Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/v-XHRNhPdgwMbJmxzMiUrmfJpno.roa
File:                     v-XHRNhPdgwMbJmxzMiUrmfJpno.roa (raw, json)
Hash identifier:          /nfXfXgMGEAUbov+XBGgW+RODyE95wDUIitOuYoT+Go=
Subject key identifier:   BF:E5:C7:44:D8:4F:76:0C:0C:6C:99:B1:CC:C8:94:AE:67:C9:A6:7A
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       05A3
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/v-XHRNhPdgwMbJmxzMiUrmfJpno.roa
Signing time:             Sun 01 Mar 2026 01:56:46 +0000
ROA not before:           Sun 01 Mar 2026 01:56:46 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:1400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1443 (0x5a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 01:56:46 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=BFE5C744D84F760C0C6C99B1CCC894AE67C9A67A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e8:ab:c8:02:6e:c4:15:19:37:a1:71:c9:0c:
                    90:fe:2d:83:95:69:1f:2b:70:76:0c:1e:78:b6:aa:
                    01:92:c2:5a:9f:c7:0f:e5:2c:4c:f2:e4:07:9a:ec:
                    77:4f:71:74:a7:38:8e:85:fa:20:67:ec:69:13:0e:
                    cc:9d:f5:48:00:30:a9:92:10:86:a7:47:08:c2:5d:
                    84:1d:5e:3e:b6:df:f2:c8:d9:a6:79:ed:f5:b6:65:
                    4d:a8:a2:cc:12:46:d6:cb:26:16:3b:c4:3c:cf:5c:
                    ef:52:b2:32:3f:e9:c7:4a:0a:26:06:bf:7a:3d:05:
                    b3:c9:a8:8e:e6:bf:95:49:2f:1e:cb:ce:97:43:a3:
                    7e:14:b6:a6:7c:71:62:88:5c:fa:42:e6:b9:a7:1d:
                    51:3e:d0:77:82:60:9d:fb:35:14:21:4c:4a:bd:78:
                    be:86:ad:48:0b:3f:e6:06:95:0b:58:04:f9:9e:ee:
                    3e:1b:0c:b4:0c:5e:91:e7:23:fa:73:6e:ed:90:2d:
                    eb:bc:73:8f:89:9b:c7:15:20:ac:f9:7f:7d:f4:fe:
                    67:1d:50:00:3f:52:86:d3:c4:2b:cf:5d:dc:8d:e5:
                    c8:33:7c:af:c1:80:4d:56:9b:ac:d5:12:9f:d4:54:
                    b8:4e:6c:3f:f6:c1:1c:c6:fc:81:63:64:1d:70:f6:
                    45:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:E5:C7:44:D8:4F:76:0C:0C:6C:99:B1:CC:C8:94:AE:67:C9:A6:7A
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/v-XHRNhPdgwMbJmxzMiUrmfJpno.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:1400::/40

    Signature Algorithm: sha256WithRSAEncryption
         77:a7:d5:1b:8b:0a:d2:f7:f2:0b:25:2e:01:ba:c3:7b:84:f9:
         e4:d1:de:2e:1b:51:14:f6:53:81:8e:20:b2:41:34:4d:de:ab:
         c7:a3:74:30:45:96:84:31:37:15:9c:2f:7d:6f:66:0f:07:02:
         ea:44:f7:78:63:bd:05:e3:0f:32:5e:42:7b:ea:31:3b:d4:00:
         c5:e8:76:44:6f:65:8a:91:81:f4:3f:6b:a3:f2:bb:c1:67:11:
         c7:51:3d:65:f1:ba:b6:23:a6:c2:23:f3:df:3a:ac:f8:e5:22:
         88:9a:66:cc:a5:e3:1c:09:ce:ce:a3:bf:b9:f8:c6:77:3c:be:
         af:b9:b7:e1:a2:5d:e0:0c:ca:61:52:bc:33:28:08:a6:49:68:
         30:85:b7:c1:b4:fa:da:09:a4:ec:17:01:88:bd:d6:87:55:69:
         39:e1:26:be:31:c0:69:7a:28:e1:fc:b1:32:8b:5c:15:2c:24:
         76:35:fb:9d:2e:6a:00:34:b6:b0:10:54:25:64:b2:2f:c2:fe:
         f1:c2:81:f8:c7:49:83:eb:b8:3a:5b:72:bf:35:1f:7b:47:0f:
         85:37:a0:b8:49:aa:0e:f5:d0:c3:05:66:a4:0c:67:bf:90:4e:
         85:80:33:e8:24:9e:7e:e4:44:73:56:90:1a:ba:a0:70:59:f1:
         f4:43:d3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:56:03 2026 by rpki-client