Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/r6NVwgI1A7wUuVZ_XWfmSLl4TA4.roa
File:                     r6NVwgI1A7wUuVZ_XWfmSLl4TA4.roa (raw, json)
Hash identifier:          C2PXAXGlQC+GmnYiA+LDfAOQUgg2mk6mWfVwekPyhDc=
Subject key identifier:   AF:A3:55:C2:02:35:03:BC:14:B9:56:7F:5D:67:E6:48:B9:78:4C:0E
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       059D
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/r6NVwgI1A7wUuVZ_XWfmSLl4TA4.roa
Signing time:             Sun 01 Mar 2026 01:56:42 +0000
ROA not before:           Sun 01 Mar 2026 01:56:42 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:6200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1437 (0x59d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 01:56:42 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=AFA355C2023503BC14B9567F5D67E648B9784C0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ca:5f:bf:47:2a:27:26:ed:02:67:cd:94:67:
                    af:6f:bb:ad:b8:02:40:13:14:c3:54:1c:ba:b7:45:
                    2c:40:1b:f7:af:ca:69:64:8e:2a:c7:a7:d3:bb:00:
                    24:d3:18:93:4d:c9:e6:d9:4a:d3:89:bf:d0:36:6f:
                    0d:d1:31:74:7a:ab:4c:59:51:18:c2:ba:b5:93:33:
                    a8:e5:1b:a5:ec:25:98:dc:d1:42:c3:45:a3:8f:dc:
                    2f:de:5d:70:99:07:82:ce:6f:be:4d:56:bd:bd:78:
                    29:eb:d8:13:b3:f9:3a:e5:2e:3f:0c:ca:b3:d3:ff:
                    be:13:99:df:27:1d:05:f8:d0:a8:5f:c6:e1:08:02:
                    8b:5f:80:75:3e:81:7b:f2:e8:d3:55:63:e1:a5:63:
                    64:69:32:79:6c:83:6a:7b:00:76:93:3e:7f:b5:f4:
                    02:0b:40:dd:e5:29:40:5e:e8:93:95:04:74:c3:92:
                    04:ee:39:db:be:11:a7:27:ea:60:ff:77:cb:fb:2b:
                    d2:d4:36:ac:fa:4c:32:c9:0e:35:7a:9f:27:20:42:
                    45:ec:31:71:db:38:e4:6e:fe:a8:40:52:0a:dc:0d:
                    01:78:5f:9b:d9:1c:18:3f:8f:c2:0b:79:15:ce:f6:
                    60:99:f0:75:ea:70:d1:68:76:4b:82:32:69:96:71:
                    e8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:A3:55:C2:02:35:03:BC:14:B9:56:7F:5D:67:E6:48:B9:78:4C:0E
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/r6NVwgI1A7wUuVZ_XWfmSLl4TA4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:6200::/40

    Signature Algorithm: sha256WithRSAEncryption
         35:cd:46:83:b1:11:8c:db:1b:67:5f:f2:3a:30:c6:19:bf:0c:
         b4:e0:d7:a7:b3:84:47:fb:90:f3:13:e7:db:d4:7b:fb:83:76:
         e8:8a:02:8a:55:7f:37:62:6f:01:bd:6d:f3:85:6c:3d:4f:26:
         1b:65:82:50:5f:4e:04:db:3e:01:19:a1:b1:7d:d8:09:f3:ec:
         15:13:79:ed:0e:42:8f:fa:c6:c8:4b:9c:da:56:a0:67:93:cb:
         ea:f7:9c:42:34:6a:ec:c6:9d:5d:04:0a:21:54:4c:dd:69:b7:
         ec:39:9b:2f:19:49:2b:df:07:10:4d:79:86:3d:d8:7f:c9:69:
         bf:d4:f7:ed:af:49:c5:02:9e:e5:77:df:9f:b2:be:ac:2d:fe:
         a0:1b:e2:27:71:20:b0:f6:e5:2a:89:6e:a8:f0:d5:72:e4:a6:
         89:15:f2:1f:f9:06:32:4a:d7:f3:9c:98:6f:a3:a2:f5:ef:71:
         10:51:43:d9:4f:16:1d:00:96:e8:ec:e1:b6:ce:83:12:01:c9:
         bf:94:8d:5c:e7:82:df:4c:c1:5f:2a:2a:a2:0e:86:af:2d:9f:
         1c:47:ac:15:de:8f:9c:88:56:ea:dd:57:9c:67:87:da:f5:95:
         d4:1c:be:09:b2:8a:3b:bd:f5:54:d5:15:22:7f:45:1a:36:01:
         ca:c5:2d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:01:14 2026 by rpki-client