Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/q5fLsu5HZe6IGauaT9i_Cuzi65k.roa
File:                     q5fLsu5HZe6IGauaT9i_Cuzi65k.roa (raw, json)
Hash identifier:          yvMKy7cqMnIXMFc/awcBz/SGvEoyAXo6u9pdGG2kg2s=
Subject key identifier:   AB:97:CB:B2:EE:47:65:EE:88:19:AB:9A:4F:D8:BF:0A:EC:E2:EB:99
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0539
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/q5fLsu5HZe6IGauaT9i_Cuzi65k.roa
Signing time:             Sun 01 Mar 2026 01:41:10 +0000
ROA not before:           Sun 01 Mar 2026 01:41:10 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:4200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1337 (0x539)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 01:41:10 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=AB97CBB2EE4765EE8819AB9A4FD8BF0AECE2EB99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2f:f9:eb:03:3c:82:34:bb:d0:4a:57:a1:e0:
                    3e:76:a8:db:f3:5c:06:30:e9:bd:f1:38:65:b4:84:
                    c3:56:26:52:d7:78:25:46:5c:d5:80:8c:db:c1:ab:
                    42:25:dd:f5:9c:bf:26:c1:63:cd:56:fa:2b:70:16:
                    e3:36:74:d7:01:7d:86:bd:70:26:f8:09:ca:db:5d:
                    b7:df:a1:6d:ea:3a:5a:da:39:bc:97:8c:fa:bf:b1:
                    5b:1e:ab:3e:11:01:c4:30:b7:8b:16:f1:dc:b0:3d:
                    27:dd:70:56:ce:bb:6e:b6:5d:fe:77:2f:67:31:43:
                    6e:15:70:da:63:75:17:59:5e:ad:51:e8:48:24:14:
                    02:d9:a4:ec:23:23:4f:63:f3:7c:c3:8f:fa:79:fc:
                    0d:7a:0e:31:ce:b0:38:c1:a5:59:7d:e2:79:58:ab:
                    41:61:5a:05:77:25:07:3d:cf:ac:15:dc:77:da:a2:
                    8b:10:16:e7:57:e1:22:50:37:a2:6f:7d:03:d0:e2:
                    b7:7b:8c:53:34:4f:7b:7a:46:87:b0:b4:13:08:e0:
                    f4:83:d7:45:97:db:c1:e2:dd:b8:2b:f6:da:a4:70:
                    e6:8c:be:cf:b7:43:fc:29:94:d4:7a:e4:bf:4f:27:
                    c8:e5:50:10:01:aa:f7:a3:62:2c:de:ad:89:92:39:
                    77:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:97:CB:B2:EE:47:65:EE:88:19:AB:9A:4F:D8:BF:0A:EC:E2:EB:99
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/q5fLsu5HZe6IGauaT9i_Cuzi65k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:4200::/40

    Signature Algorithm: sha256WithRSAEncryption
         20:84:4c:c5:18:a8:52:e0:37:a2:14:62:74:1d:55:12:42:93:
         f1:73:a3:30:c3:6b:be:f7:21:0e:cd:77:8e:48:3e:64:b7:30:
         cc:31:61:8f:8c:0b:f7:5c:2b:54:bc:5b:56:fa:a6:0e:ca:69:
         b3:90:6d:9f:5f:81:8e:a6:38:ba:36:2d:ee:85:10:25:b8:a2:
         e3:c7:fb:ab:55:cb:51:65:a4:3f:5f:44:2b:0e:43:2f:3e:b9:
         be:9c:61:18:b7:18:de:78:18:90:70:ad:b0:90:26:55:95:9e:
         94:89:d3:6b:25:ae:22:c7:e0:cb:ff:a4:ae:3d:19:eb:9d:88:
         f8:72:4b:8c:9f:ef:c5:0d:0d:35:37:19:3e:fc:7f:27:32:f2:
         c9:4c:62:02:3d:e6:50:f0:3b:50:70:a3:2e:97:a0:7b:d0:b2:
         0c:55:45:b0:36:79:48:17:f1:db:16:73:26:37:5c:22:5b:1e:
         36:87:e6:e8:5c:c8:09:e1:68:f5:07:c8:c5:f5:68:55:20:3d:
         66:2f:e5:ac:fc:84:5e:b3:1b:65:cf:e0:e6:13:1d:b4:1a:dc:
         cf:b7:2f:04:5c:74:d1:64:38:02:36:2c:c0:b8:0b:96:99:48:
         d6:0a:7a:a3:a1:70:5d:9b:44:3e:84:1c:87:5d:ce:3c:fb:19:
         1f:5b:51:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:53:58 2026 by rpki-client