a0:96:25:33:b2:71:89:98:01:2a:9e:
                    05:f9:23:7b:06:f4:5e:56:c9:60:f6:81:96:86:4b:
                    b3:b1:8d:06:e4:63:47:a7:95:79:2b:58:b4:49:85:
                    12:00:bb:bc:4c:00:7f:28:69:0e:0e:0d:28:d9:4c:
                    82:cb:45:02:bb:ee:b4:1c:16:14:6f:00:79:4f:55:
                    c0:a5:ee:73:d8:99:0c:67:3a:08:32:36:bf:dc:ce:
                    cf:bd:c6:21:9d:1f:d8:4a:9c:ee:8b:f5:9f:95:9c:
                    9d:ef:ef:80:b3:ba:28:2c:85:13:60:ca:5b:18:25:
                    84:e8:cb:8b:65:8e:59:f5:17:a1:fd:0f:a0:3c:d2:
                    92:1a:93:d0:1d:ad:6f:0c:58:16:8c:6c:b0:43:d6:
                    a8:7b:c3:e8:19:66:b0:c5:89:a6:76:54:34:0d:cf:
                    09:cf:43:8b:ac:6d:4c:a2:5d:b0:37:4b:e0:5b:b9:
                    c6:74:d8:71:16:33:2d:f0:f6:1c:ec:a6:89:14:47:
                    22:65:b4:97:c7:3a:a3:1d:9b:aa:21:27:95:ac:86:
                    1e:8d:f9:8e:56:c7:97:28:57:4d:34:92:fd:ba:29:
                    8d:7e:f8:36:02:07:d1:86:d8:d1:88:61:5f:10:67:
                    d6:c2:b0:bb:0c:5f:30:ea:6c:07:bd:8f:56:26:16:
                    b8:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:D0:03:7B:0B:0F:1A:95:FD:02:43:B1:BE:75:AE:0D:3B:90:1D:52
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/n9ADewsPGpX9AkOxvnWuDTuQHVI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:d200::/40

    Signature Algorithm: sha256WithRSAEncryption
         ac:ec:27:25:10:1d:d3:67:cc:8c:7e:df:41:f1:a8:8b:c1:55:
         66:6d:a4:66:3c:3c:55:5e:80:bb:fb:5b:06:6a:04:25:c2:ea:
         49:2e:dd:3b:78:4f:3e:ee:98:42:f2:d9:35:93:0e:b2:e1:37:
         d2:18:4e:18:c2:c3:48:a7:d9:6c:fd:32:3b:fd:21:da:d6:5d:
         fc:95:7b:7b:a7:35:26:d2:46:81:41:82:05:80:a0:cc:8d:4d:
         dc:51:e0:29:e1:ba:47:c5:3b:ae:44:45:e0:45:8a:e4:3d:71:
         7c:f5:98:9b:7c:a0:74:8e:00:07:97:7c:33:99:e0:e8:09:36:
         b1:8e:4c:ef:ed:72:39:11:98:4c:81:df:09:b7:48:7f:27:49:
         ac:fb:2d:91:f4:26:99:95:ca:0f:6f:ec:07:0e:c6:bc:ea:14:
         21:e3:1d:e7:28:f8:c3:78:4c:bb:38:ea:39:56:db:9e:ae:7a:
         9f:b7:18:35:0b:ef:ea:5e:d0:ca:cb:e3:84:25:f3:d2:76:63:
         1f:be:5a:f2:08:a0:47:b5:fb:ed:96:c4:3c:d5:ec:62:8c:32:
         5a:ea:bd:17:15:ae:92:06:2a:3d:df:59:7f:96:c9:b3:9b:cd:
         95:e6:7b:6e:9d:87:1c:eb:8f:7a:a0:a9:8d:c0:ef:5c:ac:9b:
         4b:67:40:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:55:20 2026 by rpki-client