Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/-1SxGg7rY4PyeD2ygQNlowsfFyE.roa
File:                     -1SxGg7rY4PyeD2ygQNlowsfFyE.roa (raw, json)
Hash identifier:          O5M9hne5NjmU48exWL4bu81xWd3i/Xns2VnGAyMLjRA=
Subject key identifier:   FB:54:B1:1A:0E:EB:63:83:F2:78:3D:B2:81:03:65:A3:0B:1F:17:21
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       068F
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/-1SxGg7rY4PyeD2ygQNlowsfFyE.roa
Signing time:             Tue 31 Mar 2026 08:26:07 +0000
ROA not before:           Tue 31 Mar 2026 08:26:07 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:61:1000::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1679 (0x68f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:26:07 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=FB54B11A0EEB6383F2783DB2810365A30B1F1721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b1:dd:3a:29:b7:1b:aa:16:d4:8e:b5:13:84:
                    67:a8:57:90:cb:a2:bc:fa:a2:17:83:d2:e9:76:38:
                    d4:1b:f5:a7:0d:08:25:87:66:1b:c8:a4:86:19:e2:
                    ef:c7:e9:b6:d9:8b:5f:b4:3c:3b:64:f2:92:c5:a7:
                    3e:e9:39:c0:b5:7e:29:a4:89:37:0c:3c:4d:32:26:
                    4d:6f:e6:ec:69:24:f4:1d:ad:a9:fa:8e:60:43:e6:
                    fa:11:99:15:88:72:45:37:f3:d2:3a:0b:89:3a:9f:
                    46:e0:e7:cb:fe:61:5e:d3:15:f4:66:c9:3b:61:6f:
                    99:e2:6f:d2:62:41:5c:34:3d:78:00:64:bf:b3:17:
                    01:f2:4c:00:d2:75:f8:30:d8:f4:73:e3:6e:15:8a:
                    4e:e3:be:10:a4:7f:24:94:d8:ce:0c:c3:c1:5f:4c:
                    81:67:2f:fc:6a:72:34:0e:5b:ba:83:5e:2d:74:f7:
                    6c:17:16:a4:e2:fc:98:52:d9:39:71:1c:de:b3:7f:
                    2b:00:14:48:15:9c:e5:51:11:33:8e:32:36:5b:14:
                    11:c8:df:e1:6b:b8:f0:32:5c:fe:ec:6a:fe:7f:2e:
                    b5:7f:4d:01:e2:80:bc:92:4a:6b:c1:4e:05:3a:aa:
                    cc:90:e5:e4:3a:3f:1e:c3:1b:bf:64:c3:ce:25:56:
                    a2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:54:B1:1A:0E:EB:63:83:F2:78:3D:B2:81:03:65:A3:0B:1F:17:21
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/-1SxGg7rY4PyeD2ygQNlowsfFyE.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:1000::/37

    Signature Algorithm: sha256WithRSAEncryption
         5e:b7:38:61:93:a2:d9:a3:a8:6b:ba:60:9f:ca:ae:7e:b2:d2:
         81:89:61:eb:40:e7:5b:2f:f9:34:02:5c:5b:91:c7:48:5e:8f:
         4c:12:f2:23:44:23:89:6b:c5:a4:ce:2a:5d:a2:14:14:43:24:
         fa:cf:27:10:5e:f0:5c:1e:ec:19:ce:3f:7b:5b:48:a7:c4:09:
         f9:49:54:1a:97:bc:81:aa:a3:b8:cc:89:ef:c2:bf:e3:6d:ab:
         6d:d9:8f:94:f3:67:f8:df:ef:62:96:66:19:74:c2:6b:77:1f:
         52:6a:1f:95:4a:36:fa:15:0c:56:78:53:a3:d1:81:4e:70:3d:
         5f:ae:04:cd:16:ce:a6:d4:dd:8f:93:92:72:95:fd:29:31:b1:
         96:ed:26:2e:a4:d0:eb:54:42:c4:52:ae:1d:15:28:91:21:a9:
         b5:f8:76:b4:27:8b:a6:5e:4f:86:e0:fa:19:7f:3a:cc:84:9b:
         cb:3f:6c:a7:5f:18:17:20:e7:a8:2e:af:3f:83:63:26:48:76:
         c5:06:a1:09:7a:a5:6d:34:a7:c0:35:72:0c:7b:49:06:94:5f:
         47:84:00:f0:8f:6a:5f:de:fd:09:b4:1f:06:f3:4c:40:95:1f:
         a8:46:8e:d3:58:1d:f1:cd:02:39:72:30:52:e5:52:4a:06:e1:
         ca:8c:e4:26
-----BEGIN CERTIFICATE-----
MIIEwzCCA6ugAwIBAgICBo8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjAzMzEw
ODI2MDdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEZCNTRCMTFBMEVFQjYz
ODNGMjc4M0RCMjgxMDM2NUEzMEIxRjE3MjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDssd06KbcbqhbUjrUThGeoV5DLorz6oheD0ul2ONQb9acNCCWH
ZhvIpIYZ4u/H6bbZi1+0PDtk8pLFpz7pOcC1fimkiTcMPE0yJk1v5uxpJPQdran6
jmBD5voRmRWIckU389I6C4k6n0bg58v+YV7TFfRmyTthb5nib9JiQVw0PXgAZL+z
FwHyTADSdfgw2PRz424Vik7jvhCkfySU2M4Mw8FfTIFnL/xqcjQOW7qDXi1092wX
FqTi/JhS2TlxHN6zfysAFEgVnOVRETOOMjZbFBHI3+FruPAyXP7sav5/LrV/TQHi
gLySSmvBTgU6qsyQ5eQ6Px7DG79kw84lVqLfAgMBAAGjggHfMIIB2zAdBgNVHQ4E
FgQU+1SxGg7rY4PyeD2ygQNlowsfFyEwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDEyOS8tMVN4R2c3clk0UHllRDJ5Z1FObG93c2ZGeUUucm9h
MCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYDJAoAYRAwDQYJKoZIhvcNAQEL
BQADggEBAF63OGGTotmjqGu6YJ/Krn6y0oGJYetA51sv+TQCXFuRx0hej0wS8iNE
I4lrxaTOKl2iFBRDJPrPJxBe8Fwe7BnOP3tbSKfECflJVBqXvIGqo7jMie/Cv+Nt
q23Zj5TzZ/jf72KWZhl0wmt3H1JqH5VKNvoVDFZ4U6PRgU5wPV+uBM0WzqbU3Y+T
knKV/SkxsZbtJi6k0OtUQsRSrh0VKJEhqbX4drQni6ZeT4bg+hl/OsyEm8s/bKdf
GBcg56gurz+DYyZIdsUGoQl6pW00p8A1cgx7SQaUX0eEAPCPal/e/Qm0HwbzTECV
H6hGjtNYHfHNAjlyMFLlUkoG4cqM5CY=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:08 2026 by rpki-client