Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/vsaV-V5OTzcfv2whQqpTKrj9djs.roa
File:                     vsaV-V5OTzcfv2whQqpTKrj9djs.roa (raw, json)
Hash identifier:          ufwvClaU7zkaluKZiM00mEN4t2gHSp6Zo5She6mkBPE=
Subject key identifier:   BE:C6:95:F9:5E:4E:4F:37:1F:BF:6C:21:42:AA:53:2A:B8:FD:76:3B
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       057D
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/vsaV-V5OTzcfv2whQqpTKrj9djs.roa
Signing time:             Sun 01 Mar 2026 01:52:21 +0000
ROA not before:           Sun 01 Mar 2026 01:52:21 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:bc00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1405 (0x57d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 01:52:21 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=BEC695F95E4E4F371FBF6C2142AA532AB8FD763B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:53:48:d2:e6:dd:19:b9:33:15:57:bb:77:68:
                    61:90:9c:28:76:4c:62:e2:83:62:60:cc:b4:74:68:
                    3d:cb:d9:97:ac:e6:57:96:00:c5:d6:2c:4d:d2:3b:
                    d3:cc:93:8c:1c:89:69:e1:95:52:c2:a9:e2:8a:2f:
                    d5:f0:ac:ce:2d:29:49:d7:b3:7e:2d:2e:77:55:d4:
                    5a:39:e9:c4:75:4b:ba:28:20:5f:e4:ab:57:b3:21:
                    52:1d:38:4d:39:2c:48:a5:c6:85:97:70:2e:03:89:
                    85:52:40:b2:be:18:a1:d2:7a:9e:92:c0:39:49:68:
                    3e:e2:d3:44:db:b0:2b:bc:11:84:26:f8:e8:8d:6f:
                    e2:26:a7:6d:68:8f:6a:47:51:57:73:f6:7e:03:d3:
                    3d:63:1c:78:65:6a:9a:ba:b7:92:d4:c1:4d:02:f6:
                    0b:b0:df:e9:9f:33:93:79:87:6b:a2:95:98:34:ad:
                    a4:99:61:a1:60:ab:71:40:51:3b:7e:53:c6:7c:21:
                    d7:b8:cf:43:c8:a1:29:d9:55:c5:b9:c7:a4:69:ec:
                    82:50:ce:0b:af:4f:64:f6:a5:3a:ff:3a:2e:1f:bd:
                    06:65:2d:2d:92:02:23:f7:6c:f5:c8:dd:55:c9:c4:
                    cd:fe:ed:4c:b4:63:ae:8e:24:5e:eb:88:54:74:2b:
                    1f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C6:95:F9:5E:4E:4F:37:1F:BF:6C:21:42:AA:53:2A:B8:FD:76:3B
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/vsaV-V5OTzcfv2whQqpTKrj9djs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:bc00::/40

    Signature Algorithm: sha256WithRSAEncryption
         2f:21:00:61:53:cf:a6:e7:61:97:99:1b:6e:94:10:0f:44:c7:
         c3:15:9e:0b:ba:2f:51:11:87:49:e1:e4:55:01:1c:1c:bd:e4:
         9f:23:02:8c:06:98:64:33:4b:6c:bf:31:e2:1b:52:f2:d0:48:
         97:94:be:7b:58:ee:f0:0a:fd:31:8d:ea:83:fd:8c:12:d9:9a:
         68:fc:73:c1:55:b7:96:1e:f2:8e:be:3c:50:a8:71:84:97:9d:
         36:59:45:48:70:47:21:1f:ee:0e:01:8b:7c:eb:10:71:8f:b2:
         7a:47:87:37:85:cc:bf:b8:a5:21:fc:8e:31:63:20:49:4e:99:
         82:c9:74:3d:6b:4b:9d:35:66:87:9e:f3:73:81:6e:7f:64:21:
         3c:f3:d2:15:15:38:76:89:e1:bc:b2:e2:ca:b9:e9:22:3f:c9:
         74:b4:8b:ef:07:88:69:47:0d:53:c1:b2:c1:f2:b9:a8:5f:64:
         e4:7c:89:9b:d9:71:30:22:23:15:77:0a:ef:4c:cb:17:e3:56:
         20:1d:40:aa:3f:a1:ad:9e:bf:02:1d:d6:9c:7d:e4:e0:d3:e2:
         f4:d5:72:97:33:3f:41:c5:0d:a8:6a:ac:5a:19:18:96:5a:c2:
         4f:d2:1f:77:06:1d:aa:60:73:3e:45:9b:06:7f:09:de:0c:8f:
         3e:cc:43:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:55:44 2026 by rpki-client