Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/vfRBPnpV78SHkgLIp2Og830vN8o.roa
File:                     vfRBPnpV78SHkgLIp2Og830vN8o.roa (raw, json)
Hash identifier:          v5y/IYXmc3VlumykxQN3mdA1ac6wuaJf+NMPqhZwDzY=
Subject key identifier:   BD:F4:41:3E:7A:55:EF:C4:87:92:02:C8:A7:63:A0:F3:7D:2F:37:CA
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       059F
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/vfRBPnpV78SHkgLIp2Og830vN8o.roa
Signing time:             Sun 01 Mar 2026 01:56:43 +0000
ROA not before:           Sun 01 Mar 2026 01:56:43 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:c400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1439 (0x59f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 01:56:43 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=BDF4413E7A55EFC4879202C8A763A0F37D2F37CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:68:ac:8a:6c:f9:31:37:34:28:26:3c:51:74:
                    83:3e:e9:86:45:42:ad:34:27:85:53:dc:d3:9b:c7:
                    f9:0e:d8:5c:dd:fc:2c:0e:83:65:2c:fe:d5:94:e7:
                    8f:17:1b:c5:98:2f:c1:f1:26:65:61:80:27:16:b9:
                    a0:2d:14:4b:91:74:54:47:4c:8e:d2:ff:13:66:ec:
                    8b:1e:46:98:7a:20:8d:f1:28:f5:12:c7:35:df:5b:
                    57:68:a2:ac:35:b9:74:7f:19:cf:6b:dc:11:5f:d4:
                    a4:f7:1a:01:91:78:22:e4:c8:c1:34:23:0a:dd:13:
                    81:30:de:53:2a:01:97:67:92:c2:6e:8f:58:79:9e:
                    7d:b6:e1:49:e6:d2:9a:2b:c1:76:af:39:ca:99:4b:
                    13:52:83:2a:c4:1c:5c:4d:c0:92:53:e5:5c:bf:d0:
                    66:e0:cf:7f:35:1b:a3:82:4b:e0:4f:40:a7:50:c8:
                    11:a7:c7:80:8e:e2:3a:2f:0d:6b:cb:05:ee:5a:b6:
                    b4:34:47:18:ab:33:96:f6:58:72:25:70:58:76:5a:
                    fa:77:51:1f:27:94:50:1e:b0:35:eb:fe:af:9a:60:
                    c4:59:88:73:39:9e:be:c3:fa:51:e5:4a:2a:cf:d3:
                    0d:71:be:16:b7:bc:8f:48:b2:e5:d1:fe:b3:50:68:
                    fe:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:F4:41:3E:7A:55:EF:C4:87:92:02:C8:A7:63:A0:F3:7D:2F:37:CA
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/vfRBPnpV78SHkgLIp2Og830vN8o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:c400::/40

    Signature Algorithm: sha256WithRSAEncryption
         b0:89:31:36:66:64:d1:03:3d:58:b5:38:cb:fc:bc:1e:05:0b:
         87:2a:e9:22:24:43:42:4f:19:83:2a:ed:aa:4d:9f:95:88:87:
         20:7a:35:8d:26:42:f9:0b:7f:3f:51:a4:00:86:22:66:1b:2b:
         90:d1:b6:71:15:38:4d:35:af:50:ac:fb:df:0d:56:7d:5b:95:
         91:64:b1:f8:04:d6:c9:22:15:5e:68:4c:65:32:ba:ec:ed:f9:
         e6:25:f1:33:66:b3:17:e9:92:6e:16:50:cd:77:61:d5:dd:15:
         bd:f6:58:d5:eb:74:59:b6:29:cf:2d:00:6e:55:66:1a:52:45:
         a3:38:56:d8:40:6f:0a:65:2e:7b:56:8e:4a:1d:c8:cd:a7:07:
         b5:3b:a9:90:d9:a5:08:1a:1e:72:98:fa:74:50:a5:09:86:be:
         43:b1:e3:3f:10:db:fb:4e:18:14:da:31:87:b6:2a:df:f6:6a:
         35:00:33:6b:1a:3c:cc:fa:0b:97:60:2d:d4:6c:97:aa:19:f1:
         9b:97:e9:46:86:8d:84:23:cb:f6:6e:e9:d8:7c:33:b5:73:58:
         19:66:9a:dd:7d:40:93:58:2d:a9:b3:a0:70:08:71:78:36:ed:
         af:0f:8e:80:c3:f2:0c:f2:5c:94:fa:c1:ca:d5:6c:0a:24:5d:
         38:b1:85:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:29:27 2026 by rpki-client