Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/sl_uHWWALjPeSTYxix6xfxygmAQ.roa
File:                     sl_uHWWALjPeSTYxix6xfxygmAQ.roa (raw, json)
Hash identifier:          pJmGsyv8jJwVhoZl9BBVk1KvTghYyJOj2NgHKOt0uS8=
Subject key identifier:   B2:5F:EE:1D:65:80:2E:33:DE:49:36:31:8B:1E:B1:7F:1C:A0:98:04
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       05C5
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/sl_uHWWALjPeSTYxix6xfxygmAQ.roa
Signing time:             Sun 01 Mar 2026 02:05:32 +0000
ROA not before:           Sun 01 Mar 2026 02:05:32 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:3e00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1477 (0x5c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 02:05:32 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=B25FEE1D65802E33DE4936318B1EB17F1CA09804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a5:ca:ba:1d:33:cf:ca:19:10:19:92:82:82:
                    b9:30:f4:03:03:b9:e2:31:9c:dd:98:75:fc:bc:9e:
                    f7:5d:a6:37:09:05:48:56:1a:11:ec:2b:aa:ad:cc:
                    b8:88:5c:09:38:41:7c:cd:69:d2:6e:05:3e:3d:ca:
                    aa:9f:3f:a8:ed:7b:89:a8:8d:9f:ba:c7:a8:5d:c5:
                    8b:0b:e3:67:93:df:20:29:95:2a:93:4f:8e:39:72:
                    6a:66:ac:2d:b0:25:16:34:d8:7f:d0:f3:47:45:84:
                    80:76:a6:aa:64:9d:d6:16:0e:ed:26:38:64:c1:21:
                    9e:89:fc:0e:a7:26:be:83:ab:24:f4:74:4d:23:49:
                    be:8a:8b:8f:8f:4c:66:a6:01:01:f0:7f:92:c5:23:
                    cb:ad:45:64:9a:e7:8d:aa:bb:16:91:4a:46:60:e6:
                    0c:79:b5:25:83:99:04:ae:fd:92:ee:bb:a6:b8:89:
                    96:ba:58:70:6c:2d:1f:3e:99:7d:1d:3f:ac:55:71:
                    5c:0c:b5:f1:0a:67:7a:74:cf:26:f4:9e:26:91:7e:
                    d0:a2:ea:0f:bf:6e:51:2f:a5:dd:01:c9:a7:dc:d2:
                    d3:6e:e8:25:98:f9:2d:3a:08:8e:1f:17:2d:ad:f2:
                    38:c7:ea:7d:a2:61:c2:11:4b:41:56:80:5a:69:63:
                    c7:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:5F:EE:1D:65:80:2E:33:DE:49:36:31:8B:1E:B1:7F:1C:A0:98:04
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/sl_uHWWALjPeSTYxix6xfxygmAQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:3e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         7e:4e:bd:c5:5a:c2:e9:68:37:e6:9d:39:9c:33:4b:8b:72:ad:
         6b:1e:71:c7:76:c2:fe:3a:69:a6:d3:c6:d9:ec:f6:f3:8c:82:
         7d:65:fe:e9:8e:ac:b8:c6:9f:3c:ce:4c:51:ee:ec:7c:d5:4e:
         27:f2:ed:d0:d7:47:49:a8:6a:f4:65:66:ab:bf:01:24:21:f1:
         72:be:b6:e7:26:83:d0:7d:26:0b:6e:a3:dd:10:f9:d7:9a:8f:
         fd:f9:65:3b:15:f6:bf:65:80:20:59:b1:61:b2:dc:a8:32:76:
         fb:26:35:35:ef:6c:1a:eb:18:2d:1d:53:51:38:b4:9e:66:98:
         ca:34:bb:3c:bb:4b:c9:ab:7c:0b:de:65:71:48:a8:b0:c3:08:
         e4:3b:65:5c:cf:85:72:96:15:b1:8b:54:3b:5d:17:24:ba:25:
         53:b9:31:ae:b7:6b:40:9c:e9:15:d1:59:23:48:82:7b:01:f4:
         31:ff:4e:85:fd:43:c1:a3:20:47:3b:e9:b9:09:1d:b0:0c:64:
         25:79:41:33:00:fb:35:7c:23:de:9d:b2:b0:78:7e:ba:e8:33:
         36:bd:8d:9c:3d:ea:b6:8d:5d:51:90:f3:2f:57:24:61:79:a8:
         af:d7:30:25:22:6b:ca:6f:13:59:bc:4b:36:ad:fb:36:80:58:
         c5:1f:74:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:55:23 2026 by rpki-client