Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/yPWnfdyXM7sG1ax15zU6SISLmSU.roa
File:                     yPWnfdyXM7sG1ax15zU6SISLmSU.roa (raw, json)
Hash identifier:          26oI+oLUP5VS3pcXhcI+pHRVuqCUejxZ2PcXSKuZKjg=
Subject key identifier:   C8:F5:A7:7D:DC:97:33:BB:06:D5:AC:75:E7:35:3A:48:84:8B:99:25
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0604
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/yPWnfdyXM7sG1ax15zU6SISLmSU.roa
Signing time:             Sun 01 Mar 2026 02:16:17 +0000
ROA not before:           Sun 01 Mar 2026 02:16:17 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:61:2800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1540 (0x604)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 02:16:17 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=C8F5A77DDC9733BB06D5AC75E7353A48848B9925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e3:1a:19:38:a0:e1:69:9b:1c:f2:ce:d3:c8:
                    2b:ef:9c:74:b4:42:17:71:d1:20:f7:c6:56:d2:8c:
                    52:c9:89:4a:b1:07:7c:95:25:12:0f:51:ea:25:ec:
                    dd:7d:d9:fe:7a:4a:6d:82:db:13:3a:30:59:35:05:
                    02:2b:b1:12:57:93:27:26:b5:4a:cb:0f:00:82:e6:
                    b9:94:31:a9:d8:f3:1d:76:64:f9:86:9d:12:13:6f:
                    04:8b:38:6a:fb:14:43:a4:6e:4b:84:77:03:48:d0:
                    41:b7:84:9c:3f:01:40:87:7b:75:73:69:b8:6b:06:
                    ba:08:e3:08:1a:5b:35:f1:83:df:22:21:e6:0f:d6:
                    50:e7:ca:be:b3:18:da:c6:98:d6:c2:15:67:b8:a4:
                    58:e0:5b:3a:f5:d3:ff:fa:f7:df:cc:f8:b9:a1:08:
                    31:58:8d:2a:ea:f7:9d:c1:ec:72:db:dc:cb:dd:ed:
                    1f:70:5e:4f:2f:89:7e:62:03:f3:2c:5a:07:be:62:
                    07:83:02:13:a1:5a:ba:f1:45:73:3a:50:01:4e:a7:
                    48:89:19:88:46:c2:86:da:ff:6b:de:9c:18:2a:9a:
                    21:df:49:61:57:07:a0:31:26:ac:2c:c3:75:72:0f:
                    94:84:dd:ea:ad:ae:2a:c1:7a:58:eb:02:5f:fd:44:
                    66:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:F5:A7:7D:DC:97:33:BB:06:D5:AC:75:E7:35:3A:48:84:8B:99:25
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/yPWnfdyXM7sG1ax15zU6SISLmSU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:2800::/38

    Signature Algorithm: sha256WithRSAEncryption
         77:51:15:1d:fa:f7:09:a5:66:fd:79:b0:1c:f3:1e:dc:fb:a3:
         4e:96:7d:3f:1c:dc:aa:33:50:3a:36:f3:5f:37:72:14:9d:4d:
         48:90:64:0d:73:6e:e0:66:10:fb:25:79:b6:f5:20:36:ce:0f:
         75:c3:b3:00:cd:6a:6a:ca:6e:37:bf:32:08:e8:3d:af:8e:9e:
         d9:13:17:93:1a:6f:0e:93:e9:24:88:bc:fb:94:6a:c1:fc:b4:
         4a:d1:32:28:cb:47:29:11:c3:db:6e:f4:0d:0a:b9:bf:c0:8c:
         76:92:13:44:42:ae:d8:86:74:0a:bb:8c:c1:ad:ac:f2:70:df:
         6c:70:86:7a:bb:e6:71:07:ce:86:44:72:f7:7a:29:d7:57:90:
         63:39:f4:46:75:1e:c9:fd:91:c3:db:23:7c:36:a3:0d:69:d3:
         39:04:69:33:51:e4:2c:05:8b:36:56:72:fb:4c:12:c5:0c:93:
         e2:54:ad:e1:da:1f:54:b6:42:1d:3a:b5:f8:1c:59:66:db:48:
         b0:05:52:a3:36:43:00:82:7c:6e:c4:37:de:f0:65:77:b5:5a:
         68:b7:b7:e2:b1:e4:56:6b:11:b9:3f:73:b8:6a:ba:8b:04:34:
         d3:bf:91:d2:3e:38:2f:5c:23:a1:62:01:30:0b:ac:43:fa:5e:
         59:fd:08:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:41 2026 by rpki-client