Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/sUnd9OJ5ji8d1Cff_OpptFlLjag.roa
File:                     sUnd9OJ5ji8d1Cff_OpptFlLjag.roa (raw, json)
Hash identifier:          jCNFMMZJzCuznv2dfDMvD4/NrT5hxgCsrDWM+cqrB4o=
Subject key identifier:   B1:49:DD:F4:E2:79:8E:2F:1D:D4:27:DF:FC:EA:69:B4:59:4B:8D:A8
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0525
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/sUnd9OJ5ji8d1Cff_OpptFlLjag.roa
Signing time:             Sun 01 Mar 2026 01:34:46 +0000
ROA not before:           Sun 01 Mar 2026 01:34:46 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:4a00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1317 (0x525)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 01:34:46 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=B149DDF4E2798E2F1DD427DFFCEA69B4594B8DA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:08:05:3f:df:6a:74:0d:20:e6:6d:72:74:6d:
                    af:df:43:a9:89:4f:f6:16:be:9c:2c:33:36:ab:62:
                    01:d2:38:b5:be:a3:00:d9:ae:1b:f3:da:a6:b0:d1:
                    eb:b0:60:a7:88:82:45:8f:4a:1b:af:fe:9b:89:0a:
                    f5:31:b7:58:4b:97:99:f1:75:21:d0:1e:d7:13:6f:
                    a6:a4:06:24:e3:67:17:24:b7:5a:e9:34:67:eb:a0:
                    af:f5:b7:77:4b:5d:6d:e2:64:38:b4:f0:2d:cb:a6:
                    ac:4a:53:59:47:b2:ff:ed:d5:b4:63:49:03:dc:65:
                    d1:c3:0d:32:a7:b6:c5:ae:b5:04:dc:e1:24:ab:bb:
                    48:d4:cd:c8:f6:99:ca:14:f9:67:8c:61:51:9c:a7:
                    49:2f:fb:92:6e:e7:4e:4d:34:53:94:c2:33:e1:e0:
                    2f:e2:ee:1d:fa:cf:db:15:63:18:c1:32:38:3b:87:
                    8c:f9:72:90:52:6b:c9:39:91:42:bb:ce:d1:14:a4:
                    72:7b:62:75:d7:85:1b:d7:00:24:46:79:29:37:41:
                    de:43:c9:54:f6:63:6a:9c:af:42:b1:b9:77:d2:ae:
                    41:19:39:62:63:d4:8d:e5:f0:cc:00:f9:b0:b5:2d:
                    10:15:94:99:7a:27:67:9f:65:e5:e8:c8:ea:b9:7c:
                    cd:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:49:DD:F4:E2:79:8E:2F:1D:D4:27:DF:FC:EA:69:B4:59:4B:8D:A8
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/sUnd9OJ5ji8d1Cff_OpptFlLjag.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:4a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         3f:1d:b3:f6:c4:b4:a4:c4:81:09:a4:f2:15:15:39:76:cc:b1:
         d8:c5:58:6d:41:57:2f:ae:d8:f4:90:4a:6b:fe:5d:3e:ec:34:
         f5:15:7b:26:43:da:3e:5b:8f:11:03:31:4d:df:d2:22:8a:c8:
         75:01:47:fc:11:06:3e:39:e4:0c:e1:c5:ec:06:a2:1a:81:a6:
         40:3a:78:45:20:ca:9f:1a:47:2f:56:1c:59:06:68:92:c2:a7:
         0e:d8:3e:74:42:a3:6f:a9:aa:83:bb:ca:d5:8a:37:b7:bb:b4:
         71:b4:ea:c2:6f:17:3b:e5:ac:2c:ec:c8:13:9a:59:f8:89:66:
         b6:6f:d3:44:87:c5:3c:0c:3a:29:08:0b:83:b2:46:6a:bd:9f:
         72:07:fc:05:da:81:05:b3:59:c4:41:38:79:4a:bb:df:47:3a:
         c8:78:d0:e4:cf:d0:e6:b8:1b:85:0b:40:c9:df:34:8a:9e:9c:
         b4:db:c5:00:9b:49:e5:9c:a0:39:ac:1e:4f:6a:67:04:05:ae:
         8c:13:44:e3:d2:f3:84:58:f2:fc:dd:99:2b:7d:d3:76:f7:cc:
         23:a3:41:c9:6f:58:2c:27:2d:08:ad:fa:d6:0c:0b:cb:99:57:
         64:57:07:18:7b:cc:1a:5e:a8:62:22:76:5b:7c:f3:17:c6:7e:
         74:42:7f:38
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICBSUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjAzMDEw
MTM0NDZaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEIxNDlEREY0RTI3OThF
MkYxREQ0MjdERkZDRUE2OUI0NTk0QjhEQTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5CAU/32p0DSDmbXJ0ba/fQ6mJT/YWvpwsMzarYgHSOLW+owDZ
rhvz2qaw0euwYKeIgkWPShuv/puJCvUxt1hLl5nxdSHQHtcTb6akBiTjZxckt1rp
NGfroK/1t3dLXW3iZDi08C3LpqxKU1lHsv/t1bRjSQPcZdHDDTKntsWutQTc4SSr
u0jUzcj2mcoU+WeMYVGcp0kv+5Ju505NNFOUwjPh4C/i7h36z9sVYxjBMjg7h4z5
cpBSa8k5kUK7ztEUpHJ7YnXXhRvXACRGeSk3Qd5DyVT2Y2qcr0KxuXfSrkEZOWJj
1I3l8MwA+bC1LRAVlJl6J2efZeXoyOq5fM1bAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUsUnd9OJ5ji8d1Cff/OpptFlLjagwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9zVW5kOU9KNWppOGQxQ2ZmX09wcHRGbExqYWcu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa0owDQYJKoZIhvcNAQELBQADggEBAD8ds/bEtKTEgQmk8hUV
OXbMsdjFWG1BVy+u2PSQSmv+XT7sNPUVeyZD2j5bjxEDMU3f0iKKyHUBR/wRBj45
5AzhxewGohqBpkA6eEUgyp8aRy9WHFkGaJLCpw7YPnRCo2+pqoO7ytWKN7e7tHG0
6sJvFzvlrCzsyBOaWfiJZrZv00SHxTwMOikIC4OyRmq9n3IH/AXagQWzWcRBOHlK
u99HOsh40OTP0Oa4G4ULQMnfNIqenLTbxQCbSeWcoDmsHk9qZwQFrowTROPS84RY
8vzdmSt903b3zCOjQclvWCwnLQit+tYMC8uZV2RXBxh7zBpeqGIidlt88xfGfnRC
fzg=
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:22:47 2026 by rpki-client