Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/tK8XeOHPgbAebWhR5SMR6GWnbVA.roa
File:                     tK8XeOHPgbAebWhR5SMR6GWnbVA.roa (raw, json)
Hash identifier:          DJh3qAUacZQ+rCI/R66/9srHPRA8LPpq6bxLFZaXHCQ=
Subject key identifier:   B4:AF:17:78:E1:CF:81:B0:1E:6D:68:51:E5:23:11:E8:65:A7:6D:50
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0625
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/tK8XeOHPgbAebWhR5SMR6GWnbVA.roa
Signing time:             Sun 01 Mar 2026 02:25:44 +0000
ROA not before:           Sun 01 Mar 2026 02:25:44 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:e800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1573 (0x625)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 02:25:44 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=B4AF1778E1CF81B01E6D6851E52311E865A76D50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b2:aa:50:c4:a4:bd:0f:0e:b4:f4:85:9c:6b:
                    60:0c:b9:2b:c0:2a:90:8f:75:58:dd:9a:3b:e3:43:
                    aa:d5:e5:a8:13:47:69:af:93:60:21:bc:aa:c7:75:
                    8d:32:c7:a2:21:00:12:b1:d7:1a:8d:2a:8d:43:52:
                    1d:da:6f:61:58:65:71:fc:ca:42:59:33:77:2d:51:
                    c8:e8:78:bb:22:fd:84:a9:70:39:74:90:61:4b:36:
                    33:05:cf:97:6b:e1:7f:0a:19:50:c8:0f:07:85:64:
                    2a:29:59:11:30:0d:5b:e4:03:bc:5c:43:cc:fc:d3:
                    68:ca:6f:b4:67:2e:fe:87:bc:18:af:90:12:63:e4:
                    f1:23:88:76:ba:68:49:4d:ac:33:d5:d5:28:81:f2:
                    ab:60:3e:3e:91:a4:8c:bb:15:14:eb:2a:6c:1b:59:
                    28:39:81:f7:ec:14:7e:2a:00:92:75:a6:9e:0a:2e:
                    df:5a:ae:bc:23:54:68:9e:1b:86:28:7e:14:8d:42:
                    3f:ed:9d:71:da:94:3c:43:94:f4:5d:88:2f:85:4f:
                    5c:70:97:00:ce:da:56:fe:6f:d6:d6:c9:10:01:9a:
                    04:a6:84:89:c6:94:d0:d0:67:e0:9b:e1:07:9e:0a:
                    d1:a2:76:6b:0e:b7:6a:3e:10:26:94:1e:e2:14:b4:
                    d9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:AF:17:78:E1:CF:81:B0:1E:6D:68:51:E5:23:11:E8:65:A7:6D:50
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/tK8XeOHPgbAebWhR5SMR6GWnbVA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:e800::/40

    Signature Algorithm: sha256WithRSAEncryption
         61:18:13:32:f1:82:ec:d8:ea:73:0d:5e:e5:35:64:7a:6d:78:
         80:7d:55:be:d3:5f:db:de:10:a5:44:5e:22:58:9a:77:97:f4:
         83:d5:ba:3c:07:bf:2f:28:f3:c4:1f:bb:27:d1:2e:9f:6a:f5:
         ec:29:ec:c0:f1:f1:3c:6a:6d:57:0a:25:38:20:57:46:a7:3e:
         c2:6f:c7:64:eb:7b:65:f9:ea:4c:dc:07:c7:51:db:f1:6a:f5:
         fc:cb:96:df:ae:ce:c0:dd:32:ce:50:7b:c9:71:66:f7:91:1c:
         41:dc:03:06:75:ae:a5:cd:b9:88:92:b2:ac:44:6c:31:b3:37:
         14:48:f7:a1:c8:9a:78:06:49:93:a7:ec:84:3a:73:9a:2d:b4:
         5b:8d:dc:f4:f9:a0:84:29:42:62:79:21:03:ef:22:c3:34:59:
         cc:dd:cc:32:3d:c0:7e:9b:99:91:c1:85:cf:cb:47:63:50:71:
         c2:66:fc:42:96:44:06:1f:32:df:27:52:24:c7:3f:dc:fd:6f:
         f7:6f:f2:6e:1e:31:ee:d2:a5:c6:36:3a:83:4d:ff:fd:f5:25:
         2e:87:9b:12:4a:0a:74:c2:c6:d2:b0:2c:b3:dd:bb:d2:43:58:
         52:e5:64:77:53:a2:e8:97:e4:58:d0:4a:43:6c:32:ce:3f:2e:
         22:78:ca:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:53:45 2026 by rpki-client