Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/0DsTDnjnp_neeYu3obiP499C8N4.roa
File:                     0DsTDnjnp_neeYu3obiP499C8N4.roa (raw, json)
Hash identifier:          0uLfx3NOm+046QlkU3q38jDOG8wyld5j+yPzkhHKrBk=
Subject key identifier:   D0:3B:13:0E:78:E7:A7:F9:DE:79:8B:B7:A1:B8:8F:E3:DF:42:F0:DE
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0787
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/0DsTDnjnp_neeYu3obiP499C8N4.roa
Signing time:             Tue 31 Mar 2026 08:28:07 +0000
ROA not before:           Tue 31 Mar 2026 08:28:07 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:61:7800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1927 (0x787)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:28:07 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=D03B130E78E7A7F9DE798BB7A1B88FE3DF42F0DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:de:75:71:78:ed:8f:90:69:2a:26:2b:16:82:
                    35:4c:29:45:1d:d1:c8:13:2b:1f:fe:fd:56:eb:dd:
                    81:1e:63:8c:07:01:d4:b2:b5:74:0c:44:9b:8f:ba:
                    28:e4:9f:ad:5c:7c:4d:b6:49:49:51:16:97:45:f7:
                    f8:da:b5:fe:bd:cc:8f:27:c7:0c:ee:6b:b7:52:f7:
                    30:b7:40:74:3a:cf:b1:ae:fd:ad:e4:07:1d:4c:e6:
                    ff:54:3b:ee:20:49:87:15:db:2a:60:57:09:f6:a6:
                    78:61:8b:2a:3a:7f:8d:3d:29:49:89:29:66:77:30:
                    f5:a8:84:0d:38:4b:ee:53:0a:ef:72:f5:e4:53:04:
                    d1:c9:1d:56:d5:39:9b:fb:c2:13:d7:fb:82:f2:ea:
                    27:2d:ab:b9:71:2d:6c:df:c3:95:40:c6:22:6d:f2:
                    22:ac:9f:76:45:44:3b:34:07:3e:29:85:c5:f9:a5:
                    d9:66:47:e3:d6:ea:66:5c:c5:05:3f:b1:86:12:10:
                    2c:b0:27:b6:ec:93:d4:31:80:7d:7e:03:8b:94:9a:
                    81:cd:ea:1c:be:79:24:f9:cc:15:df:f0:0b:73:ab:
                    42:e2:b6:65:34:33:ed:fa:12:0d:c2:54:20:71:88:
                    4a:84:8a:bc:7d:10:84:12:ce:fb:ad:a0:a4:2d:0d:
                    51:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:3B:13:0E:78:E7:A7:F9:DE:79:8B:B7:A1:B8:8F:E3:DF:42:F0:DE
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/0DsTDnjnp_neeYu3obiP499C8N4.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:7800::/38

    Signature Algorithm: sha256WithRSAEncryption
         80:1c:8c:0d:78:9e:6e:b1:34:05:4f:d3:46:1b:68:5c:0a:1a:
         6b:3a:8a:1c:af:cb:1f:23:7b:c1:30:dc:d2:83:ae:76:df:08:
         f2:42:d7:87:98:0a:5c:a8:93:d5:1d:bb:84:b4:8d:37:42:11:
         a2:0a:ff:c0:c4:cd:8c:28:de:8c:24:27:09:be:f2:d2:25:63:
         9a:65:55:f6:a6:20:df:34:70:7b:c6:74:39:39:b2:ea:09:eb:
         83:fb:28:ff:93:df:c4:d1:ac:85:78:29:29:6b:8f:64:0b:9e:
         77:3b:3f:11:c4:5a:c3:3d:e1:96:75:aa:56:4f:3b:3a:92:fe:
         bc:bf:46:fe:d6:7d:72:75:4b:d1:91:f7:d0:05:75:e2:2c:20:
         07:6e:75:d8:51:d1:a2:47:47:0e:ed:1e:20:de:c7:8f:22:83:
         b7:06:a0:dd:fd:37:65:e0:a3:4e:cc:4a:d1:a0:68:69:dd:6a:
         e1:91:08:dd:59:e6:cb:7b:6c:1a:19:c3:fc:12:ba:c6:44:85:
         ac:92:f2:0d:c7:3f:89:9b:66:af:a3:db:2f:99:b5:02:2c:0c:
         e5:86:1e:e4:53:18:a4:6f:85:ed:0b:be:e8:fc:7d:65:96:1a:
         f7:9c:ea:5a:80:c6:12:13:cf:66:f5:84:15:2a:90:7f:36:0b:
         16:9e:22:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:16 2026 by rpki-client