Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/oiUqW5cfuEaiFmL4ILB7N9vtnAI.roa
File:                     oiUqW5cfuEaiFmL4ILB7N9vtnAI.roa (raw, json)
Hash identifier:          shAqWvvHSSbtNbzjjmRNOE0J/NauVeTyDCe53lgTrDs=
Subject key identifier:   A2:25:2A:5B:97:1F:B8:46:A2:16:62:F8:20:B0:7B:37:DB:ED:9C:02
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0642
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/oiUqW5cfuEaiFmL4ILB7N9vtnAI.roa
Signing time:             Sun 01 Mar 2026 02:30:50 +0000
ROA not before:           Sun 01 Mar 2026 02:30:50 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:1f00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1602 (0x642)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 02:30:50 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=A2252A5B971FB846A21662F820B07B37DBED9C02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a6:88:52:8b:a4:f3:61:00:63:30:bb:a4:06:
                    88:32:b1:ce:ba:ea:39:13:0f:ad:96:b7:28:a6:87:
                    67:42:e8:9b:41:57:c4:54:56:ed:74:f3:37:07:ca:
                    3c:b0:86:e6:e4:92:4f:e0:fd:75:d0:c8:c5:a2:98:
                    99:a9:cc:82:86:61:94:5a:54:87:be:85:a4:13:6d:
                    8e:7a:98:af:26:d8:64:1e:5e:d1:81:48:98:03:5e:
                    f9:b4:c1:ab:e4:67:5b:b9:97:79:08:87:69:53:a1:
                    33:2f:89:3d:58:50:48:89:fd:40:83:d8:6f:f8:2d:
                    af:1f:08:d1:04:62:4b:26:30:a5:d7:45:c4:f9:57:
                    46:97:a0:a8:86:6f:93:e0:90:08:99:d7:82:12:c4:
                    39:6c:a3:b6:07:75:f1:ff:fd:e7:9d:5f:a3:2e:27:
                    d0:bd:2c:48:b3:a9:cd:7f:95:b8:8a:bf:6d:23:34:
                    03:0b:44:9b:c2:24:cf:69:9e:43:75:89:4f:75:09:
                    fc:60:4d:d0:53:11:f3:53:7d:6b:d6:4a:c0:84:3f:
                    e1:88:4a:e8:68:ab:2c:13:ef:ed:6c:64:13:cb:bf:
                    53:ab:31:d8:fc:a4:0c:4f:cc:2a:55:75:2d:57:30:
                    40:fd:f1:0e:ae:24:f9:a2:f2:0c:b2:f2:d8:6b:99:
                    17:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:25:2A:5B:97:1F:B8:46:A2:16:62:F8:20:B0:7B:37:DB:ED:9C:02
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/oiUqW5cfuEaiFmL4ILB7N9vtnAI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:1f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         00:dc:af:3c:93:7d:7a:ed:4d:8e:b2:8f:51:7a:86:5e:66:f2:
         76:ae:64:6a:c0:bc:0d:a7:40:f3:80:ec:d7:d0:98:dc:d2:a3:
         10:f8:07:d0:81:3c:a1:62:e3:80:a9:a4:8a:a1:cb:28:66:99:
         f1:f1:a6:a8:8b:ef:54:51:64:84:cd:7e:7c:46:c7:35:da:a8:
         ca:04:2d:f5:22:b9:b6:80:40:22:eb:78:16:66:cb:37:89:37:
         25:2e:39:75:b0:7d:c5:01:b7:86:e5:06:a5:5d:96:60:e9:fe:
         cb:b9:6d:e0:d3:eb:3b:ba:ed:03:f6:42:69:20:5e:42:b8:72:
         58:b7:57:b3:45:25:01:33:bb:82:f9:40:01:03:9a:5e:84:4e:
         93:a6:e6:0f:30:4a:af:6e:9a:98:3b:f8:f0:f5:b9:04:0b:53:
         00:da:09:cd:4b:fb:43:8b:52:b0:e8:80:5c:67:63:2d:12:a7:
         86:a1:ef:9f:3a:93:e1:7b:da:f1:43:3b:c3:40:72:b8:dc:ec:
         d8:cc:7d:18:f6:39:65:4e:d1:89:cf:82:47:a4:f4:b0:e2:9b:
         2b:0b:da:a7:c7:af:5b:d0:d5:50:9a:da:32:4c:5a:75:30:d4:
         c9:d6:09:47:76:fd:24:1f:24:b5:67:b6:10:f3:bf:82:7b:8f:
         71:76:7f:cb
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICBkIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjAzMDEw
MjMwNTBaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEEyMjUyQTVCOTcxRkI4
NDZBMjE2NjJGODIwQjA3QjM3REJFRDlDMDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDhpohSi6TzYQBjMLukBogysc666jkTD62Wtyimh2dC6JtBV8RU
Vu108zcHyjywhubkkk/g/XXQyMWimJmpzIKGYZRaVIe+haQTbY56mK8m2GQeXtGB
SJgDXvm0wavkZ1u5l3kIh2lToTMviT1YUEiJ/UCD2G/4La8fCNEEYksmMKXXRcT5
V0aXoKiGb5PgkAiZ14ISxDlso7YHdfH//eedX6MuJ9C9LEizqc1/lbiKv20jNAML
RJvCJM9pnkN1iU91CfxgTdBTEfNTfWvWSsCEP+GISuhoqywT7+1sZBPLv1OrMdj8
pAxPzCpVdS1XMED98Q6uJPmi8gyy8thrmRf5AgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUoiUqW5cfuEaiFmL4ILB7N9vtnAIwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9vaVVxVzVjZnVFYWlGbUw0SUxCN045dnRuQUku
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAax8wDQYJKoZIhvcNAQELBQADggEBAADcrzyTfXrtTY6yj1F6
hl5m8nauZGrAvA2nQPOA7NfQmNzSoxD4B9CBPKFi44CppIqhyyhmmfHxpqiL71RR
ZITNfnxGxzXaqMoELfUiubaAQCLreBZmyzeJNyUuOXWwfcUBt4blBqVdlmDp/su5
beDT6zu67QP2QmkgXkK4cli3V7NFJQEzu4L5QAEDml6ETpOm5g8wSq9umpg7+PD1
uQQLUwDaCc1L+0OLUrDogFxnYy0Sp4ah7586k+F72vFDO8NAcrjc7NjMfRj2OWVO
0YnPgkek9LDimysL2qfHr1vQ1VCa2jJMWnUw1MnWCUd2/SQfJLVnthDzv4J7j3F2
f8s=
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:49:45 2026 by rpki-client