Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/soKoGZ4qhZIEQWBz2EZSDlXxf-8.roa
File:                     soKoGZ4qhZIEQWBz2EZSDlXxf-8.roa (raw, json)
Hash identifier:          OMpr4t6TyCSglFfhR4kVia/R79sltTot/4Mh2zckMoA=
Subject key identifier:   B2:82:A8:19:9E:2A:85:92:04:41:60:73:D8:46:52:0E:55:F1:7F:EF
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       05EA
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/soKoGZ4qhZIEQWBz2EZSDlXxf-8.roa
Signing time:             Sun 01 Mar 2026 02:11:06 +0000
ROA not before:           Sun 01 Mar 2026 02:11:06 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:ac00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1514 (0x5ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 02:11:06 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=B282A8199E2A859204416073D846520E55F17FEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c0:74:45:57:22:a3:eb:8c:29:93:7c:5e:6f:
                    f1:23:a0:e8:7a:23:3c:12:dc:d1:9d:f8:7f:a1:f6:
                    18:31:ab:a0:5b:cf:4c:a5:9d:8e:6f:58:3c:fd:d4:
                    12:bb:b2:02:d5:c8:dd:c2:40:d0:0f:b9:69:97:9c:
                    c6:cc:21:3a:66:ef:9c:ec:c1:39:c5:10:8e:15:bf:
                    4e:e3:51:7f:28:e3:b7:0a:7f:2a:a0:ac:0e:95:a2:
                    f9:b3:63:03:be:e1:23:a1:bf:a0:ba:1c:57:65:8d:
                    b8:c7:76:0e:c4:1b:ef:d1:d9:50:91:b3:17:e1:1d:
                    c5:e5:d3:0b:3a:34:3b:82:60:3b:d4:e1:c0:82:83:
                    62:61:80:db:b5:58:0e:e0:b6:28:a8:cd:f3:88:13:
                    9b:49:c3:a4:d0:71:5c:12:9f:e0:c8:0b:06:6f:89:
                    b3:be:41:1a:fa:f5:2b:5a:9d:f1:6d:f4:ce:1c:b1:
                    91:c3:16:d1:cf:8a:db:15:e5:e3:5b:b6:3f:d8:2d:
                    de:1f:60:f3:25:8e:f6:0c:8c:8b:67:33:9b:04:34:
                    7c:07:93:f0:ad:1d:e1:4b:ab:c6:1b:5e:48:4a:ff:
                    c8:38:c5:21:bd:50:27:e1:f8:ab:0c:22:dc:c3:44:
                    b9:a7:a1:92:4b:13:55:4c:57:67:6b:bd:b4:3a:88:
                    01:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:82:A8:19:9E:2A:85:92:04:41:60:73:D8:46:52:0E:55:F1:7F:EF
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/soKoGZ4qhZIEQWBz2EZSDlXxf-8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:ac00::/40

    Signature Algorithm: sha256WithRSAEncryption
         1d:5f:95:9c:a5:c7:70:2c:5a:b3:da:4d:b0:9d:fb:60:06:4a:
         1e:2e:e0:10:08:26:76:f1:24:f1:45:cb:bc:1e:62:48:c0:37:
         76:a5:0e:4e:66:a4:07:3d:6e:2d:6f:33:87:72:08:b4:ea:88:
         4b:97:0d:c0:68:c2:e9:ea:63:35:ee:0e:a9:97:4d:8f:01:a9:
         61:2b:d7:23:31:73:31:cd:ed:35:d1:48:ce:00:6e:94:31:82:
         70:47:53:12:41:da:5a:a1:2c:00:48:ac:b8:7d:5f:e1:b3:6a:
         b9:91:67:53:fa:03:00:71:df:e0:32:45:3c:2a:9a:a5:42:54:
         3d:30:98:50:3e:f0:45:5b:6d:19:13:51:d2:b5:bc:b6:42:81:
         53:c5:02:26:f6:e1:5b:80:74:e7:35:dc:1c:27:96:35:ec:f7:
         c5:a5:47:82:2a:71:56:a9:d3:98:0e:b9:b3:90:aa:2a:ad:af:
         2c:d7:b9:60:17:9e:ef:ee:27:53:81:fb:95:58:f6:82:32:c6:
         de:60:aa:82:d3:cd:90:86:03:94:df:0a:18:cf:2e:18:0d:2c:
         ff:be:af:14:05:d3:78:f5:c3:e5:03:7a:11:3c:44:d8:9b:b7:
         f0:e4:2e:b7:de:19:e0:3f:6f:85:7b:b7:1e:ef:6c:1a:cb:b0:
         cb:20:e3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:11:26 2026 by rpki-client