Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/rrdc5w1BZ_9SA4cYYJB-9wxYC-8.roa
File:                     rrdc5w1BZ_9SA4cYYJB-9wxYC-8.roa (raw, json)
Hash identifier:          //+1zU0stfrHkkSTa/cCyRb9c0rmgv6NUvhddE+/m4k=
Subject key identifier:   AE:B7:5C:E7:0D:41:67:FF:52:03:87:18:60:90:7E:F7:0C:58:0B:EF
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       05BD
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/rrdc5w1BZ_9SA4cYYJB-9wxYC-8.roa
Signing time:             Sun 01 Mar 2026 02:05:27 +0000
ROA not before:           Sun 01 Mar 2026 02:05:27 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:a300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1469 (0x5bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 02:05:27 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=AEB75CE70D4167FF5203871860907EF70C580BEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:aa:b5:18:b8:92:e7:db:38:00:70:8f:25:18:
                    c6:36:e8:61:ce:ff:a2:0e:a8:d8:c2:0b:5e:3a:b8:
                    87:e5:81:2c:36:e0:d5:7c:74:b9:00:fc:f8:22:3c:
                    03:fe:62:e4:a4:8e:7f:68:95:9c:95:05:9a:67:3c:
                    61:ed:1d:03:6c:7c:e7:e8:7c:48:23:78:36:c7:06:
                    d4:b8:5b:aa:30:19:20:ac:95:de:c0:ac:aa:d8:5a:
                    56:ba:50:14:a6:78:52:f0:94:fe:4d:9f:e4:f6:69:
                    13:69:02:c1:65:cb:30:06:3c:f0:7b:b6:98:6f:d5:
                    0e:6e:5c:66:19:6f:61:dd:55:aa:70:28:21:3b:55:
                    ea:ce:dd:de:aa:29:19:a4:dd:e8:72:b6:d6:92:87:
                    1e:d8:e4:4b:5e:6e:6d:2b:73:44:6d:3e:4b:21:ea:
                    64:db:d8:51:79:c5:1f:9c:73:1c:6b:97:20:94:6b:
                    fa:04:58:01:1f:9e:08:5d:51:35:0d:f0:04:05:a1:
                    d4:db:6a:c0:1a:67:8b:a7:2e:7f:28:fb:5f:d3:64:
                    a6:bb:c3:63:d3:8e:e0:94:ef:d2:d6:28:a7:05:47:
                    ce:8e:ad:f1:ae:97:26:b5:a0:4f:f2:f1:1f:56:ca:
                    eb:36:f6:ce:5b:c7:3f:8b:3d:e0:6d:11:16:22:62:
                    c8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:B7:5C:E7:0D:41:67:FF:52:03:87:18:60:90:7E:F7:0C:58:0B:EF
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/rrdc5w1BZ_9SA4cYYJB-9wxYC-8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:a300::/40

    Signature Algorithm: sha256WithRSAEncryption
         22:ba:35:4f:88:c0:ae:95:2a:ed:39:88:8f:4f:79:1f:57:e6:
         45:af:ae:fa:8b:9c:82:65:5b:b1:51:27:46:4f:37:a0:e9:ac:
         8c:d2:16:cb:13:61:b5:1e:91:dd:81:aa:71:e9:4e:97:08:a5:
         91:bf:b9:11:36:d3:ce:2b:bd:0c:ac:47:db:9d:7b:8d:d0:2c:
         82:9e:03:58:e1:4c:13:75:1a:d1:ea:e5:6c:11:23:72:31:0b:
         85:93:72:6c:75:e1:57:01:fc:57:58:a6:6c:d2:7a:19:2e:6c:
         19:04:c9:58:54:51:ed:0c:dd:94:3e:90:2b:8b:76:14:8b:3f:
         38:9d:67:51:a6:81:df:87:b6:3e:55:f2:47:c4:ac:7e:ef:89:
         e0:a8:62:f1:ad:72:c8:8b:61:b3:c2:2b:2c:90:8c:b1:f9:d9:
         6a:3b:63:fb:5e:88:a6:d0:17:65:5b:df:f3:96:21:e7:be:5c:
         bc:19:2a:24:db:d6:52:7f:23:92:f0:6c:23:fb:81:19:4d:32:
         90:e7:d4:51:c4:fc:c2:a7:5f:4c:36:e7:d0:38:6d:96:bf:a9:
         18:5b:24:d5:e8:4c:26:25:84:45:48:a2:ac:92:98:20:0d:35:
         a8:cb:ad:85:01:0e:ab:4b:be:ef:38:16:af:4a:ee:f8:82:a9:
         1a:5b:a3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:26:22 2026 by rpki-client