Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/z7vy6EiHbMV4MkJRmR6vlFSM4n4.roa
File:                     z7vy6EiHbMV4MkJRmR6vlFSM4n4.roa (raw, json)
Hash identifier:          kqlrs0q5BWyFCE3G3Djk9rf/iB4A2NKQraIYl4FaulU=
Subject key identifier:   CF:BB:F2:E8:48:87:6C:C5:78:32:42:51:99:1E:AF:94:54:8C:E2:7E
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       061E
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/z7vy6EiHbMV4MkJRmR6vlFSM4n4.roa
Signing time:             Sun 01 Mar 2026 02:21:04 +0000
ROA not before:           Sun 01 Mar 2026 02:21:04 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:7a00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1566 (0x61e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 02:21:04 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=CFBBF2E848876CC578324251991EAF94548CE27E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e6:a5:8c:7e:2d:fe:0f:80:64:22:2f:db:95:
                    fb:3c:95:79:84:38:cb:25:61:25:ef:98:b2:f3:83:
                    c4:d6:12:5d:d9:92:8d:9d:91:dc:c6:81:01:e1:2e:
                    8e:f9:45:8a:4b:ae:ee:4e:3e:ed:2f:65:0f:34:c3:
                    c0:e3:57:15:47:ca:90:fc:db:72:78:9e:28:b5:54:
                    ad:d2:08:33:84:4c:b3:da:f7:f7:6b:6c:5c:92:16:
                    a3:16:41:0f:3d:f6:8c:cf:8c:27:37:5b:dc:83:5e:
                    39:e4:5c:06:29:f8:20:02:a7:02:da:c7:bf:ad:24:
                    f3:69:43:21:61:bf:24:27:5a:ab:b9:23:48:f8:dc:
                    aa:e9:c6:0c:c7:2b:48:13:c9:90:b1:26:2d:3a:9b:
                    37:a1:ec:ad:67:a7:48:10:84:04:df:3e:6d:a6:06:
                    bf:a8:1c:a3:f2:d8:87:09:d6:dd:2f:e1:07:05:c2:
                    49:27:71:2b:9f:d6:01:60:c2:94:4d:3a:ea:d3:ce:
                    f4:02:e3:6a:39:a4:dd:d0:a2:0a:23:d0:91:cc:b5:
                    76:24:ee:15:ac:1d:ad:1d:af:8f:0d:a1:e8:35:a6:
                    24:a3:af:d3:20:62:78:5b:d4:90:38:20:25:a5:82:
                    86:ef:a6:95:94:96:13:50:f5:3f:4c:7e:52:ed:e3:
                    93:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:BB:F2:E8:48:87:6C:C5:78:32:42:51:99:1E:AF:94:54:8C:E2:7E
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/z7vy6EiHbMV4MkJRmR6vlFSM4n4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:7a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         2b:01:35:cf:4f:18:a5:ab:f0:63:02:2d:b1:b4:3e:45:00:c7:
         88:93:e9:0e:36:81:98:b6:51:2a:27:f7:0f:a7:d6:5c:6c:14:
         fb:a3:41:64:88:30:99:1c:c8:6a:b7:45:1d:cf:0e:c2:1b:49:
         99:08:8f:a9:14:d9:7a:90:73:1a:f3:59:f3:0a:9e:56:e1:62:
         36:41:ac:fa:d9:ce:aa:39:72:b5:19:67:ad:5d:a8:02:c9:a0:
         c6:a9:db:92:c9:d3:72:46:4e:0d:79:2d:c8:31:7e:41:48:24:
         08:ad:1a:e1:07:15:2e:28:9a:db:3c:8e:c4:33:09:ab:59:ce:
         69:66:8b:10:be:48:78:fd:96:0e:d7:5b:21:fb:97:97:8e:c8:
         0f:61:68:8e:45:2d:bd:38:8e:ae:54:cf:5a:78:cd:b3:68:07:
         24:c0:ae:64:20:04:91:e6:60:32:e3:e9:2e:c6:57:b2:bc:65:
         48:48:78:10:09:10:1a:cb:88:84:8a:54:12:cb:1d:71:54:94:
         88:06:f3:a5:50:22:bc:fb:36:0a:38:3b:66:21:7b:f6:7e:86:
         14:c5:14:37:a8:41:a1:d2:52:41:8a:ea:87:26:44:c7:62:5a:
         13:3b:af:1a:87:ab:e5:75:bb:5f:7e:f8:b8:0a:31:40:48:95:
         17:89:db:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:40 2026 by rpki-client