Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/xhkarSTRDVt4CIViEWhT3nTEQKM.roa
File:                     xhkarSTRDVt4CIViEWhT3nTEQKM.roa (raw, json)
Hash identifier:          kHOpJJXMQJJ55f6TnRPgYbPrzkpgW0e3i0O/HFO3OJ0=
Subject key identifier:   C6:19:1A:AD:24:D1:0D:5B:78:08:85:62:11:68:53:DE:74:C4:40:A3
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0579
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/xhkarSTRDVt4CIViEWhT3nTEQKM.roa
Signing time:             Sun 01 Mar 2026 01:52:20 +0000
ROA not before:           Sun 01 Mar 2026 01:52:20 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:6b00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1401 (0x579)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 01:52:20 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=C6191AAD24D10D5B78088562116853DE74C440A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f4:03:f5:d8:f7:a3:76:3c:09:19:41:f0:9b:
                    e6:28:e2:a5:d9:d0:5c:d5:1a:32:62:f9:49:8e:17:
                    e3:df:d5:b5:48:fd:58:02:7b:16:72:6e:06:97:5d:
                    c8:4a:2d:90:25:8a:fb:12:77:e2:f4:54:86:40:85:
                    64:bb:8f:c5:4f:88:62:28:44:2d:f3:58:47:d7:b8:
                    14:f8:b7:2a:ce:18:2a:cb:c1:cf:7b:68:b4:dc:08:
                    b0:34:24:93:81:fb:38:2c:a5:0b:51:5d:fa:ec:0d:
                    e2:71:90:dd:d3:af:d0:f2:fc:e2:b7:64:2a:ac:be:
                    a7:f2:f6:7a:7a:de:d5:04:44:9d:81:7d:f8:53:2c:
                    9b:fa:9b:f5:d7:2c:78:f5:d6:79:ae:31:c2:ce:52:
                    c1:d3:83:21:7d:5e:6e:33:ec:97:4a:f8:dc:ba:1e:
                    a1:05:c6:07:07:19:db:f2:c4:f7:2e:d6:b9:66:10:
                    f3:92:87:72:1a:1b:24:77:17:1a:ae:68:dc:37:db:
                    22:1e:35:ca:17:bb:72:9e:b1:21:64:aa:c8:47:b3:
                    51:35:dc:7b:fa:e4:65:68:4f:6c:fc:e7:1e:66:90:
                    78:48:4d:34:bd:17:76:16:3d:d1:b1:56:75:fc:ec:
                    f4:86:8f:04:a3:56:39:bd:8e:07:7a:e8:31:73:63:
                    ec:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:19:1A:AD:24:D1:0D:5B:78:08:85:62:11:68:53:DE:74:C4:40:A3
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/xhkarSTRDVt4CIViEWhT3nTEQKM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:6b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         30:be:a6:77:eb:52:04:1a:75:03:1b:06:05:5e:c1:a2:95:eb:
         83:60:eb:ac:9f:8f:73:76:6c:2c:7f:ea:49:23:88:47:e6:99:
         61:24:c6:61:5e:ea:2e:01:ae:3a:63:df:c7:5c:56:3c:08:2f:
         93:a7:2d:18:e7:fa:53:9c:a9:c0:74:47:91:3f:a4:3e:3e:8a:
         aa:5d:25:a7:da:b8:df:c0:4e:d2:c2:66:f4:d8:3c:0d:b2:69:
         5e:a6:16:d6:b5:86:67:df:3a:0b:7b:0a:59:1c:bb:52:e9:31:
         7b:3e:92:b5:c1:99:6e:e4:9c:38:f2:bb:5c:56:12:15:3e:d9:
         aa:9a:db:cb:a8:a4:55:a8:6e:07:e1:24:3e:77:fd:d2:aa:d5:
         93:f4:e8:3e:71:71:14:b8:70:04:a6:23:ac:1e:cf:53:a7:f2:
         2c:3c:32:63:7a:83:21:0e:20:9e:21:7f:09:b8:46:79:df:25:
         f2:8c:d3:dc:bb:38:74:a6:6c:de:02:0a:57:73:3f:0c:b3:06:
         dd:ae:31:22:bf:c6:c9:70:7b:f8:ac:0c:39:06:5b:f6:15:71:
         5d:4c:1a:ba:b2:13:a7:f9:10:63:98:49:ff:c4:a2:79:cf:81:
         4e:9a:e6:20:8c:b7:40:14:b1:2a:ed:be:07:2d:b7:2c:fa:08:
         e8:5c:81:94
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICBXkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjAzMDEw
MTUyMjBaFw0yNzAyMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEM2MTkxQUFEMjREMTBE
NUI3ODA4ODU2MjExNjg1M0RFNzRDNDQwQTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDl9AP12PejdjwJGUHwm+Yo4qXZ0FzVGjJi+UmOF+Pf1bVI/VgC
exZybgaXXchKLZAlivsSd+L0VIZAhWS7j8VPiGIoRC3zWEfXuBT4tyrOGCrLwc97
aLTcCLA0JJOB+zgspQtRXfrsDeJxkN3Tr9Dy/OK3ZCqsvqfy9np63tUERJ2BffhT
LJv6m/XXLHj11nmuMcLOUsHTgyF9Xm4z7JdK+Ny6HqEFxgcHGdvyxPcu1rlmEPOS
h3IaGyR3FxquaNw32yIeNcoXu3KesSFkqshHs1E13Hv65GVoT2z85x5mkHhITTS9
F3YWPdGxVnX87PSGjwSjVjm9jgd66DFzY+xTAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUxhkarSTRDVt4CIViEWhT3nTEQKMwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS94aGthclNUUkRWdDRDSVZpRVdoVDNuVEVRS00u
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa2swDQYJKoZIhvcNAQELBQADggEBADC+pnfrUgQadQMbBgVe
waKV64Ng66yfj3N2bCx/6kkjiEfmmWEkxmFe6i4Brjpj38dcVjwIL5OnLRjn+lOc
qcB0R5E/pD4+iqpdJafauN/ATtLCZvTYPA2yaV6mFta1hmffOgt7Clkcu1LpMXs+
krXBmW7knDjyu1xWEhU+2aqa28uopFWobgfhJD53/dKq1ZP06D5xcRS4cASmI6we
z1On8iw8MmN6gyEOIJ4hfwm4RnnfJfKM09y7OHSmbN4CCldzPwyzBt2uMSK/xslw
e/isDDkGW/YVcV1MGrqyE6f5EGOYSf/EonnPgU6a5iCMt0AUsSrtvgcttyz6COhc
gZQ=
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:55:17 2026 by rpki-client