Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ohL8VK_MxGqDsnymETegvEJ23Ko.roa
File:                     ohL8VK_MxGqDsnymETegvEJ23Ko.roa (raw, json)
Hash identifier:          uETaG8WUVrwq43SNGYGFDcha1twsK00khnDuT2lJMow=
Subject key identifier:   A2:12:FC:54:AF:CC:C4:6A:83:B2:7C:A6:11:37:A0:BC:42:76:DC:AA
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       053F
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ohL8VK_MxGqDsnymETegvEJ23Ko.roa
Signing time:             Sun 01 Mar 2026 01:41:12 +0000
ROA not before:           Sun 01 Mar 2026 01:41:12 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:f600::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1343 (0x53f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 01:41:12 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=A212FC54AFCCC46A83B27CA61137A0BC4276DCAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b2:06:3c:fb:8c:9b:14:76:06:a1:0d:b4:5c:
                    bb:c7:a1:51:77:75:58:e7:2b:03:8d:cc:bd:f6:e7:
                    90:72:a6:ff:b4:2e:16:a1:34:1f:0a:37:67:c5:50:
                    38:eb:d8:70:c1:d1:e2:8e:03:10:eb:5d:97:d3:27:
                    f8:4b:64:a9:37:60:6c:cb:3f:73:e9:ec:8f:94:f5:
                    10:8d:8c:3c:32:99:98:9f:ea:2e:8b:cd:d1:72:b7:
                    02:3d:47:08:32:bf:cb:29:77:72:4b:13:c6:16:c7:
                    3f:1a:58:a0:c9:74:84:4d:9d:46:35:6c:99:ba:d2:
                    18:91:0b:9d:4d:e2:54:7b:57:df:cf:40:68:d1:d3:
                    62:da:58:51:cd:3c:4c:a2:8c:82:9c:76:b6:17:ed:
                    bc:37:e5:d5:1b:2e:ed:27:6b:b6:8d:99:f6:a8:70:
                    64:fa:81:fb:7b:09:49:ca:1f:f2:c7:92:cf:6b:5c:
                    43:a9:ee:5a:80:81:ab:9c:23:22:2e:f0:39:08:88:
                    41:cf:9d:8d:f7:b9:79:7f:d3:ff:85:bd:57:23:78:
                    6e:2f:97:d4:e7:92:ae:db:5b:cc:6d:0d:ed:32:04:
                    7f:c1:9e:ea:fa:ee:66:0f:7b:89:df:2d:ef:0a:6b:
                    90:3a:17:cf:fc:e1:3d:ec:04:cd:eb:de:53:4e:fb:
                    7c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:12:FC:54:AF:CC:C4:6A:83:B2:7C:A6:11:37:A0:BC:42:76:DC:AA
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ohL8VK_MxGqDsnymETegvEJ23Ko.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:f600::/40

    Signature Algorithm: sha256WithRSAEncryption
         3d:8a:c8:d8:cf:96:d4:42:54:b1:15:fe:85:97:2c:c5:ac:26:
         22:e2:22:ed:a0:83:b9:8c:09:73:f7:b3:79:ae:61:89:93:19:
         2f:a6:bc:e7:49:7a:8e:a4:a5:51:d6:88:f5:fa:14:87:b7:5f:
         d3:e4:f2:47:0d:5f:48:ed:2e:7c:e6:e9:69:7b:63:66:46:db:
         b0:dc:81:82:e2:89:f7:e2:19:cd:6c:31:9d:48:47:d1:f4:42:
         34:74:9e:d4:eb:8e:bc:2d:e2:26:0e:75:d2:52:90:38:f8:28:
         7a:e6:a8:c5:3b:44:96:0f:fd:3d:05:f5:ef:33:7a:a9:1e:3e:
         11:52:f9:e1:51:63:4f:08:0e:fa:98:b4:c2:25:4e:2d:9a:1a:
         68:52:a4:fc:7e:0c:22:57:08:60:9a:92:f8:1f:f3:87:79:6a:
         9b:cc:40:ff:fb:a5:8f:da:67:e5:90:18:99:c0:6e:dd:36:c9:
         c4:b1:e5:d1:c6:83:f0:b0:e7:a8:db:bc:a0:a2:79:49:5d:3c:
         61:da:40:a6:87:8f:d2:76:e3:7a:82:f0:df:d1:ae:39:f7:7b:
         d0:57:84:62:c3:4f:37:a2:77:0d:a7:cb:fd:f9:3a:47:a0:0e:
         91:9b:49:83:09:e6:74:b7:d2:1a:f3:78:54:ad:2b:e5:29:71:
         8a:5b:ce:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:40:19 2026 by rpki-client