Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/3kpyqXjQuqtWY2vO5-WMMHej214.roa
File:                     3kpyqXjQuqtWY2vO5-WMMHej214.roa (raw, json)
Hash identifier:          YEBNl0KkSmGjHLGmRw/cM4HXHgu3HiC8vHgh5CCrTbI=
Subject key identifier:   DE:4A:72:A9:78:D0:BA:AB:56:63:6B:CE:E7:E5:8C:30:77:A3:DB:5E
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       06C5
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/3kpyqXjQuqtWY2vO5-WMMHej214.roa
Signing time:             Tue 31 Mar 2026 08:26:31 +0000
ROA not before:           Tue 31 Mar 2026 08:26:31 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:1700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1733 (0x6c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:26:31 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=DE4A72A978D0BAAB56636BCEE7E58C3077A3DB5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ba:40:5e:4c:6c:10:d0:5b:b8:2e:d6:32:4a:
                    71:aa:95:84:43:c8:b1:1f:75:d5:dd:a7:b3:9d:06:
                    7b:ea:7c:15:b3:4d:95:32:10:5b:71:da:a4:37:67:
                    1c:ee:87:d0:b2:6c:13:8f:a6:d8:39:3a:18:ea:1f:
                    ea:92:46:f1:15:46:d7:65:65:3f:b1:bb:8f:d2:36:
                    48:bc:95:d6:f4:12:d2:2a:4b:f5:87:22:b1:02:38:
                    49:c6:2d:2c:c9:3c:ad:94:58:29:b8:b7:72:0b:8f:
                    cb:65:2d:a1:63:81:7f:ff:a4:6a:e5:2e:39:c4:24:
                    d6:a1:13:a5:aa:23:1b:1a:2b:3c:ff:69:ca:f4:74:
                    f4:c6:51:75:fa:02:b0:20:fa:31:bc:8c:61:48:bc:
                    6b:b5:e1:62:f1:59:c8:99:18:50:40:05:f1:37:ff:
                    6e:8a:ae:e4:e4:c2:a4:d7:c5:1e:99:8c:6d:fb:b8:
                    b4:05:e4:e6:c5:b7:97:ad:95:f4:11:9e:1c:5e:19:
                    f4:ca:1b:50:db:b9:66:ed:2a:2b:46:fa:6a:a6:33:
                    b6:29:12:98:70:c9:32:5b:30:f4:a4:11:86:8a:98:
                    af:81:5b:77:0a:11:d3:b8:be:e5:ff:c9:17:cd:60:
                    b1:5a:03:20:ea:ae:0d:9a:78:26:72:ac:ff:22:d2:
                    69:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:4A:72:A9:78:D0:BA:AB:56:63:6B:CE:E7:E5:8C:30:77:A3:DB:5E
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/3kpyqXjQuqtWY2vO5-WMMHej214.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:1700::/40

    Signature Algorithm: sha256WithRSAEncryption
         7b:49:e1:bc:db:68:40:2d:cf:23:23:b0:66:d9:b9:da:f6:58:
         3a:ce:d8:b6:e1:b8:bf:c1:76:d8:7b:56:04:d7:2c:8e:e8:54:
         f5:77:0a:11:0c:5b:2c:da:60:d9:f4:3d:02:a8:b7:d2:c7:2f:
         f1:2e:f6:bd:00:10:d7:7e:67:39:65:78:05:a1:bd:ce:b2:5c:
         cb:be:95:52:7d:f8:30:8a:a7:aa:03:d1:3c:76:21:37:6b:01:
         10:2a:bb:dd:a1:f8:16:bd:12:36:1e:a6:96:aa:92:d2:19:09:
         5c:fd:1d:2e:ec:c0:e9:f9:ce:03:e5:ca:b8:1c:39:0e:10:22:
         b0:26:ea:12:31:08:20:a6:e5:e6:c4:2b:49:a5:95:7e:c5:ec:
         db:96:db:06:fe:ba:86:2a:22:94:5b:3e:ab:8b:7d:42:81:e1:
         a9:5e:49:09:2d:d7:8b:28:c7:c3:bb:a2:9f:13:42:ee:a3:b8:
         25:80:dd:de:03:51:6a:5c:fd:37:93:da:ad:60:16:74:62:5a:
         3f:99:43:19:bb:b0:eb:28:b0:47:ae:f1:4c:53:cb:42:7e:ea:
         a1:5b:9e:06:47:7d:a4:be:68:17:d0:19:d1:00:85:b3:b6:0b:
         fd:48:7b:3f:28:4f:78:7e:b8:ec:ef:be:8b:60:9f:01:22:59:
         36:12:49:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:34 2026 by rpki-client