Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/3WH66y55_4MYTNWJyFRDDVcu7qI.roa
File:                     3WH66y55_4MYTNWJyFRDDVcu7qI.roa (raw, json)
Hash identifier:          tfHQOnTeEgv7sU2UtenTfFyfou8mLOhTk7NLJnt4psA=
Subject key identifier:   DD:61:FA:EB:2E:79:FF:83:18:4C:D5:89:C8:54:43:0D:57:2E:EE:A2
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0690
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/3WH66y55_4MYTNWJyFRDDVcu7qI.roa
Signing time:             Tue 31 Mar 2026 08:26:08 +0000
ROA not before:           Tue 31 Mar 2026 08:26:08 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:a400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1680 (0x690)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:26:08 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=DD61FAEB2E79FF83184CD589C854430D572EEEA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3d:8e:c1:af:f1:f6:7d:5f:a5:56:c1:61:af:
                    82:3c:7e:ef:24:0e:01:37:d2:f8:b7:a5:0a:2f:1e:
                    9e:f8:55:7b:b9:30:9c:99:fe:9f:52:53:10:b1:73:
                    9e:ce:22:7f:e5:f7:05:03:0a:a2:af:a3:7e:62:3a:
                    20:ed:88:8d:2f:e9:6a:dd:f0:90:0f:b2:7a:91:ed:
                    d9:14:bf:07:51:ab:a7:34:61:b3:e9:84:35:3d:66:
                    e0:0e:99:47:67:3a:ef:bb:ed:0b:20:f9:af:4f:b1:
                    53:5a:43:01:97:99:cd:95:4e:dd:8a:8d:85:20:76:
                    2e:a3:5c:aa:91:a2:2a:8e:13:a2:bc:33:7c:63:8f:
                    86:15:38:5a:b3:18:61:ac:5f:c4:d4:b2:5f:84:fa:
                    07:42:d9:f3:13:f3:63:58:aa:d2:ab:ba:0b:df:1f:
                    0e:eb:35:ba:43:a8:95:2b:88:bc:47:e2:47:14:0e:
                    25:cc:7c:4f:9b:a2:5c:c8:49:cb:6f:b4:5b:6a:39:
                    50:2d:7c:c9:37:2f:5d:41:06:84:08:c4:9b:37:42:
                    aa:30:5a:dd:af:42:15:20:94:27:e9:74:4b:f0:87:
                    dc:8e:3c:40:e3:cf:dc:88:df:6c:67:7c:96:06:8d:
                    53:c5:14:b9:4a:d1:04:02:05:21:04:92:58:6c:0c:
                    47:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:61:FA:EB:2E:79:FF:83:18:4C:D5:89:C8:54:43:0D:57:2E:EE:A2
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/3WH66y55_4MYTNWJyFRDDVcu7qI.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:a400::/40

    Signature Algorithm: sha256WithRSAEncryption
         14:f0:27:d5:aa:71:15:39:7e:49:b7:5c:0f:79:da:ac:fc:46:
         5d:5a:68:df:a1:13:63:1f:d1:06:55:a4:b5:0f:85:df:6b:f7:
         cc:df:86:60:af:f7:d2:d9:47:32:0c:a4:28:49:d9:2f:5e:5a:
         8e:88:df:0c:bf:92:b9:4a:2c:0a:cb:61:2a:b4:16:15:0d:73:
         c5:f0:45:b9:7d:68:7a:2a:3c:ec:d6:6d:26:3e:cd:a7:52:fe:
         57:3e:f1:20:c5:60:c0:54:6a:67:cf:e7:7f:7e:9d:68:71:7b:
         0e:80:42:88:cb:c9:26:37:d9:15:0b:d4:aa:b9:d6:f2:d0:3c:
         4d:ba:c3:5e:3a:c9:fb:51:56:5c:55:b4:b2:12:0e:92:f3:88:
         1a:67:a3:7c:49:f8:a8:41:99:dc:27:4d:9a:61:90:29:64:bd:
         95:e4:71:8e:d4:8a:23:69:22:e3:87:de:f0:c1:5c:10:07:4f:
         bb:aa:39:a3:0b:3a:52:ad:b6:4a:9c:c9:17:57:0a:6b:f9:de:
         42:df:88:71:b6:3f:9f:ba:d3:dd:b1:a3:b0:20:46:d6:10:81:
         f3:72:0a:92:08:c2:8c:ae:3c:db:e1:2e:cc:94:ef:69:e7:e7:
         f7:92:de:10:d1:a1:ac:72:07:a6:f2:a0:25:7f:a6:6e:86:d8:
         c9:93:34:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:01 2026 by rpki-client