Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/zQ2G4Z5hU3UTu-a5sDrIMA4MKeM.roa
File:                     zQ2G4Z5hU3UTu-a5sDrIMA4MKeM.roa (raw, json)
Hash identifier:          ATuw/SdcSyYIWynmZCxQx1zw46nupu16oi+RxoV8VGY=
Subject key identifier:   CD:0D:86:E1:9E:61:53:75:13:BB:E6:B9:B0:3A:C8:30:0E:0C:29:E3
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0570
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/zQ2G4Z5hU3UTu-a5sDrIMA4MKeM.roa
Signing time:             Sun 01 Mar 2026 01:52:15 +0000
ROA not before:           Sun 01 Mar 2026 01:52:15 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:f800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 05:15:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1392 (0x570)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 01:52:15 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=CD0D86E19E61537513BBE6B9B03AC8300E0C29E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6a:09:e3:9c:6e:30:94:c5:4e:26:42:d4:cd:
                    b1:45:da:8f:a1:5a:a2:e1:f9:38:98:24:58:f7:3b:
                    a6:0a:46:75:fe:af:e4:d8:7d:75:6e:35:a4:81:54:
                    bf:f5:f8:19:cc:19:4c:97:47:a1:0e:1f:7b:00:04:
                    25:5b:cf:68:6c:c2:fe:e3:22:63:bb:f2:e3:f3:71:
                    d6:12:4e:b1:32:9a:9e:cf:08:fc:a1:3a:bc:21:87:
                    8a:ee:b4:be:8a:d5:e7:ad:d5:b1:61:3d:29:71:c2:
                    ee:d8:ab:89:be:67:f8:1a:43:0a:b9:d5:fc:86:22:
                    18:b1:a1:83:4f:7e:c0:63:a3:01:cd:d7:a5:df:95:
                    b7:6d:f0:12:6e:21:fe:10:ff:4d:a6:53:00:10:d0:
                    b3:d5:02:36:bf:32:d2:f7:3e:fc:2d:97:2b:63:19:
                    8a:08:df:e7:6b:a0:2d:7d:53:9c:f3:1f:32:15:a5:
                    49:ec:1a:de:7a:c7:1e:0c:58:c4:c6:b3:14:df:fe:
                    1e:d4:da:87:09:6d:6f:e0:f6:d2:9d:68:1f:46:53:
                    8f:cd:38:e6:78:45:29:8a:fa:37:d8:15:3b:0c:e3:
                    49:7f:48:93:8d:c0:ae:77:c0:97:fc:c3:df:a8:81:
                    29:5f:5d:33:08:c9:90:3d:f5:9f:54:6f:db:e3:c5:
                    fc:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:0D:86:E1:9E:61:53:75:13:BB:E6:B9:B0:3A:C8:30:0E:0C:29:E3
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/zQ2G4Z5hU3UTu-a5sDrIMA4MKeM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:f800::/40

    Signature Algorithm: sha256WithRSAEncryption
         81:42:e9:0a:49:02:d7:ba:60:31:bd:b4:ad:94:e9:52:fd:a4:
         4d:c2:6f:96:6a:0e:c1:f1:cb:72:20:af:b2:fe:50:4d:23:c1:
         d6:08:b8:95:43:ae:04:62:36:f7:f6:5c:2f:18:71:58:38:86:
         da:5c:e8:40:ba:e4:ca:56:6a:38:ed:18:ae:10:64:90:07:b0:
         57:0f:de:63:94:d0:20:31:dd:76:b0:53:17:cb:91:b8:16:49:
         c1:69:d4:94:43:13:0a:6a:9b:e5:63:69:97:d0:d1:ce:a6:29:
         08:a2:95:0d:95:55:c3:63:21:e0:6f:35:9f:47:d6:9f:15:37:
         95:a9:eb:c7:5a:df:0a:c1:fd:77:c3:dd:85:a3:5c:a8:c5:d3:
         13:73:77:34:d2:81:6b:65:ea:74:20:04:0c:75:7e:0d:9c:54:
         97:d7:12:bc:37:56:c4:b0:06:7c:05:9e:40:54:1c:d6:18:d8:
         23:13:f2:cd:b2:a9:8f:36:e2:a8:04:1c:c0:01:6f:e9:59:63:
         d4:23:07:8e:c1:3a:cc:bd:be:bf:43:8a:b6:dc:c1:22:04:13:
         4c:17:f0:d6:93:e3:14:1b:c4:94:47:7d:86:4f:fe:27:db:27:
         2d:d4:fd:9f:7a:06:38:41:61:2e:4e:99:b0:10:71:07:bf:c6:
         3a:d8:7d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:07:09 2026 by rpki-client