Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/4l84LKunmwvs5cAx5VwscNUhRBk.roa
File:                     4l84LKunmwvs5cAx5VwscNUhRBk.roa (raw, json)
Hash identifier:          R5Sw24vR3gn7cqeNUdkGb7o/OyyhSuvSXbcbA5kFH2Q=
Subject key identifier:   E2:5F:38:2C:AB:A7:9B:0B:EC:E5:C0:31:E5:5C:2C:70:D5:21:44:19
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0725
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/4l84LKunmwvs5cAx5VwscNUhRBk.roa
Signing time:             Tue 31 Mar 2026 08:27:16 +0000
ROA not before:           Tue 31 Mar 2026 08:27:16 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:ce00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1829 (0x725)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:27:16 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=E25F382CABA79B0BECE5C031E55C2C70D5214419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c5:ba:a7:26:8a:9b:10:fb:d1:4a:83:0f:e3:
                    45:85:4d:4c:fc:07:19:24:ca:a9:26:b0:54:63:ae:
                    8c:a7:43:19:d1:85:db:92:c2:90:30:77:c9:cf:b0:
                    52:28:c9:3c:0f:34:b7:ce:03:3f:92:9c:f5:0d:97:
                    3a:48:7d:14:44:26:88:34:16:da:01:4e:38:41:2e:
                    61:79:20:02:6c:dd:0f:1b:70:c0:e6:ac:7f:a5:b7:
                    81:d3:27:c3:61:f6:fc:75:81:c4:da:57:40:ba:aa:
                    ef:dd:5a:58:99:8a:d6:57:d5:ca:2d:0f:41:6c:c1:
                    4d:2b:0f:ee:84:bb:93:13:0f:0d:0b:89:33:8a:da:
                    cd:b6:49:63:63:60:6d:1a:ed:74:5b:a7:a2:f4:71:
                    84:e5:cd:3d:9b:b1:2b:89:e2:47:c1:d2:fc:94:e0:
                    2e:95:e6:04:02:9c:b0:09:09:64:da:ae:e8:d2:c8:
                    48:c1:ca:a1:3b:11:43:38:79:b7:91:d6:c2:60:61:
                    50:4c:b4:ed:29:f8:e3:33:4a:d9:f7:82:fb:62:ad:
                    57:89:c1:56:92:31:a0:6e:2e:77:74:97:7c:97:99:
                    40:51:3f:91:b5:29:ef:bd:2e:ff:ef:cb:d1:fa:e1:
                    03:52:46:73:5b:dd:9d:8f:d6:1a:50:9e:10:f7:36:
                    89:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:5F:38:2C:AB:A7:9B:0B:EC:E5:C0:31:E5:5C:2C:70:D5:21:44:19
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/4l84LKunmwvs5cAx5VwscNUhRBk.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:ce00::/40

    Signature Algorithm: sha256WithRSAEncryption
         35:54:83:af:31:89:c0:13:d1:22:00:93:d9:d4:54:25:f2:0d:
         be:19:b9:05:2d:0e:40:32:9f:28:8f:d2:83:f3:fc:2a:e6:6d:
         dc:4d:7f:7f:93:5e:d4:65:e0:cb:74:b8:f4:aa:f7:56:00:ee:
         b0:e8:fb:5d:00:b3:0d:df:f5:75:40:15:28:bd:08:a7:03:b3:
         1c:d6:bb:2d:28:ff:ea:21:f3:f5:cb:b9:fe:7a:66:00:a2:b6:
         66:d2:e8:ac:f3:c1:cb:bc:26:03:99:37:b5:94:33:10:11:e1:
         59:8a:55:67:79:a5:39:cb:89:b1:af:ff:41:99:57:d1:78:3a:
         bd:3b:32:21:12:e0:65:2d:e7:fe:d2:46:d8:84:d0:ec:d3:76:
         9e:34:49:4e:7e:c1:77:22:64:41:36:b7:63:94:52:4b:1b:db:
         ce:54:97:a9:e6:8e:ef:15:d6:8d:72:42:00:04:46:c1:e8:fb:
         b0:3f:83:af:85:50:27:b4:89:07:bc:6e:8a:52:49:9c:f8:80:
         84:43:93:f4:1d:c3:47:6b:98:14:f7:25:45:ed:bc:2b:cd:3b:
         c7:3d:d1:f1:57:7c:1c:c5:d3:dc:b2:c2:d2:e3:93:0f:ee:97:
         f9:57:3d:b2:43:45:be:79:51:43:0e:0a:23:57:29:fb:d9:26:
         23:1c:24:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:52 2026 by rpki-client