Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/uJxTCV8HyiPmfC1ORwuDjq1-als.roa
File:                     uJxTCV8HyiPmfC1ORwuDjq1-als.roa (raw, json)
Hash identifier:          aC0Ej/6/GnOc9Cd2LMTnlqeDxsxVTM9B5pPheBvzAE0=
Subject key identifier:   B8:9C:53:09:5F:07:CA:23:E6:7C:2D:4E:47:0B:83:8E:AD:7E:6A:5B
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       05B7
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/uJxTCV8HyiPmfC1ORwuDjq1-als.roa
Signing time:             Sun 01 Mar 2026 02:00:59 +0000
ROA not before:           Sun 01 Mar 2026 02:00:59 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:2e00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1463 (0x5b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 02:00:59 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=B89C53095F07CA23E67C2D4E470B838EAD7E6A5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c4:10:ff:11:0b:50:89:12:11:d9:3d:a5:dd:
                    0d:f6:94:86:dd:c3:bc:a7:dd:f0:b1:ad:f8:95:fa:
                    c5:93:1a:f2:3d:92:d9:1d:6b:1d:c2:85:f9:ed:1a:
                    46:3d:4e:78:fc:8d:62:fd:e1:a6:8d:53:1b:36:3e:
                    61:26:e4:e9:c3:29:43:08:35:df:5a:f4:08:ba:ab:
                    ca:e3:69:f1:39:c9:8e:d6:a6:76:08:a9:bc:a4:20:
                    8a:16:e8:96:a6:86:93:74:fd:13:0a:fa:42:76:f6:
                    28:15:61:4e:8e:43:ce:18:80:e9:6a:59:54:b6:f2:
                    f6:d4:e7:c8:22:f0:34:f5:43:d2:3a:bc:bf:05:77:
                    8c:cd:d7:2e:44:d7:78:49:7f:41:fd:95:e5:3a:de:
                    4b:25:6c:a7:49:b8:cb:c4:9f:78:25:5b:a8:83:f3:
                    4c:68:f1:39:f8:2c:0d:7b:f7:85:2c:e5:e5:5a:7a:
                    ab:f9:1f:25:74:6d:24:c1:f8:9a:b6:56:f4:e9:c4:
                    e7:e6:38:b6:98:81:8a:ae:73:33:9a:17:ef:d5:e3:
                    89:b7:13:82:11:f3:5b:87:ae:cc:72:ee:b4:26:91:
                    d2:d7:4f:12:4e:c7:4f:95:35:dd:68:ad:52:b2:34:
                    1f:64:cf:aa:68:de:18:2a:1b:40:c7:21:ef:0b:81:
                    8a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:9C:53:09:5F:07:CA:23:E6:7C:2D:4E:47:0B:83:8E:AD:7E:6A:5B
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/uJxTCV8HyiPmfC1ORwuDjq1-als.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:2e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         56:81:a8:80:95:03:4b:43:a3:96:dd:28:10:f1:cf:18:43:6d:
         bd:19:de:1c:bd:a9:25:f1:9e:f2:d2:e3:91:53:8e:49:13:a8:
         d3:1e:7b:2a:9e:5d:7e:ac:16:e0:dd:00:4b:59:4e:4e:e4:0f:
         a0:3f:74:86:cd:9c:1f:cb:fe:41:c9:de:58:3d:78:ab:09:bf:
         0e:7f:41:49:14:8e:64:bb:94:56:38:48:45:4a:56:85:fe:ab:
         11:df:16:92:66:c3:fc:35:e1:32:84:37:88:0a:91:7f:5e:ac:
         86:db:2a:98:7a:20:46:f9:23:08:c4:9b:2e:29:dd:e0:6d:d4:
         f7:a6:64:0d:98:59:99:89:84:dc:99:76:7e:fa:95:bc:97:d7:
         85:e7:34:df:93:97:c9:d5:13:ab:b2:88:74:d7:d3:b3:3c:f8:
         a5:60:60:21:b7:ef:be:49:6a:b8:41:d4:a8:a3:d6:46:fb:07:
         2e:fe:0e:23:a5:1c:04:3c:84:38:31:d1:b0:94:15:81:4c:94:
         d1:a0:c7:c2:1e:a0:22:e8:8f:d9:f7:5d:d2:60:13:a4:cf:fb:
         fd:f5:35:94:af:08:79:f1:7c:bb:65:41:5e:f3:4d:ac:1e:50:
         0a:ba:43:12:0e:e4:e8:8a:18:0e:f1:4b:90:89:27:ea:59:de:
         fd:fd:cc:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:22 2026 by rpki-client