Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/tNSzb9b9w2frjnfc6a2dF3VkCHQ.roa
File:                     tNSzb9b9w2frjnfc6a2dF3VkCHQ.roa (raw, json)
Hash identifier:          LyZ/NSkBLnR01tcQbJv/z4Jmesu7mC3AwKrY+rDlV14=
Subject key identifier:   B4:D4:B3:6F:D6:FD:C3:67:EB:8E:77:DC:E9:AD:9D:17:75:64:08:74
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0630
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/tNSzb9b9w2frjnfc6a2dF3VkCHQ.roa
Signing time:             Sun 01 Mar 2026 02:25:53 +0000
ROA not before:           Sun 01 Mar 2026 02:25:53 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:60:f00e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1584 (0x630)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 02:25:53 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=B4D4B36FD6FDC367EB8E77DCE9AD9D1775640874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:27:56:ad:08:d1:15:80:1b:6c:f2:01:3c:c1:
                    28:25:e3:57:54:05:b6:9f:cc:5f:eb:6f:ba:8f:76:
                    b2:4b:16:8c:bf:b3:d7:dc:77:6c:0f:f8:71:32:a6:
                    d2:b3:b2:f7:a6:9e:ca:29:e6:ad:d5:8c:c4:93:00:
                    0c:0e:7f:79:de:7a:d0:59:4f:36:63:a1:56:ae:aa:
                    03:c9:ca:0c:ce:2e:90:d7:eb:93:cf:a5:92:97:ef:
                    1c:68:18:7d:3e:b5:28:9d:68:80:dd:29:69:06:74:
                    c6:fd:e1:62:c7:a7:90:a8:22:90:f2:01:d9:aa:67:
                    a5:18:27:c8:de:46:df:8a:c4:1c:b1:aa:31:c8:fe:
                    c3:41:df:63:16:61:81:ac:f2:be:32:fb:f2:1b:c2:
                    81:df:59:89:3f:5e:24:45:9f:dc:2b:48:36:d7:17:
                    26:85:1a:35:f1:d5:64:78:47:b5:0e:21:78:cf:27:
                    4d:1a:cb:8b:2b:b1:ad:68:4f:ae:ad:79:be:1a:d2:
                    62:95:26:47:cc:d7:f5:b1:ec:ff:98:5f:40:2a:a8:
                    db:27:f4:78:dc:81:10:cf:09:08:bb:00:2e:1f:d5:
                    f6:98:9b:d6:89:5f:3f:31:71:c0:33:22:7f:a0:23:
                    05:f2:3d:6d:80:7f:61:31:72:07:06:51:83:48:4a:
                    40:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:D4:B3:6F:D6:FD:C3:67:EB:8E:77:DC:E9:AD:9D:17:75:64:08:74
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/tNSzb9b9w2frjnfc6a2dF3VkCHQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:60:f00e::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:d1:5e:02:1c:bd:fb:48:64:f2:a8:b3:ff:6d:a1:6b:b7:0e:
         f7:ba:74:1a:2c:de:b0:d8:28:48:bf:09:4b:19:a4:f2:e2:05:
         18:a5:f3:cb:98:18:3d:60:f9:4d:42:1f:fb:59:ab:86:93:ac:
         3d:09:55:53:2b:fd:ea:5d:db:dd:fd:03:b1:5d:de:66:b9:96:
         87:a8:48:6c:bb:bb:e4:e8:05:8e:8c:90:b3:83:93:9b:32:4b:
         4e:ba:98:66:ed:72:4d:3a:a7:e3:03:1d:c5:83:7c:2e:8e:00:
         4a:21:57:ee:e6:d2:87:78:ce:c9:50:cb:06:bf:8f:2d:db:3a:
         95:30:58:86:14:71:b8:62:b0:ec:b8:c9:fa:7d:47:62:4a:5d:
         bd:81:ea:bc:86:5f:fd:e8:7e:ff:10:af:6c:52:8b:bc:60:38:
         2b:d6:0f:aa:ff:64:d6:f6:4b:af:57:b7:5f:24:aa:74:ce:ed:
         45:d3:8b:e3:53:12:ce:0d:9f:95:92:2b:3e:65:0e:f1:19:d4:
         44:b9:e5:0f:c4:e0:2a:0b:a4:a3:fb:dc:3b:68:c6:33:d2:ed:
         91:17:9e:97:98:c0:97:6d:33:94:43:52:13:2e:b3:5d:e2:f0:
         63:a4:64:87:42:69:d2:8e:92:5b:93:74:22:8e:79:19:bc:ee:
         73:89:ca:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:54:17 2026 by rpki-client