Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/z7lJgPjSlPfuTQN2GtUFhbwFnCA.roa
File:                     z7lJgPjSlPfuTQN2GtUFhbwFnCA.roa (raw, json)
Hash identifier:          4HVHxM4Gzh5kmXe29nyFxVFGUnlPrvM9NEbDt2eHty8=
Subject key identifier:   CF:B9:49:80:F8:D2:94:F7:EE:4D:03:76:1A:D5:05:85:BC:05:9C:20
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0638
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/z7lJgPjSlPfuTQN2GtUFhbwFnCA.roa
Signing time:             Sun 01 Mar 2026 02:25:56 +0000
ROA not before:           Sun 01 Mar 2026 02:25:56 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:8b00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1592 (0x638)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 02:25:56 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=CFB94980F8D294F7EE4D03761AD50585BC059C20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0c:bc:05:62:6a:6c:07:a5:50:32:f8:dd:d9:
                    d8:c0:26:b8:48:9c:f3:47:4c:59:22:1a:0a:4b:f0:
                    6a:9e:65:82:bc:84:98:43:4d:3b:36:e4:7d:52:23:
                    b4:2f:43:35:27:86:01:8e:77:77:f5:cc:84:c9:b1:
                    5e:a8:ab:ad:ef:ec:cc:7e:6d:a4:ca:00:9c:20:0c:
                    32:a3:d8:ca:9a:25:73:d1:77:6b:0a:8f:8d:24:e7:
                    53:c2:58:8a:d9:50:ed:67:ee:3d:fc:e3:84:6f:4d:
                    dd:44:18:f9:a1:9a:5d:a2:b8:6f:77:05:37:e3:bc:
                    53:bd:f3:63:e7:2d:8c:ca:3f:65:92:a8:d3:bb:8c:
                    55:37:e5:ed:2c:9e:7c:41:f9:01:10:f2:78:f2:4e:
                    d4:76:c4:94:d2:a3:fc:10:12:c5:fe:fa:6d:ef:58:
                    93:93:f8:22:39:a1:48:48:b9:ce:02:1e:fb:82:c3:
                    cc:20:ad:3b:ad:96:43:6c:08:8d:ed:da:d1:35:eb:
                    40:51:7a:62:f5:26:35:27:91:d2:cf:67:06:06:14:
                    bc:4d:39:0e:0c:ee:48:77:a1:09:b7:48:ca:5a:af:
                    0c:5b:3d:6c:19:ba:60:76:52:c1:25:7f:18:53:ab:
                    6e:95:49:69:76:6f:84:d3:75:c8:7c:ed:8a:81:0e:
                    31:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:B9:49:80:F8:D2:94:F7:EE:4D:03:76:1A:D5:05:85:BC:05:9C:20
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/z7lJgPjSlPfuTQN2GtUFhbwFnCA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:8b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         73:8b:86:85:c9:a6:78:73:e2:5d:b9:05:cf:9c:45:5b:db:59:
         a5:f8:33:ee:b5:b8:91:9e:f0:3d:85:73:9b:46:ec:01:04:ae:
         2c:4b:f5:7c:0a:47:af:ab:b1:3d:c9:d5:3c:24:5b:61:c3:ac:
         5e:57:b6:13:c7:26:0d:fd:70:72:80:53:2a:60:47:d5:30:6f:
         2a:61:f2:83:8b:5f:ad:e0:99:72:fd:62:91:6a:e5:9e:6c:56:
         7c:97:2d:96:e1:8e:c0:75:ed:7e:8d:4a:c6:bc:5b:8c:dd:7d:
         9f:32:6f:bc:49:ee:1e:ca:a4:3a:9c:32:65:e7:a6:ab:e4:98:
         fe:1b:c2:55:ac:f2:61:a0:ec:80:66:ab:99:1e:11:9b:6e:11:
         88:d2:71:64:44:d7:52:8f:98:75:e2:3d:7f:80:7c:d5:26:4b:
         04:4c:2b:3a:bf:6b:a5:97:76:cc:ad:21:aa:4f:11:42:b1:d3:
         07:7c:13:97:10:e8:da:84:9c:e3:63:9e:14:1c:3e:e5:c3:7e:
         ad:83:19:5a:52:81:ed:32:41:f1:e6:dc:7c:af:75:9c:a8:ae:
         21:95:d8:67:91:59:58:6d:9e:1f:ca:07:40:7f:5e:a8:36:dd:
         e6:82:2c:81:4f:b4:38:6d:ac:73:28:e7:51:a3:07:4d:f9:34:
         53:3f:f4:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:56:18 2026 by rpki-client