Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/sA4E84s8WVYk7Kb5fryxbtH8cG8.roa
File:                     sA4E84s8WVYk7Kb5fryxbtH8cG8.roa (raw, json)
Hash identifier:          6FWez4Q9xKGA0njHHPru+hU+4tF9vUuqypoEQLY9yg4=
Subject key identifier:   B0:0E:04:F3:8B:3C:59:56:24:EC:A6:F9:7E:BC:B1:6E:D1:FC:70:6F
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0606
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/sA4E84s8WVYk7Kb5fryxbtH8cG8.roa
Signing time:             Sun 01 Mar 2026 02:16:19 +0000
ROA not before:           Sun 01 Mar 2026 02:16:19 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:7d00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1542 (0x606)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 02:16:19 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=B00E04F38B3C595624ECA6F97EBCB16ED1FC706F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:5f:4a:9f:09:4f:cf:2b:6e:71:c5:f9:a0:eb:
                    3d:7a:4e:41:74:72:2a:d7:da:e1:21:24:aa:af:6b:
                    74:94:51:3a:cc:e0:70:84:79:d7:84:17:22:62:4f:
                    62:00:44:c1:b4:36:d4:aa:79:e0:66:87:65:70:72:
                    70:5a:cf:13:0d:8d:32:f8:d5:ad:ea:0a:c7:50:fb:
                    1b:09:11:f1:83:13:57:7a:3a:a3:06:0f:60:9b:e9:
                    41:eb:81:d1:85:cb:49:35:a0:05:3e:2c:1a:f3:be:
                    2d:4c:8b:6d:bd:0c:8b:87:64:da:c1:31:8b:b4:47:
                    89:fa:6e:5e:40:61:b7:2e:7e:21:f2:6a:1d:e4:56:
                    33:a8:ec:cd:e9:7b:51:ed:26:0d:c9:07:70:e3:65:
                    4e:56:85:6d:ba:05:db:8a:99:06:a8:60:4b:77:bb:
                    54:bf:10:8f:4f:02:61:10:1c:8f:1d:c0:d9:5a:86:
                    36:c9:3b:35:17:50:59:9a:93:33:6b:ca:5d:e7:b6:
                    21:15:8f:68:88:db:4b:b9:35:1b:9f:6b:9e:4d:89:
                    ec:ce:b2:4e:6c:94:dd:4d:42:b2:19:cb:d2:f6:1e:
                    25:03:c6:f8:76:97:64:2b:ef:41:88:f6:19:12:ee:
                    b8:73:85:a5:2e:d8:a5:e9:7c:d9:d0:2a:b7:cf:dd:
                    e0:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:0E:04:F3:8B:3C:59:56:24:EC:A6:F9:7E:BC:B1:6E:D1:FC:70:6F
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/sA4E84s8WVYk7Kb5fryxbtH8cG8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:7d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         56:ed:6f:60:42:4e:3c:29:2d:b5:b7:4c:9e:ed:22:71:ab:67:
         bd:d2:62:62:e6:e5:3b:08:c7:b6:b0:28:4b:33:f5:b5:65:0c:
         fb:51:b8:17:a5:fc:91:81:ba:bb:8e:4a:1b:d9:98:22:30:f3:
         df:78:a7:d2:3d:cc:38:c7:1d:77:39:5e:50:8c:a7:e0:92:c4:
         13:5c:73:0a:cf:03:9c:32:94:56:86:b0:24:88:f3:ff:e6:9a:
         4f:5e:7d:af:62:c6:2a:d9:d0:ac:f0:07:6b:30:22:cf:17:70:
         25:95:fe:b5:97:03:f1:9b:7b:68:bd:58:5a:68:10:72:4c:51:
         b2:93:68:f5:01:3c:fc:41:ce:b7:09:bf:90:37:be:3b:34:60:
         32:ed:e0:34:b0:ca:79:16:80:76:96:a7:55:32:d3:ea:d5:ef:
         32:0a:60:fb:9f:cd:3a:57:50:10:2a:f9:b6:71:0c:ea:bc:db:
         99:b2:bf:a5:1e:99:8a:da:4d:57:f4:7b:9d:a8:31:be:4e:5d:
         55:1d:ff:3a:96:98:52:40:17:63:c7:52:d4:4d:b2:ce:fd:01:
         6b:43:dd:de:6d:46:88:c5:36:c6:d5:02:f9:f0:a5:65:2a:40:
         7d:3b:39:58:c3:28:46:87:c5:a4:12:5f:dc:24:48:4e:d9:2b:
         7d:90:a0:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:54:56 2026 by rpki-client