Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/wMEXRnnMP-kq0rKS9r_klf4_8RE.roa
File:                     wMEXRnnMP-kq0rKS9r_klf4_8RE.roa (raw, json)
Hash identifier:          tCHtuKUXtqcIy2jC1pp/5Tn/PwjrXwg8skBeSlWt8+I=
Subject key identifier:   C0:C1:17:46:79:CC:3F:E9:2A:D2:B2:92:F6:BF:E4:95:FE:3F:F1:11
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       063D
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/wMEXRnnMP-kq0rKS9r_klf4_8RE.roa
Signing time:             Sun 01 Mar 2026 02:30:48 +0000
ROA not before:           Sun 01 Mar 2026 02:30:48 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:f200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1597 (0x63d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 02:30:48 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=C0C1174679CC3FE92AD2B292F6BFE495FE3FF111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7d:18:57:60:fe:b6:e1:ca:9c:50:d7:e8:27:
                    6b:77:0b:2e:5d:09:6d:11:81:ac:26:4e:21:91:e3:
                    d7:81:18:9e:11:f1:c1:44:0e:57:a5:92:01:c1:24:
                    0d:49:be:5e:1f:bb:f6:48:26:9c:14:9b:e4:8b:1d:
                    23:48:36:c8:5d:b6:01:1a:04:8d:da:3e:37:0a:7d:
                    31:c6:20:b8:aa:28:2c:c5:d3:e8:0b:10:1e:4f:92:
                    b0:8f:eb:01:02:34:f2:bf:dc:b6:94:25:55:93:46:
                    a5:01:90:ee:b5:59:38:3a:e8:03:b4:94:5a:69:b8:
                    d6:86:dd:fa:e9:77:36:b2:5b:02:22:ca:53:01:c0:
                    33:bf:57:57:7f:21:63:e2:45:75:2e:ec:d6:e5:14:
                    53:de:e9:e0:b1:c1:40:90:0b:76:22:62:fc:28:c7:
                    a6:fe:d7:33:22:57:0c:70:49:c2:bb:c6:6b:72:f4:
                    d2:f5:31:38:78:ad:e3:c9:54:90:88:91:f9:2f:82:
                    b4:fa:81:41:30:ae:c7:34:49:a3:fb:6d:b0:d3:00:
                    20:09:74:c5:a7:66:ec:57:6d:f1:92:1c:ac:0a:0a:
                    59:01:d3:7a:b1:5e:b4:ac:ba:96:b8:8e:8f:83:db:
                    f5:98:7e:d9:1c:b7:c1:20:fa:f1:87:80:fa:e3:33:
                    fa:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:C1:17:46:79:CC:3F:E9:2A:D2:B2:92:F6:BF:E4:95:FE:3F:F1:11
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/wMEXRnnMP-kq0rKS9r_klf4_8RE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:f200::/40

    Signature Algorithm: sha256WithRSAEncryption
         59:7e:66:04:db:2a:44:a7:60:df:f7:d9:59:79:39:6d:0c:73:
         48:63:b4:a1:f4:be:08:0a:27:dd:a3:92:36:e2:1b:3b:dc:4b:
         ac:7b:69:65:72:af:b9:66:81:2b:4b:3b:dd:6b:34:9a:9e:1e:
         d2:eb:4f:e6:1f:11:7d:ce:0d:30:7f:99:37:0c:8e:0d:06:c8:
         71:be:1a:6a:4e:ee:ff:ba:a3:e1:ab:1b:59:21:ee:38:16:e8:
         77:d3:46:ce:24:8f:08:c4:16:42:31:5f:40:c0:eb:ed:c8:8b:
         06:7d:3f:39:d6:c1:c3:81:88:de:b7:58:4f:1a:27:b6:a4:4a:
         69:8c:37:18:7d:b0:7d:43:37:e3:2b:45:db:4a:19:d2:2c:55:
         ff:7c:62:ba:6f:bb:37:c0:57:02:94:f5:76:c1:fa:d6:1c:f1:
         91:06:e3:68:95:ea:d7:21:5d:21:b8:39:09:32:c7:20:6b:ac:
         7a:e8:3b:de:a7:38:bd:fd:2b:a9:fb:96:0f:9d:14:6c:55:66:
         fc:32:a5:97:e8:56:74:2d:7b:02:dc:5c:d2:91:d9:a7:66:31:
         ec:dd:ce:a6:66:c4:0d:87:63:28:06:95:2b:0e:26:41:d4:fa:
         2f:ca:0c:1e:8a:e6:0e:3d:ef:80:0e:01:ac:89:f2:72:bd:6d:
         29:e8:fd:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:17:09 2026 by rpki-client