Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/oPipXcHlyhequvJH92Zs50ar3Jg.roa
File:                     oPipXcHlyhequvJH92Zs50ar3Jg.roa (raw, json)
Hash identifier:          398ue992ZMFXHPfYwJFt8QdHN/Zd0Yy0Q0+1u2S/MMc=
Subject key identifier:   A0:F8:A9:5D:C1:E5:CA:17:AA:BA:F2:47:F7:66:6C:E7:46:AB:DC:98
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       05A4
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/oPipXcHlyhequvJH92Zs50ar3Jg.roa
Signing time:             Sun 01 Mar 2026 01:56:47 +0000
ROA not before:           Sun 01 Mar 2026 01:56:47 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:cd00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1444 (0x5a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 01:56:47 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=A0F8A95DC1E5CA17AABAF247F7666CE746ABDC98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cb:63:1a:9a:0a:3b:35:4f:82:9a:dc:1a:26:
                    90:81:ae:d8:1e:53:f5:98:1e:72:41:21:44:33:11:
                    6d:13:b9:dd:cb:77:7c:18:a2:3b:6f:10:d7:e2:28:
                    07:38:8a:46:fc:7b:a1:0b:83:04:46:07:77:11:89:
                    c8:f1:7d:95:ce:1a:ad:bb:0b:0c:09:e2:90:b4:f4:
                    1f:30:2d:05:98:50:08:fe:44:29:b8:5a:41:a0:2d:
                    b9:cb:68:d1:9a:7e:3a:0e:f9:12:d1:11:a6:6f:aa:
                    e8:88:6f:5c:5e:b3:a8:b9:4d:c0:b9:85:34:e5:83:
                    fb:01:f2:4d:69:5e:bf:7b:12:32:16:80:dc:c3:22:
                    21:27:16:f0:19:40:5d:39:8f:66:28:19:2e:6f:11:
                    56:23:84:20:e1:82:0d:a4:8c:44:24:a0:12:d7:0a:
                    6e:45:9d:27:61:bf:bf:da:3e:2e:3a:7f:31:03:f7:
                    01:f2:72:2d:78:e0:6e:fa:fe:42:ba:57:21:1d:76:
                    f3:1a:ce:8a:9d:50:b5:99:42:7a:72:77:06:ac:4d:
                    d2:b9:21:3f:f5:d7:d7:e7:81:d9:87:9c:a4:dc:77:
                    32:f8:57:8b:4f:a2:cc:7f:5c:50:3c:4b:c8:c0:b5:
                    e7:7f:ee:93:d0:0c:3c:39:9f:dd:bb:fc:b6:ec:25:
                    1e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:F8:A9:5D:C1:E5:CA:17:AA:BA:F2:47:F7:66:6C:E7:46:AB:DC:98
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/oPipXcHlyhequvJH92Zs50ar3Jg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:cd00::/40

    Signature Algorithm: sha256WithRSAEncryption
         4b:29:ed:bd:2b:1d:8d:6c:c1:4f:64:4c:98:8c:da:1f:ba:19:
         7b:07:a3:d1:c2:ce:0c:da:c7:3a:f6:e1:c7:4c:58:4b:e7:02:
         03:02:47:a1:03:ef:3f:4c:ea:d8:93:14:ac:63:4e:6f:ad:72:
         22:0d:33:e5:4d:98:4b:24:98:24:01:0b:44:d3:bf:c9:e6:57:
         4b:da:f7:85:c0:b8:ca:d2:0e:b0:12:72:e5:a3:e2:93:89:3c:
         99:60:43:24:54:c1:65:3d:dc:ff:ab:1f:25:1a:60:66:71:9b:
         e5:b4:c2:6b:93:74:61:79:20:78:01:ae:51:40:5d:96:46:9e:
         7c:0f:cf:b9:19:27:68:aa:c1:b1:5a:37:5c:b8:5d:5f:26:34:
         4c:09:72:8a:ab:24:f0:fb:0c:dd:de:81:ed:83:af:0a:be:66:
         6f:73:67:8f:b0:22:47:9b:2f:6f:fd:db:a6:b1:7c:dc:ae:7f:
         ee:de:fb:19:ce:a0:5e:21:e2:cc:d9:5f:04:74:ec:c7:f8:5c:
         03:35:cb:7d:ad:c2:3c:14:36:90:a8:81:e3:ee:5a:25:a9:2c:
         16:2f:04:41:8d:81:0a:9c:12:25:fe:88:60:81:1f:77:2d:45:
         12:c0:2c:8a:b2:b4:67:df:e4:a9:f8:83:12:cb:e2:84:f4:67:
         08:30:35:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:17:15 2026 by rpki-client