Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/wHIFZcVCe4Z_u60OGEJRVtZDI1A.roa
File:                     wHIFZcVCe4Z_u60OGEJRVtZDI1A.roa (raw, json)
Hash identifier:          8jxqy6VVRP5hBhpNt4iyCiL4iQFT1h9Tpp+b4rZ3jpY=
Subject key identifier:   C0:72:05:65:C5:42:7B:86:7F:BB:AD:0E:18:42:51:56:D6:43:23:50
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       05C2
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/wHIFZcVCe4Z_u60OGEJRVtZDI1A.roa
Signing time:             Sun 01 Mar 2026 02:05:30 +0000
ROA not before:           Sun 01 Mar 2026 02:05:30 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:5d00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1474 (0x5c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 02:05:30 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=C0720565C5427B867FBBAD0E18425156D6432350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7d:41:5e:d3:b5:a5:68:1d:eb:75:51:05:ff:
                    72:78:18:7a:5d:30:cf:53:1d:98:de:4d:5f:ab:9b:
                    07:75:63:96:4f:d4:b6:7f:20:5e:42:41:13:37:7e:
                    bc:2f:1d:53:f8:c5:1d:eb:c6:63:b6:e1:9c:97:a9:
                    8f:db:69:1a:42:8c:f2:92:c8:81:20:ad:96:29:8f:
                    c6:fb:e5:3f:51:2a:e5:53:36:16:54:53:7d:07:c6:
                    33:ce:f5:7a:3b:ae:94:82:fa:d6:51:6e:a6:93:3a:
                    8c:9d:77:99:76:c8:81:35:6b:0c:52:4c:5d:60:d0:
                    1b:f4:39:58:42:0a:96:fb:08:c3:4a:d0:33:13:61:
                    b0:a3:71:ae:95:6f:32:75:71:c0:eb:82:b4:d0:84:
                    01:63:72:8e:5c:57:0a:58:13:30:b5:78:3c:36:25:
                    d3:b4:2f:2a:24:c6:ea:06:99:ae:de:1f:cf:31:61:
                    a1:d8:2a:4e:2b:10:63:83:15:30:a9:a4:1f:85:93:
                    9a:95:91:99:3c:e4:9c:6c:dd:57:20:f7:6e:4c:e6:
                    cd:2b:a2:3a:c6:81:13:85:dd:fe:b0:38:ff:71:0c:
                    ce:05:db:bb:b6:f9:f4:82:7d:26:4f:10:fe:67:32:
                    30:25:71:70:a6:53:35:82:3e:2a:28:58:e4:c9:a9:
                    8a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:72:05:65:C5:42:7B:86:7F:BB:AD:0E:18:42:51:56:D6:43:23:50
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/wHIFZcVCe4Z_u60OGEJRVtZDI1A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:5d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         77:b4:11:34:42:8c:75:a4:66:0d:45:7f:ec:b5:05:dd:12:b2:
         ed:06:1c:e9:df:a5:40:3a:3f:4f:99:20:32:de:3d:41:8f:02:
         1a:c3:3f:83:6e:1b:30:f2:c3:84:48:6f:ff:16:bf:61:3a:76:
         a6:96:08:f0:e2:4d:c6:0b:3c:eb:88:f1:f8:e6:00:2c:d8:63:
         bd:c0:e5:87:e4:5c:0b:a4:f0:b7:99:ea:2d:3a:49:79:9f:cf:
         bd:2c:56:5d:f1:52:48:c1:4d:b2:c2:b1:4b:a6:4b:ba:be:81:
         0d:11:7b:44:89:ce:95:e0:dc:55:1f:1e:4b:f8:2e:0b:b8:47:
         ba:8f:cd:e8:76:8a:33:bf:b0:67:72:21:7b:a0:e2:f3:2a:1d:
         85:c6:12:fa:b1:34:99:ab:e6:c4:0b:6d:4e:bb:db:61:c3:ae:
         79:04:0b:f9:bf:c3:b4:44:1f:f4:1e:ec:70:3c:64:a5:35:e6:
         39:a9:33:2e:17:d1:13:aa:7a:70:98:a0:97:b9:8b:ba:41:51:
         5d:06:8c:fb:d4:74:e9:c4:8e:c7:1e:d9:f5:a6:2d:04:4f:fb:
         96:77:8f:bf:c4:9a:eb:da:a9:99:98:f9:c4:f3:b9:4d:ad:04:
         7c:9d:3a:e8:03:30:b2:27:75:c9:8c:c5:d0:90:e0:43:d6:4f:
         27:10:ad:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:50:04 2026 by rpki-client