Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/sSLfBlvWtRweufYqta9ajBDIXCo.roa
File:                     sSLfBlvWtRweufYqta9ajBDIXCo.roa (raw, json)
Hash identifier:          z7wOL/bK1z7/x2kruzcKXqgHlLd0N0+SqlzyC/Qz+WQ=
Subject key identifier:   B1:22:DF:06:5B:D6:B5:1C:1E:B9:F6:2A:B5:AF:5A:8C:10:C8:5C:2A
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0634
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/sSLfBlvWtRweufYqta9ajBDIXCo.roa
Signing time:             Sun 01 Mar 2026 02:25:54 +0000
ROA not before:           Sun 01 Mar 2026 02:25:54 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:70::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1588 (0x634)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 02:25:54 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=B122DF065BD6B51C1EB9F62AB5AF5A8C10C85C2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:58:4d:ff:d8:4b:07:e4:eb:67:ab:ab:52:57:
                    82:f8:c0:70:03:70:b2:6c:6f:3c:21:e7:bc:0e:a2:
                    46:06:c8:31:6e:f6:68:0b:93:da:e5:d9:cd:a1:ff:
                    b3:d2:a3:f1:3f:50:25:21:85:c1:07:cf:68:e3:fc:
                    9e:95:ec:1c:bb:31:7a:d0:64:4a:24:8a:c4:cf:44:
                    2d:46:78:da:80:56:86:d8:33:55:a0:0a:89:ea:8c:
                    37:ae:22:94:64:5c:ec:38:98:9c:c7:d5:97:3a:b6:
                    7d:0b:84:19:0d:e8:e0:a5:ba:7b:a9:01:dd:b3:0a:
                    41:03:0d:15:80:1a:1c:24:86:d3:60:1f:e7:ad:41:
                    75:e7:71:9f:2b:ec:6b:96:0f:64:5b:1c:14:14:fe:
                    4d:f3:b2:18:93:16:f7:56:e9:2d:4a:55:ce:b2:f4:
                    fb:4e:b3:e7:cc:e3:1c:9d:97:e2:eb:fe:51:e1:9c:
                    7a:89:f8:95:05:be:11:36:09:7b:ce:a3:ce:c1:8e:
                    63:80:28:43:82:6f:1e:2f:12:9d:09:d3:87:b9:b9:
                    9f:86:1d:5b:52:a1:2f:ba:4d:f0:f6:42:06:48:39:
                    8c:9f:2a:63:72:67:3d:6a:58:68:fe:29:01:29:0f:
                    03:b9:c4:af:79:62:b6:e9:47:a2:a4:a8:92:06:99:
                    c7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:22:DF:06:5B:D6:B5:1C:1E:B9:F6:2A:B5:AF:5A:8C:10:C8:5C:2A
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/sSLfBlvWtRweufYqta9ajBDIXCo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:70::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:30:9e:8b:04:1c:68:a3:03:d6:a3:2e:59:98:96:55:2a:a0:
         18:f8:e9:48:aa:f1:a3:25:fa:69:95:c7:6b:b8:14:64:8f:58:
         5e:eb:ba:0f:3e:5a:7b:48:ab:d2:53:ba:56:5d:a4:55:2f:a5:
         04:de:17:54:00:72:4a:70:70:4e:2e:bb:bc:7c:9c:a4:14:4b:
         f0:e0:68:e2:3c:d7:8f:1c:49:08:c0:cd:66:d9:f7:8d:2d:c6:
         fa:6b:69:97:2a:f3:84:78:fd:51:eb:c5:5e:5d:4e:28:6f:b2:
         ad:22:75:71:9b:83:2f:36:2f:9e:92:ea:47:7b:9a:55:da:6c:
         0b:04:3a:0d:9c:e7:25:3b:15:0f:35:52:2f:20:a4:db:de:63:
         32:7d:55:c2:c9:d9:a5:60:be:9d:60:05:18:57:0a:35:cd:7c:
         75:eb:90:10:48:7f:68:bf:af:54:9c:21:91:0b:a4:24:64:d2:
         59:50:4d:9f:f2:12:3c:c1:f5:fc:54:57:74:a3:9e:41:d4:d7:
         b2:ac:7c:2d:7b:16:6c:9e:a7:40:89:51:db:e4:5d:67:76:cd:
         d4:2e:fc:49:a0:62:d0:68:bc:c3:2b:e4:df:2a:31:97:fc:99:
         ca:db:fb:39:04:f2:82:7f:7b:b8:36:c1:db:d3:63:ca:1e:90:
         37:5a:6a:75
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgICBjQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjAzMDEw
MjI1NTRaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEIxMjJERjA2NUJENkI1
MUMxRUI5RjYyQUI1QUY1QThDMTBDODVDMkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCbWE3/2EsH5Otnq6tSV4L4wHADcLJsbzwh57wOokYGyDFu9mgL
k9rl2c2h/7PSo/E/UCUhhcEHz2jj/J6V7By7MXrQZEokisTPRC1GeNqAVobYM1Wg
ConqjDeuIpRkXOw4mJzH1Zc6tn0LhBkN6OClunupAd2zCkEDDRWAGhwkhtNgH+et
QXXncZ8r7GuWD2RbHBQU/k3zshiTFvdW6S1KVc6y9PtOs+fM4xydl+Lr/lHhnHqJ
+JUFvhE2CXvOo87BjmOAKEOCbx4vEp0J04e5uZ+GHVtSoS+6TfD2QgZIOYyfKmNy
Zz1qWGj+KQEpDwO5xK95YrbpR6KkqJIGmcfnAgMBAAGjggIrMIICJzAdBgNVHQ4E
FgQUsSLfBlvWtRweufYqta9ajBDIXCowHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9zU0xmQmx2V3RSd2V1ZllxdGE5YWpCRElYQ28u
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAoAcAAAMA0GCSqGSIb3DQEBCwUAA4IBAQBdMJ6LBBxoowPWoy5Z
mJZVKqAY+OlIqvGjJfpplcdruBRkj1he67oPPlp7SKvSU7pWXaRVL6UE3hdUAHJK
cHBOLru8fJykFEvw4GjiPNePHEkIwM1m2feNLcb6a2mXKvOEeP1R68VeXU4ob7Kt
InVxm4MvNi+ekupHe5pV2mwLBDoNnOclOxUPNVIvIKTb3mMyfVXCydmlYL6dYAUY
Vwo1zXx165AQSH9ov69UnCGRC6QkZNJZUE2f8hI8wfX8VFd0o55B1NeyrHwtexZs
nqdAiVHb5F1nds3ULvxJoGLQaLzDK+TfKjGX/JnK2/s5BPKCf3u4NsHb02PKHpA3
Wmp1
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:55:52 2026 by rpki-client