Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/-NoMh5LaHFslpKu975sPULJrv2c.roa
File:                     -NoMh5LaHFslpKu975sPULJrv2c.roa (raw, json)
Hash identifier:          n6QELAYALfarI/SXmsvVl5YCOGkaY8WFTmgKnEE0tAk=
Subject key identifier:   F8:DA:0C:87:92:DA:1C:5B:25:A4:AB:BD:EF:9B:0F:50:B2:6B:BF:67
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       06B0
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/-NoMh5LaHFslpKu975sPULJrv2c.roa
Signing time:             Tue 31 Mar 2026 08:26:22 +0000
ROA not before:           Tue 31 Mar 2026 08:26:22 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:6500::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1712 (0x6b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:26:22 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F8DA0C8792DA1C5B25A4ABBDEF9B0F50B26BBF67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:65:a0:f7:a7:c5:57:35:d7:31:43:55:81:d0:
                    91:91:75:7f:3f:14:50:af:34:0c:0d:14:a2:37:5a:
                    b2:be:ca:39:63:8f:c9:88:3e:c1:0b:38:fd:36:a3:
                    f6:c5:7a:a7:cf:09:8b:a6:36:e6:aa:e7:3b:a7:6b:
                    ae:37:a7:98:cf:68:64:5e:52:e5:e1:78:07:2e:d2:
                    ed:b9:f0:a6:79:ad:b8:5c:99:e2:8b:68:ae:4a:82:
                    de:21:17:fb:e7:4b:01:06:33:10:ec:6c:f5:31:39:
                    bc:59:8d:81:5c:cf:b5:cb:1d:8a:31:81:e5:28:57:
                    ce:c9:9b:3b:a3:67:b8:09:0b:64:16:f7:f9:27:9a:
                    2a:a8:37:2c:de:3e:12:cd:48:c5:9d:8b:ee:20:37:
                    cc:1e:77:71:85:bd:77:9e:be:e1:16:03:e9:89:3d:
                    75:37:60:34:10:6f:4b:bb:2e:28:e3:f5:03:fe:ec:
                    fd:4d:1d:e3:bf:88:b5:03:ec:aa:0b:3d:2c:a5:01:
                    a8:fa:ff:f1:9c:f7:b5:71:91:3a:de:b2:4b:28:53:
                    f3:b4:f7:ea:5d:11:29:d8:79:6f:f2:7b:5c:c2:57:
                    d6:27:59:6a:e7:8f:62:8d:41:15:51:a2:a9:64:21:
                    88:44:60:0b:73:da:82:d5:84:ce:67:67:40:26:56:
                    cc:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:DA:0C:87:92:DA:1C:5B:25:A4:AB:BD:EF:9B:0F:50:B2:6B:BF:67
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/-NoMh5LaHFslpKu975sPULJrv2c.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:6500::/40

    Signature Algorithm: sha256WithRSAEncryption
         82:85:16:2f:42:b9:dc:5c:72:ec:bc:03:1e:8c:dd:6d:18:46:
         b5:c5:41:2a:5a:df:c7:34:0f:c1:1b:ff:82:59:d7:75:33:c6:
         cc:c7:fc:19:f0:14:f8:2f:b8:78:6f:5d:dc:b5:8f:a2:82:36:
         5d:bb:40:81:5a:0a:2d:85:f9:4b:f6:d4:80:37:24:4f:41:02:
         b3:77:d6:6d:1d:c6:69:cb:e5:4e:1b:d9:0f:f9:cf:82:b4:05:
         20:56:30:b5:06:88:2c:01:4e:0a:cf:0a:34:9c:30:ff:a6:02:
         7d:9a:65:70:5b:0a:17:5e:9f:be:6b:9c:0a:5c:09:67:3f:7f:
         c6:07:48:ef:03:8a:88:58:33:4c:c0:00:82:80:2b:90:4a:04:
         a7:19:4b:a3:90:40:0e:c3:5c:d9:23:18:30:42:96:88:53:b1:
         96:12:45:1d:bd:e0:d6:7d:79:bb:5a:7e:f0:58:ea:73:ba:ed:
         7e:c4:57:13:c9:72:57:db:2c:df:f4:28:9d:b2:72:88:9c:d2:
         0a:cc:46:25:b6:10:38:e9:e2:f2:ee:ed:ce:f3:cb:a2:5e:54:
         18:92:40:14:40:4e:9a:2c:18:28:d4:c9:11:51:19:00:ef:fe:
         a9:d7:03:ec:9a:26:8e:dc:5e:33:a3:f2:5e:4d:da:12:42:49:
         0b:b6:bb:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:34 2026 by rpki-client