Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/us2uDlEQDUtQanIRZeGz1t4IbBQ.roa
File:                     us2uDlEQDUtQanIRZeGz1t4IbBQ.roa (raw, json)
Hash identifier:          o7T4Pl34jhrISsEzKBMCvt78P6MOjNqfG/ylJDxZ6os=
Subject key identifier:   BA:CD:AE:0E:51:10:0D:4B:50:6A:72:11:65:E1:B3:D6:DE:08:6C:14
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       05DB
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/us2uDlEQDUtQanIRZeGz1t4IbBQ.roa
Signing time:             Sun 01 Mar 2026 02:10:55 +0000
ROA not before:           Sun 01 Mar 2026 02:10:55 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:dd00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1499 (0x5db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 02:10:55 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=BACDAE0E51100D4B506A721165E1B3D6DE086C14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c9:81:9e:47:ce:2b:b2:9c:f9:e9:75:9f:15:
                    d8:a8:77:1b:90:6e:8b:1f:aa:29:fd:cd:9e:50:db:
                    46:56:de:9e:4a:31:bc:d7:97:9a:4d:11:13:25:24:
                    54:f1:ab:d3:dd:48:eb:94:50:39:b6:33:3d:be:73:
                    50:b3:04:13:f6:63:44:37:69:70:c3:ec:0e:63:1f:
                    a2:67:6b:92:cc:ef:dc:67:8a:e2:12:5d:15:fc:ff:
                    62:59:80:8a:50:43:19:8b:97:d6:d0:dd:33:a2:19:
                    c2:82:91:27:b4:9b:07:b9:ea:88:d1:35:2e:98:32:
                    fa:b9:22:63:43:92:e6:45:da:46:f1:f1:5b:65:18:
                    e7:63:f2:62:3c:2b:ed:ad:63:18:1e:97:1c:75:84:
                    7e:85:51:73:ce:08:3a:c7:64:3e:60:72:f4:43:18:
                    f8:bd:75:80:91:83:1f:0e:29:f1:e1:cc:54:10:50:
                    b6:e0:66:eb:82:2a:8b:85:fe:9e:2c:e4:f9:9d:fb:
                    e9:80:a7:b7:9a:d9:ab:ab:5a:70:75:f9:a7:13:61:
                    84:72:86:91:57:ba:40:bb:8d:84:14:30:af:cf:c1:
                    e9:8b:20:86:d4:8f:68:69:fe:d6:69:3b:7c:35:3d:
                    63:35:49:27:4b:21:8d:ab:d3:e4:59:fe:5d:0a:0b:
                    45:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:CD:AE:0E:51:10:0D:4B:50:6A:72:11:65:E1:B3:D6:DE:08:6C:14
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/us2uDlEQDUtQanIRZeGz1t4IbBQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:dd00::/40

    Signature Algorithm: sha256WithRSAEncryption
         56:1a:a0:59:d7:39:76:37:ea:2a:6b:55:c0:31:c6:82:8a:2b:
         39:a2:5b:8d:ea:fe:69:cb:ca:db:31:ea:06:c5:98:84:02:e0:
         2a:5c:84:ca:b1:5a:13:cf:2b:c4:96:1d:8e:b2:52:b2:f7:04:
         ad:ef:b6:7f:09:15:a1:92:e3:8d:82:5b:dc:81:9d:be:3a:cb:
         a9:15:56:98:93:2b:dc:85:9f:d0:0d:cb:dc:c8:f3:41:fd:0c:
         39:f1:a8:02:de:b0:a0:f1:c9:d1:c5:de:2f:81:ca:8d:33:a5:
         ce:42:b1:da:5b:a7:95:44:3c:b5:ca:0d:a2:86:0e:4a:0f:0d:
         84:e1:30:34:01:ad:ea:23:34:97:1c:3b:68:fe:fc:44:3a:ae:
         40:a9:5d:ca:b1:ff:16:9a:8e:77:5e:90:18:15:8a:8f:76:3f:
         d8:ac:8e:ef:3c:d6:8a:b8:f7:0c:14:f2:8a:20:56:27:81:ba:
         f1:53:64:7e:15:75:00:67:19:dc:43:25:db:4a:d6:af:03:22:
         b4:27:99:84:b8:9a:d8:2b:4d:9b:9f:48:58:95:47:25:4e:fe:
         84:e2:f7:16:e8:05:11:be:29:f3:37:e3:46:b6:33:69:35:a2:
         7f:9a:72:a7:4d:52:da:e6:c5:85:a6:5e:09:99:77:fa:35:5d:
         6f:a3:2f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:17:27 2026 by rpki-client