Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/okK_A_acUvWww5OkliOqV58eia0.roa
File:                     okK_A_acUvWww5OkliOqV58eia0.roa (raw, json)
Hash identifier:          63gdDdI01PFxDHfcZrcgV8luoPxXCeACHjUeGNp2CNA=
Subject key identifier:   A2:42:BF:03:F6:9C:52:F5:B0:C3:93:A4:96:23:AA:57:9F:1E:89:AD
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       062F
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/okK_A_acUvWww5OkliOqV58eia0.roa
Signing time:             Sun 01 Mar 2026 02:25:52 +0000
ROA not before:           Sun 01 Mar 2026 02:25:52 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:f00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1583 (0x62f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 02:25:52 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=A242BF03F69C52F5B0C393A49623AA579F1E89AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4f:7d:4c:d9:e4:61:cf:5e:ba:b5:16:14:2a:
                    2a:4a:79:3c:12:fa:72:10:be:d5:aa:b3:89:28:f2:
                    1d:21:d2:7c:ce:8f:e5:87:12:56:52:c6:ab:a7:fe:
                    06:1c:92:1e:91:f9:0e:40:bf:51:0b:b8:5d:c0:ac:
                    38:1f:35:16:18:b1:d5:2e:fe:fc:a4:c2:41:f7:b2:
                    d7:b2:61:1c:04:ef:c0:e7:0b:26:00:95:32:77:1e:
                    ea:47:99:d7:f9:c3:98:3d:98:4c:a5:df:f6:bb:88:
                    0a:ad:8a:05:aa:7f:81:68:5a:44:59:53:d2:20:7a:
                    4f:47:67:82:71:86:05:1f:78:f6:41:f7:7c:60:71:
                    99:31:9a:ac:a3:f1:1c:26:c2:06:a5:eb:b2:95:50:
                    a2:d1:36:77:7a:b7:0d:39:ce:8a:ab:5f:95:8d:2e:
                    17:b4:e4:e5:2a:7c:83:e4:91:08:b2:a5:35:80:a3:
                    92:bf:60:da:7c:48:a2:ce:3b:44:12:39:7f:24:22:
                    48:03:f7:62:80:a4:9a:8b:b1:a8:29:6f:c6:74:b9:
                    4a:76:09:e5:a1:ae:4d:0e:56:37:19:85:6a:e8:55:
                    3f:c1:dc:55:43:30:cc:bc:26:8a:da:5c:5b:12:a8:
                    54:fd:f1:8a:5b:c4:da:b1:82:64:71:4b:1d:b1:d2:
                    85:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:42:BF:03:F6:9C:52:F5:B0:C3:93:A4:96:23:AA:57:9F:1E:89:AD
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/okK_A_acUvWww5OkliOqV58eia0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         23:fe:88:d4:dc:37:f4:01:77:a8:91:41:70:6c:ed:6f:69:64:
         84:63:4c:2c:9b:5b:63:fe:e6:ea:69:79:14:56:be:5b:0c:e2:
         b7:da:85:0a:db:4c:d8:28:1c:1a:e7:3b:34:59:56:7a:1a:1b:
         0e:c1:3c:d4:11:75:e3:46:14:4f:85:f8:8d:37:91:ac:21:b0:
         60:43:1f:9c:41:63:ea:f3:92:f3:86:b5:fe:80:f6:27:1e:76:
         31:65:c9:84:69:e3:7a:9f:eb:73:ab:0f:03:f6:0f:1d:46:e4:
         9d:02:46:5f:a8:d8:a4:3f:51:21:1b:ed:02:87:f3:aa:34:28:
         84:56:25:95:27:a5:fc:16:a4:0c:61:a2:f9:6f:3e:96:03:c5:
         80:d1:f0:4e:58:4f:d6:92:24:5e:b8:46:cb:6e:7f:f7:8b:60:
         22:6f:d1:6c:52:92:a5:bb:1f:6f:36:c3:0a:fd:9f:06:0b:fb:
         2b:c9:90:d8:9f:97:57:7d:99:69:8a:5a:7e:c2:4c:c2:4e:8f:
         33:68:61:fe:ce:45:02:a2:8a:04:cd:b9:54:a5:c3:4e:34:c0:
         3b:25:ee:0c:91:05:89:29:28:09:03:3b:df:b5:23:24:3f:2c:
         f9:32:87:a1:69:fe:bf:b9:e3:bd:de:8f:56:89:d4:6f:e8:41:
         93:f4:fd:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:01:30 2026 by rpki-client