Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/3LTUqAMoFErFkLDnI2Z40MkDEvs.roa
File:                     3LTUqAMoFErFkLDnI2Z40MkDEvs.roa (raw, json)
Hash identifier:          IAO86Lcy76eqGAqeXWraoLBIa+v9/63zroGLYKsvP+Y=
Subject key identifier:   DC:B4:D4:A8:03:28:14:4A:C5:90:B0:E7:23:66:78:D0:C9:03:12:FB
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       075F
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/3LTUqAMoFErFkLDnI2Z40MkDEvs.roa
Signing time:             Tue 31 Mar 2026 08:27:45 +0000
ROA not before:           Tue 31 Mar 2026 08:27:45 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:2600::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1887 (0x75f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:27:45 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=DCB4D4A80328144AC590B0E7236678D0C90312FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:85:6b:cb:63:ba:b7:c9:bc:c7:eb:66:e2:65:
                    e3:ce:0f:4f:e2:ff:d0:c4:97:cd:71:f2:69:c6:55:
                    69:7e:63:aa:5a:c0:a5:b3:cb:85:50:c7:01:93:79:
                    75:50:26:90:ae:d7:5e:ba:55:da:46:4f:f6:33:23:
                    57:88:42:c4:8f:52:d5:56:69:e9:8f:4d:25:85:47:
                    e1:4f:8b:52:6c:68:3a:ff:6a:c7:fd:1a:1c:bd:fb:
                    b4:8f:0d:3b:e5:bf:45:9f:10:c7:3d:73:92:ae:53:
                    99:15:8e:86:6e:ba:93:a6:21:3f:c4:27:81:bb:df:
                    29:2d:8a:93:60:14:69:31:af:80:84:43:80:27:73:
                    ad:27:26:7b:92:8c:78:08:4b:f2:f7:05:3d:08:69:
                    04:0e:44:c6:42:1b:66:d8:04:6b:bd:d6:6d:25:9d:
                    f1:17:79:10:7d:da:32:aa:af:dc:78:f4:97:e9:b8:
                    53:4d:f1:fb:a3:a8:cc:d9:6e:1a:31:e7:ee:14:43:
                    52:72:93:8a:0c:61:97:8c:9f:15:73:63:5e:2b:5b:
                    4a:e5:af:39:81:b6:2e:cb:f3:f0:e1:78:b3:09:e5:
                    1e:10:59:ce:8c:f8:74:1a:80:c7:b9:61:46:4c:9e:
                    93:ac:61:b7:43:7a:45:56:78:a2:7b:8d:f8:09:37:
                    31:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B4:D4:A8:03:28:14:4A:C5:90:B0:E7:23:66:78:D0:C9:03:12:FB
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/3LTUqAMoFErFkLDnI2Z40MkDEvs.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:2600::/40

    Signature Algorithm: sha256WithRSAEncryption
         03:80:3a:60:d5:a4:fe:16:f3:f6:03:e7:0b:04:02:04:fd:42:
         3b:4c:79:0a:45:95:b2:17:0e:b6:49:a2:64:86:49:b9:0f:ae:
         43:2c:af:ef:b1:d5:80:40:12:9a:d7:3c:c8:d4:48:db:52:4b:
         3c:d3:a2:f4:c7:74:a8:07:ad:7e:3c:e4:03:ae:34:7c:e8:a3:
         23:60:eb:2f:b2:fa:57:2f:2b:1e:cb:43:a0:28:fe:17:82:34:
         46:90:67:32:e2:d5:09:97:c4:74:3a:a8:7c:3f:de:36:48:52:
         a6:89:42:cb:56:b3:fa:5a:b7:ad:38:54:29:4d:dd:71:98:c3:
         9b:09:61:b4:7a:9c:24:04:a7:2b:3b:62:5b:50:a1:ca:63:76:
         c0:4d:2d:35:66:67:bf:09:2a:0b:f0:be:ca:7c:11:49:3b:1c:
         27:cd:4a:6c:8a:9d:28:10:e6:13:8a:06:15:ae:9e:64:fd:55:
         fe:93:32:ff:24:fc:bd:19:45:87:62:b9:8a:e7:b6:e4:1a:31:
         35:b9:cf:c7:1b:52:ee:b4:db:ee:15:5e:b4:47:e6:a2:7a:87:
         c2:a2:d1:5f:6b:03:aa:7b:e4:6b:9b:9a:4d:f8:a9:ff:d5:59:
         76:dd:6b:6f:a2:34:9c:ef:60:80:0e:70:ed:36:0c:4d:5e:af:
         b4:f6:35:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:51 2026 by rpki-client