Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/wfv3MwlvTX7i-l43N_DJTH789SM.roa
File:                     wfv3MwlvTX7i-l43N_DJTH789SM.roa (raw, json)
Hash identifier:          Eg49FALO9MkE3chsmEpsbslXp9ZXq9gtCaE/dJNozmA=
Subject key identifier:   C1:FB:F7:33:09:6F:4D:7E:E2:FA:5E:37:37:F0:C9:4C:7E:FC:F5:23
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       058E
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/wfv3MwlvTX7i-l43N_DJTH789SM.roa
Signing time:             Sun 01 Mar 2026 01:56:36 +0000
ROA not before:           Sun 01 Mar 2026 01:56:36 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:5e00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1422 (0x58e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 01:56:36 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=C1FBF733096F4D7EE2FA5E3737F0C94C7EFCF523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:06:82:d2:d6:a4:93:c4:0f:fe:73:b8:80:94:
                    fd:3a:f4:0b:33:ba:d7:44:b0:44:6b:cd:90:18:e3:
                    e7:bb:50:81:5d:e9:9c:2a:12:ea:f6:77:01:8d:4a:
                    c5:39:ad:64:cf:0f:d3:8f:ce:44:71:58:dd:eb:20:
                    18:8a:37:27:d1:be:75:30:ef:b1:95:c3:84:3b:ee:
                    52:97:97:02:73:56:18:57:5a:a5:50:e8:c4:0d:0c:
                    f5:9d:1e:bc:94:d4:2a:b7:35:8f:46:24:f0:d2:60:
                    fe:86:b1:1c:ab:a8:0e:53:91:38:7a:42:01:df:a7:
                    d5:4b:c0:84:bb:26:ce:0f:1d:46:a8:26:19:56:d7:
                    ea:f1:00:5e:ef:46:a4:26:d1:58:23:ef:84:f2:65:
                    f4:ef:e3:76:24:ca:a9:1b:7f:66:d5:eb:55:56:54:
                    6a:61:0a:01:45:0e:70:58:ca:dc:6e:95:d6:c8:f1:
                    bd:56:bf:61:80:fb:37:fc:f0:d0:d4:ea:32:78:33:
                    fc:59:18:cb:fc:71:c5:96:9b:b5:7c:47:b7:de:dd:
                    3d:7b:09:54:fa:ff:2f:e2:49:bb:3b:99:4c:58:5f:
                    78:f5:43:dc:01:b4:5b:6f:6e:8c:ef:d5:c9:b8:61:
                    d5:4d:ba:59:e8:63:b7:76:82:bb:2c:9e:58:25:70:
                    86:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:FB:F7:33:09:6F:4D:7E:E2:FA:5E:37:37:F0:C9:4C:7E:FC:F5:23
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/wfv3MwlvTX7i-l43N_DJTH789SM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:5e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         9c:53:92:e8:f6:ab:bd:91:b1:4d:97:b4:be:ca:da:92:32:38:
         71:7c:b3:2c:d4:d3:f8:0d:7a:e1:4d:ad:87:6f:5c:75:27:d2:
         05:1f:fe:05:c8:23:30:85:32:e4:fc:77:93:e6:2f:c3:4e:3d:
         4f:95:25:39:47:30:ca:95:3a:e4:f4:24:07:fa:a0:47:d3:33:
         6b:f1:16:af:f3:13:66:4e:5f:e5:f4:c9:27:a6:fa:49:16:ce:
         ef:7d:f7:9e:c0:11:65:dd:1a:5a:10:b5:90:37:63:15:c8:24:
         48:6e:f0:c4:af:1a:ab:a0:b0:87:6d:79:5c:90:1f:51:77:4d:
         e6:a0:23:a7:22:0e:45:11:3f:cc:02:69:98:8e:17:6c:4e:3b:
         e7:cc:2b:3e:02:2f:e8:84:2e:fc:81:58:cc:25:d3:d1:d9:79:
         39:ad:7e:47:26:32:c3:e1:6e:e7:69:ca:b8:a6:7a:54:a9:9f:
         64:04:c1:0f:be:b7:45:bc:6b:02:5e:70:70:04:f7:03:0e:ea:
         7b:f4:fd:4e:61:97:fd:9d:ff:08:90:1b:0d:50:0c:23:5a:bc:
         ea:49:3f:88:0d:00:63:0d:ed:17:63:fe:34:9f:64:89:4d:42:
         e1:f5:da:c0:f1:13:23:56:f4:70:cb:1e:64:58:1e:da:1c:0c:
         91:fd:4a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:55:11 2026 by rpki-client