Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/rB2X5LR0jDsUpm4tvM3b62uvfG4.roa
File:                     rB2X5LR0jDsUpm4tvM3b62uvfG4.roa (raw, json)
Hash identifier:          ZtMxCDGBRYdty5FrmhxpxcK7UeQvJUZFvarG2Zd1e4A=
Subject key identifier:   AC:1D:97:E4:B4:74:8C:3B:14:A6:6E:2D:BC:CD:DB:EB:6B:AF:7C:6E
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       058C
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/rB2X5LR0jDsUpm4tvM3b62uvfG4.roa
Signing time:             Sun 01 Mar 2026 01:56:35 +0000
ROA not before:           Sun 01 Mar 2026 01:56:35 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:5800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1420 (0x58c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 01:56:35 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=AC1D97E4B4748C3B14A66E2DBCCDDBEB6BAF7C6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:22:95:82:7f:c1:30:29:03:39:a4:84:3f:25:
                    fe:18:3f:96:14:2c:84:79:22:2b:c7:8a:6a:e9:c3:
                    1a:50:72:94:5b:c2:24:ec:a2:54:ad:28:fa:58:e6:
                    e9:50:86:5d:90:3b:68:40:2c:18:4f:86:3e:bb:bb:
                    90:11:6e:b7:d9:fb:c4:c2:16:11:d7:14:5e:aa:d8:
                    8f:45:52:04:c6:84:92:60:b7:d4:44:39:1c:97:ee:
                    17:75:50:24:28:81:25:ef:ad:7d:e5:06:f3:11:83:
                    26:25:f7:17:50:d2:85:91:86:c4:40:7b:32:2d:c8:
                    f3:e3:fe:26:ea:d9:77:69:b0:c4:4c:4e:95:85:e4:
                    22:79:e7:5b:48:91:11:a9:1a:f7:c8:17:9e:dd:bb:
                    7c:42:64:eb:04:dc:f4:1b:52:8a:c6:65:c8:f0:c8:
                    8f:e2:8e:9f:22:99:9e:6b:d4:a6:52:a2:09:e6:d1:
                    2c:38:05:e3:c6:39:a2:90:c1:b0:97:bf:52:89:1b:
                    f1:9a:fe:ce:f2:35:61:6d:3d:ba:6a:16:bc:76:a7:
                    32:db:9b:92:67:f9:3c:e2:8b:7f:c9:97:bd:63:13:
                    f4:42:56:35:c6:d2:aa:6c:1c:3d:7c:00:7e:51:90:
                    a3:52:7a:a9:8a:4c:ca:c2:a0:a2:3d:65:8a:f0:11:
                    95:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:1D:97:E4:B4:74:8C:3B:14:A6:6E:2D:BC:CD:DB:EB:6B:AF:7C:6E
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/rB2X5LR0jDsUpm4tvM3b62uvfG4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:5800::/40

    Signature Algorithm: sha256WithRSAEncryption
         4f:5b:40:02:6d:fb:c2:01:c2:8a:91:b0:25:e9:32:70:c9:f8:
         9d:c8:e8:68:91:c5:26:94:af:b4:be:6a:26:0f:18:e1:66:53:
         4b:d4:43:b2:ae:4a:92:79:08:02:c8:70:4f:fc:07:25:6c:40:
         d0:9e:f2:3f:2a:c3:69:01:69:54:4e:c9:cc:6d:4c:27:3e:f1:
         b0:cf:8d:8d:1d:09:fd:70:b7:26:54:fa:0a:ed:0c:8d:3d:0f:
         2d:40:98:cf:9a:db:f0:0e:84:cc:0c:2b:5e:0a:b7:f6:ce:ae:
         46:60:44:25:cc:98:b1:6c:d7:29:cf:9d:03:b6:49:11:ad:70:
         b8:09:7b:0a:64:2c:b0:7a:9f:a9:a4:38:c5:ad:51:b8:87:b1:
         64:47:3c:a8:b9:2a:80:37:0a:d8:81:2b:d8:79:4b:f9:ad:3e:
         35:a5:1b:c3:3a:f5:53:68:0e:ac:6a:48:bd:10:bc:8c:3a:53:
         62:00:a3:de:eb:ac:7b:71:67:ea:cf:88:d8:3e:95:47:f6:59:
         b3:a3:74:af:e0:ba:6f:34:d5:bf:19:ee:3c:50:34:df:11:c1:
         7a:db:71:66:28:b0:08:40:7f:cc:3f:d0:d4:f1:93:41:cf:96:
         46:25:38:91:b4:b6:9a:d1:ad:f8:67:6c:f1:fa:f5:43:87:b1:
         d7:cf:9b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:32 2026 by rpki-client