Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/tdHjBwLMpY_IV8dS3Reo7fekSaU.roa
File:                     tdHjBwLMpY_IV8dS3Reo7fekSaU.roa (raw, json)
Hash identifier:          7TKyUXgtg6KQtGpTK+RYAd23qbTTDklgX9LGzAOUpgY=
Subject key identifier:   B5:D1:E3:07:02:CC:A5:8F:C8:57:C7:52:DD:17:A8:ED:F7:A4:49:A5
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0521
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/tdHjBwLMpY_IV8dS3Reo7fekSaU.roa
Signing time:             Sun 01 Mar 2026 01:34:43 +0000
ROA not before:           Sun 01 Mar 2026 01:34:43 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:4300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1313 (0x521)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 01:34:43 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=B5D1E30702CCA58FC857C752DD17A8EDF7A449A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1f:ef:03:6e:cc:23:d9:a0:3b:0a:f9:c6:c6:
                    4a:03:3a:c3:b6:db:49:a8:38:e5:94:78:50:4e:82:
                    e7:19:78:5d:0d:85:39:ba:42:fb:fd:cd:6c:b0:62:
                    a7:e4:fb:6d:38:8b:d1:da:e4:f4:32:81:9a:8b:df:
                    9f:5f:7b:c1:24:6e:87:d2:45:e6:ea:59:e6:f7:b3:
                    76:48:bd:34:cd:b1:45:28:07:7b:7b:1a:54:b6:7c:
                    83:44:d1:77:3e:9c:95:02:62:9f:9a:80:76:24:4b:
                    39:0f:d1:c6:9f:db:f4:80:60:59:8b:27:ac:6f:55:
                    da:55:ca:8c:5a:2d:64:96:2d:bd:ff:f5:65:05:ad:
                    b9:ec:02:68:f8:45:43:e2:21:70:29:b6:9c:9b:7e:
                    fd:b4:8a:28:14:3f:3a:ab:e3:c7:6d:a1:f2:d6:1b:
                    7e:52:05:1c:3e:0a:1d:17:60:54:fd:5e:c8:80:50:
                    03:03:5e:a7:db:f7:f8:24:f5:be:43:8c:07:04:d8:
                    c2:96:e5:70:ff:80:eb:4e:87:0a:d2:e1:b0:0c:2f:
                    2e:02:a2:4d:1b:25:bf:f6:6c:89:1b:75:50:a5:5e:
                    78:0e:f3:7c:ad:40:86:73:6d:71:1d:59:20:d7:ec:
                    51:7c:ff:eb:a3:d6:52:2a:9a:37:36:42:b4:ed:aa:
                    1f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:D1:E3:07:02:CC:A5:8F:C8:57:C7:52:DD:17:A8:ED:F7:A4:49:A5
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/tdHjBwLMpY_IV8dS3Reo7fekSaU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:4300::/40

    Signature Algorithm: sha256WithRSAEncryption
         52:2d:84:b4:9d:b4:19:3a:01:8c:17:a1:89:4e:4d:94:03:d9:
         aa:22:1f:84:84:46:f2:50:a5:d7:9c:cb:66:dd:0b:9a:cd:24:
         27:dc:e9:c8:21:8f:5a:31:e4:c2:48:03:2c:6e:0b:d1:0b:45:
         f7:a7:35:e1:12:6b:3a:f0:7a:ec:96:81:3d:30:8a:45:48:58:
         d1:e1:4f:e3:28:fe:b5:0d:8d:a8:3f:5b:6b:2c:db:c7:fa:d2:
         b8:52:59:bd:06:aa:7d:bd:5f:49:c1:ba:14:c0:2f:f4:0c:bf:
         82:01:f6:37:7e:f8:1d:27:03:98:bf:9c:92:81:0a:fa:01:8d:
         c5:cb:83:70:cc:d7:89:ab:0a:87:c1:c3:96:e1:b3:c5:c8:64:
         44:c3:03:be:ca:3d:28:70:91:bd:71:9a:3a:a4:52:4e:03:71:
         bb:b7:18:1d:d8:1d:01:93:df:52:96:71:b7:8d:c5:26:e7:59:
         54:10:27:81:b6:65:3a:9b:90:a2:f8:79:b4:f3:b5:a0:e0:5f:
         5b:96:08:ba:34:fb:10:fa:91:fe:26:fb:61:bd:4b:c8:83:dd:
         d6:77:31:16:5a:05:62:dc:64:66:96:7a:b6:f6:3c:3e:31:7e:
         9f:c2:c6:ee:45:d7:34:22:2f:c0:c0:61:72:58:46:bc:f0:7d:
         5c:c5:fa:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:58:19 2026 by rpki-client