Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/u1vQP0vsKKzziSwB1RD_XvS_kVM.roa
File:                     u1vQP0vsKKzziSwB1RD_XvS_kVM.roa (raw, json)
Hash identifier:          iNIAL/ZsSivH2JAtRjIBzx0H2Tj2TxN4BBHZGzycPaw=
Subject key identifier:   BB:5B:D0:3F:4B:EC:28:AC:F3:89:2C:01:D5:10:FF:5E:F4:BF:91:53
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0569
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/u1vQP0vsKKzziSwB1RD_XvS_kVM.roa
Signing time:             Sun 01 Mar 2026 01:47:01 +0000
ROA not before:           Sun 01 Mar 2026 01:47:01 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:9700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1385 (0x569)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 01:47:01 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=BB5BD03F4BEC28ACF3892C01D510FF5EF4BF9153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:dc:70:f7:86:05:c8:01:41:18:f9:96:05:96:
                    cf:82:e2:88:49:b7:e3:88:ba:16:16:99:83:22:1c:
                    13:f9:20:09:45:08:b2:2f:ea:44:e7:ef:b6:ec:e3:
                    48:75:f3:1d:f1:4b:08:df:10:6d:1d:c3:02:07:7a:
                    ee:a8:f2:1f:e2:09:42:a7:3f:ec:f2:72:41:83:29:
                    a3:7a:25:d0:05:85:04:7a:5c:cd:d1:7b:34:95:5d:
                    16:41:bb:30:3a:84:56:81:ac:a1:63:76:18:98:c1:
                    d4:de:b6:4f:10:76:d2:db:e5:29:c9:a8:0b:4f:fd:
                    0e:e8:0a:72:80:d9:4a:d9:93:0e:c0:54:07:b8:51:
                    98:5a:30:67:35:80:56:ec:cc:ac:5b:57:93:e5:97:
                    2f:db:5c:ee:bb:31:a6:37:1b:bf:d7:1a:c5:93:2a:
                    55:6d:90:99:39:b3:76:02:0a:7f:3b:79:9c:eb:81:
                    99:6e:36:df:cb:bf:05:bd:51:df:a3:9f:86:9e:f9:
                    0b:75:d0:28:2e:86:52:40:d1:73:b7:5d:fd:2d:3f:
                    24:50:f3:89:77:23:9d:d8:61:a8:96:d2:2d:54:c9:
                    b4:51:39:96:e4:3d:98:ac:21:8a:fa:4a:25:23:c5:
                    af:7b:ce:c3:32:2c:4c:9f:37:44:6b:44:af:de:02:
                    bb:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:5B:D0:3F:4B:EC:28:AC:F3:89:2C:01:D5:10:FF:5E:F4:BF:91:53
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/u1vQP0vsKKzziSwB1RD_XvS_kVM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:9700::/40

    Signature Algorithm: sha256WithRSAEncryption
         4d:28:05:e6:0f:b4:ad:e4:96:f5:8c:d0:15:06:0a:16:7e:a1:
         cb:13:15:fe:7b:57:b8:0d:88:6a:c4:81:7d:73:6c:cd:42:f4:
         56:4e:67:ea:38:76:db:57:51:80:86:31:13:7a:9a:8d:c8:08:
         47:92:c6:01:84:0c:41:8d:e4:3c:8f:05:74:31:e1:56:f8:92:
         95:2b:6e:ad:c2:9e:e7:a3:f6:7e:56:b5:e1:ca:d5:83:e1:e5:
         aa:c5:d4:4f:fd:e2:ed:85:c2:62:a5:cc:d0:77:5c:08:c9:2c:
         05:37:91:3a:a7:67:20:64:c5:0a:59:d6:4e:cc:a6:b2:1f:0f:
         16:06:f5:8d:94:0e:ef:d0:74:6e:b7:35:96:4c:41:a4:3c:60:
         06:80:28:73:dc:e5:ef:9f:1f:76:f6:ea:6f:0b:0c:f6:f9:c0:
         e4:bd:52:c3:0c:64:3f:5c:e3:4d:5a:16:e0:d0:ed:a3:3b:72:
         d5:1e:27:2d:fd:7a:bc:0a:16:78:6b:fe:89:63:51:2c:d4:3f:
         fe:4a:db:c4:ae:f7:a9:1f:a3:8d:b5:ac:25:37:44:fe:08:7d:
         c3:72:d4:94:4a:e3:0c:d5:62:e4:93:53:30:56:41:17:4f:3a:
         8f:2f:ef:31:5f:95:be:4a:c2:5b:49:bf:4c:b2:b5:37:ae:0d:
         95:06:8f:6d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICBWkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjAzMDEw
MTQ3MDFaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEJCNUJEMDNGNEJFQzI4
QUNGMzg5MkMwMUQ1MTBGRjVFRjRCRjkxNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDd3HD3hgXIAUEY+ZYFls+C4ohJt+OIuhYWmYMiHBP5IAlFCLIv
6kTn77bs40h18x3xSwjfEG0dwwIHeu6o8h/iCUKnP+zyckGDKaN6JdAFhQR6XM3R
ezSVXRZBuzA6hFaBrKFjdhiYwdTetk8QdtLb5SnJqAtP/Q7oCnKA2UrZkw7AVAe4
UZhaMGc1gFbszKxbV5Plly/bXO67MaY3G7/XGsWTKlVtkJk5s3YCCn87eZzrgZlu
Nt/LvwW9Ud+jn4ae+Qt10CguhlJA0XO3Xf0tPyRQ84l3I53YYaiW0i1UybRROZbk
PZisIYr6SiUjxa97zsMyLEyfN0RrRK/eArvvAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUu1vQP0vsKKzziSwB1RD/XvS/kVMwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS91MXZRUDB2c0tLenppU3dCMVJEX1h2U19rVk0u
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa5cwDQYJKoZIhvcNAQELBQADggEBAE0oBeYPtK3klvWM0BUG
ChZ+ocsTFf57V7gNiGrEgX1zbM1C9FZOZ+o4dttXUYCGMRN6mo3ICEeSxgGEDEGN
5DyPBXQx4Vb4kpUrbq3Cnuej9n5WteHK1YPh5arF1E/94u2FwmKlzNB3XAjJLAU3
kTqnZyBkxQpZ1k7MprIfDxYG9Y2UDu/QdG63NZZMQaQ8YAaAKHPc5e+fH3b26m8L
DPb5wOS9UsMMZD9c401aFuDQ7aM7ctUeJy39erwKFnhr/oljUSzUP/5K28Su96kf
o421rCU3RP4IfcNy1JRK4wzVYuSTUzBWQRdPOo8v7zFflb5KwltJv0yytTeuDZUG
j20=
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:56:31 2026 by rpki-client