Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/nV5fYd-SZkrAN1f6qyqfQC3uB3o.roa
File:                     nV5fYd-SZkrAN1f6qyqfQC3uB3o.roa (raw, json)
Hash identifier:          6x5hqg+LC27fVo8aajV+abDm2XJnIjvax0FQsQmwNiA=
Subject key identifier:   9D:5E:5F:61:DF:92:66:4A:C0:37:57:FA:AB:2A:9F:40:2D:EE:07:7A
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       05E2
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/nV5fYd-SZkrAN1f6qyqfQC3uB3o.roa
Signing time:             Sun 01 Mar 2026 02:11:00 +0000
ROA not before:           Sun 01 Mar 2026 02:11:00 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:2500::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1506 (0x5e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 02:11:00 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=9D5E5F61DF92664AC03757FAAB2A9F402DEE077A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:89:ac:a9:a4:5f:72:7d:f8:db:af:29:f3:00:
                    6a:fd:dd:55:5a:bd:fe:44:42:c4:29:84:d8:0c:74:
                    2a:b8:8f:b9:01:a6:f8:84:2e:de:34:a5:1f:63:d1:
                    b5:e1:0f:37:bc:33:b8:2e:78:46:f5:dc:b5:32:24:
                    ec:6e:ce:63:93:ce:ce:87:aa:4c:4c:80:68:30:06:
                    d0:b2:97:5a:fc:77:1a:39:c2:c2:5d:6c:87:df:c4:
                    24:c2:6c:c8:61:9e:1f:83:54:25:89:7a:9f:b8:0c:
                    78:a6:0c:a1:12:96:9c:c2:91:33:05:e5:ae:27:8e:
                    2f:ff:14:b5:3a:5d:0e:5c:f6:f1:5a:65:61:dc:09:
                    a0:3e:62:db:70:0d:a2:86:7e:60:24:cb:19:ba:78:
                    4a:03:d7:e4:10:e9:f4:7b:f3:0f:9e:33:e2:35:bf:
                    e0:cb:b6:3f:73:16:cc:46:ed:b5:14:9f:8b:9a:36:
                    47:39:35:bd:a9:a6:5d:2f:6d:6b:58:0a:ec:f9:74:
                    09:45:92:03:6f:6e:62:3a:d9:e6:87:a8:60:97:71:
                    22:ab:45:e6:60:84:14:9d:f7:39:b9:6b:b3:3a:66:
                    91:d0:92:59:fe:b2:c0:50:28:a3:fe:0a:a9:ef:7b:
                    fc:ef:16:fd:23:d9:80:c3:ae:24:39:8f:a9:61:37:
                    ec:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:5E:5F:61:DF:92:66:4A:C0:37:57:FA:AB:2A:9F:40:2D:EE:07:7A
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/nV5fYd-SZkrAN1f6qyqfQC3uB3o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:2500::/40

    Signature Algorithm: sha256WithRSAEncryption
         08:27:80:a8:52:93:ea:1b:f7:d3:ab:e3:b7:36:96:e1:66:14:
         ec:9a:8a:1d:86:8e:3f:40:76:81:f3:94:a5:e6:3f:a0:a9:73:
         e7:c1:d4:c7:93:f3:1b:60:34:79:8c:42:3a:cd:4c:ae:32:7a:
         3a:c2:78:7f:38:7c:e8:94:e3:33:5b:57:f2:ec:dc:1d:ed:0e:
         0c:88:40:08:c2:4e:ef:c2:11:08:1a:16:f5:c0:a7:70:49:4f:
         21:5b:8d:33:49:f7:c7:30:a9:7d:df:f2:88:f5:db:f7:e2:88:
         a2:24:ee:04:47:2b:39:19:0f:78:e8:15:42:48:34:05:f6:cb:
         31:9f:7a:18:36:c4:3c:31:e9:5c:05:71:97:02:68:c4:bd:61:
         b6:93:99:fa:8c:b0:08:f6:41:36:33:d4:bb:09:f5:03:ee:a7:
         5e:ec:f6:a6:85:d1:82:ea:e0:24:ae:66:e7:f2:0b:ce:2d:ef:
         5b:5c:33:81:01:d2:46:dc:b1:bb:36:98:01:b5:e5:a3:a4:97:
         6b:3b:73:51:8f:2f:99:b4:1a:13:ef:a8:56:ef:c2:8a:21:64:
         d1:9b:d0:3b:eb:f0:0e:07:b9:ef:f2:69:b1:a2:19:ce:64:92:
         9c:47:a0:e9:11:06:5c:58:3b:b0:f2:0a:4b:56:04:80:d6:b7:
         33:7c:0f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:32:28 2026 by rpki-client