Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/qYtO1H5At-xh-jmROuwiC6hLg9k.roa
File:                     qYtO1H5At-xh-jmROuwiC6hLg9k.roa (raw, json)
Hash identifier:          pPZ++Bp2F22IRQJbm1jGicqAGOaVkuYrS9UX+y6u3Gg=
Subject key identifier:   A9:8B:4E:D4:7E:40:B7:EC:61:FA:39:91:3A:EC:22:0B:A8:4B:83:D9
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0574
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/qYtO1H5At-xh-jmROuwiC6hLg9k.roa
Signing time:             Sun 01 Mar 2026 01:52:18 +0000
ROA not before:           Sun 01 Mar 2026 01:52:18 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1396 (0x574)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 01:52:18 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=A98B4ED47E40B7EC61FA39913AEC220BA84B83D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:89:4b:b5:e6:0a:91:db:12:55:0f:15:b3:06:
                    78:70:f8:1a:bc:c5:5b:b6:fb:b3:99:02:58:d6:ad:
                    66:c4:42:57:54:cb:51:76:15:68:d9:c4:0b:49:b0:
                    75:85:1a:16:1b:d1:cc:c7:a2:bb:f7:8e:01:09:27:
                    2b:35:a3:43:29:d9:be:1d:ae:45:65:a6:5e:c8:07:
                    e7:92:77:0c:50:55:43:f8:bd:2d:1c:d9:05:60:e4:
                    21:84:2c:ef:02:9a:9b:f7:fb:bb:0c:fe:c7:c2:cb:
                    c2:49:be:21:81:15:f0:97:35:5d:ba:c1:2f:b1:51:
                    d3:55:43:5f:59:bb:0f:a4:0b:bd:26:d6:40:8e:f2:
                    51:0a:f4:72:2e:87:33:ff:b3:80:8c:b4:10:84:25:
                    b7:15:53:c9:4f:c2:e0:e7:cd:68:27:d4:c8:02:eb:
                    f0:01:50:ab:58:bf:ca:37:f5:42:36:f1:e7:ea:d6:
                    d2:c3:40:09:f4:f3:b0:1b:13:7f:94:0e:b0:52:01:
                    76:7a:fd:7d:55:48:09:a8:d2:3c:a7:88:95:6a:9b:
                    44:00:d8:9e:0b:99:ba:2a:56:28:80:53:e3:a1:9f:
                    c7:b5:8e:8e:02:cb:cd:3b:29:11:6e:4c:97:e6:a1:
                    96:bb:21:c8:96:1c:b5:56:2b:13:8c:45:bf:e7:0d:
                    ac:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:8B:4E:D4:7E:40:B7:EC:61:FA:39:91:3A:EC:22:0B:A8:4B:83:D9
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/qYtO1H5At-xh-jmROuwiC6hLg9k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:700::/40

    Signature Algorithm: sha256WithRSAEncryption
         12:30:7c:89:21:e7:98:33:ad:ae:2d:ca:83:82:4d:3f:cc:99:
         99:69:c5:d1:d7:da:23:da:ed:5b:f8:2c:43:fc:85:78:f1:9b:
         41:c2:55:91:01:ed:cb:3b:22:8f:c2:4d:42:56:11:96:35:2e:
         ad:0a:e4:ce:93:1c:4f:c1:c8:e0:aa:08:eb:83:f7:77:f6:b1:
         8f:43:99:12:6d:f8:e8:0a:ee:a4:83:22:1f:3f:aa:dd:91:2b:
         b8:98:03:d2:4c:07:91:ff:e2:a0:e1:58:c0:1c:7d:58:61:93:
         2c:b8:a7:65:51:31:32:05:7e:4e:9a:fc:12:ca:a8:4c:f3:73:
         14:23:e6:cb:52:10:70:3f:32:69:84:90:56:c6:f4:5b:ff:9e:
         4f:dc:59:c8:45:de:81:9c:1e:19:b9:ea:14:5a:f7:a2:18:ee:
         77:f5:be:38:4d:e1:50:e1:59:d4:65:02:d8:f3:f6:46:af:a1:
         b7:90:43:7d:b3:42:0a:ad:bf:ec:57:89:51:1b:d8:ed:43:9b:
         af:e5:9f:d6:3c:22:3b:bc:3f:f2:30:a5:96:3e:4e:fb:62:70:
         dd:b7:87:23:e0:5e:4f:62:81:e4:1d:10:0f:1b:ff:54:4f:b7:
         d7:05:98:3a:08:04:af:1d:88:39:c4:31:51:f4:d1:23:a9:a2:
         8d:d0:15:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:01:36 2026 by rpki-client