Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/zvO60uzDUKrjz9owvtVBlRt0pOY.roa
File:                     zvO60uzDUKrjz9owvtVBlRt0pOY.roa (raw, json)
Hash identifier:          Farflk7yNeJVYzpzpR79cNtGKpulaMaAQlUDMuXIsME=
Subject key identifier:   CE:F3:BA:D2:EC:C3:50:AA:E3:CF:DA:30:BE:D5:41:95:1B:74:A4:E6
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       063F
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/zvO60uzDUKrjz9owvtVBlRt0pOY.roa
Signing time:             Sun 01 Mar 2026 02:30:48 +0000
ROA not before:           Sun 01 Mar 2026 02:30:48 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:2600::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1599 (0x63f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar  1 02:30:48 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=CEF3BAD2ECC350AAE3CFDA30BED541951B74A4E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:76:98:70:9d:9d:af:68:b5:29:73:d2:b8:e0:
                    f3:3b:b9:43:81:f1:d3:c8:66:2e:56:ae:3d:d8:d0:
                    84:98:8e:41:c1:33:e8:88:89:e4:81:a0:f3:61:a5:
                    10:81:a8:47:e7:36:96:e5:18:4c:00:63:69:1a:ef:
                    81:23:8b:a2:59:5b:77:b0:fb:76:74:f5:e8:0c:ce:
                    8b:07:f1:06:4c:ec:5d:4e:ac:a3:64:8c:9d:9a:3d:
                    59:86:47:43:b1:db:03:c6:99:d1:91:53:28:2e:12:
                    a7:90:c8:12:76:7e:3f:e1:ee:ad:be:7d:26:5a:9e:
                    2e:50:4e:96:42:91:6b:d0:d3:d6:15:8e:64:82:67:
                    79:96:95:07:e6:21:dd:90:e4:16:74:32:62:86:72:
                    08:66:4f:07:7a:7a:a1:81:84:ec:6b:9e:68:bb:31:
                    5f:ff:8a:85:54:49:3f:cb:6f:d5:e1:5f:35:01:80:
                    81:c7:4b:c3:ee:9f:d3:2b:07:70:1e:7e:f7:41:1b:
                    c9:47:ae:dd:dd:25:e6:cf:10:d0:67:36:02:d9:43:
                    8d:89:69:7c:3c:59:ca:a5:9a:77:68:35:97:18:82:
                    b3:48:6a:42:ab:02:13:d7:b5:b1:c9:62:e5:50:18:
                    50:5b:17:97:4e:22:f5:9e:4d:dd:48:5b:d5:e3:df:
                    d7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F3:BA:D2:EC:C3:50:AA:E3:CF:DA:30:BE:D5:41:95:1B:74:A4:E6
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/zvO60uzDUKrjz9owvtVBlRt0pOY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:2600::/40

    Signature Algorithm: sha256WithRSAEncryption
         95:3f:20:af:90:40:52:6c:5d:eb:20:8d:8e:93:29:12:ad:1d:
         ca:11:98:c1:dc:a6:cf:b9:a5:bb:77:cf:f9:f0:e4:fc:6d:10:
         70:ba:fa:51:1c:6d:73:87:92:b6:57:33:04:46:cf:a3:62:84:
         9b:92:05:30:99:44:41:92:a9:7c:67:1e:21:1e:2c:af:da:38:
         fb:bf:91:ff:03:63:ef:1b:9c:91:10:5e:64:f5:92:3c:23:c9:
         52:e0:00:ce:6c:a3:16:6e:14:81:78:8c:40:8b:24:dd:90:23:
         15:d9:6f:31:8f:c4:ff:01:5a:a9:49:80:a7:e5:ad:cd:f2:2c:
         77:35:6f:da:aa:74:4d:92:28:00:d2:3c:10:b3:53:5b:90:f2:
         6a:c0:4e:72:36:49:b7:17:91:88:1d:35:92:07:23:cd:01:fe:
         54:bb:f1:5e:12:c3:15:60:6a:4b:10:06:54:f9:bc:b1:80:f7:
         38:bd:09:b9:80:f2:09:1e:ac:72:8e:10:d5:ba:f2:86:11:d9:
         87:cc:44:cc:30:4b:f6:45:12:f9:0e:a2:da:d9:f5:50:92:de:
         66:94:9a:15:d9:5f:a8:37:a3:42:3a:8f:2f:ac:1d:b7:dd:02:
         c0:a4:1a:c3:e7:e6:1f:3c:2e:7c:c8:f1:06:6e:2f:16:58:34:
         85:88:87:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:22:24 2026 by rpki-client