Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/4rS5aMQCfxgygvlnPwA2wnKRyYo.roa
File:                     4rS5aMQCfxgygvlnPwA2wnKRyYo.roa (raw, json)
Hash identifier:          qcSIsBlidZZQAhtu1fE4obBjqnR8f0V2D8OVLrSVrSA=
Subject key identifier:   E2:B4:B9:68:C4:02:7F:18:32:82:F9:67:3F:00:36:C2:72:91:C9:8A
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0683
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/4rS5aMQCfxgygvlnPwA2wnKRyYo.roa
Signing time:             Tue 31 Mar 2026 08:25:59 +0000
ROA not before:           Tue 31 Mar 2026 08:25:59 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:7600::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1667 (0x683)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:25:59 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=E2B4B968C4027F183282F9673F0036C27291C98A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:09:f6:d5:8d:b9:e2:1a:09:12:3c:1b:a4:a3:
                    86:e0:db:00:ad:d6:25:a5:55:2a:c1:71:c9:cb:2a:
                    e4:5a:37:5a:7d:c7:b8:d1:b5:2b:af:af:f5:26:aa:
                    da:33:49:9b:ed:2e:62:0b:cc:0e:c4:a1:ad:54:95:
                    ac:8d:ca:32:2b:cb:ac:45:90:9e:42:5d:1d:a6:a8:
                    b2:0c:56:93:20:f8:35:ac:b5:6b:cd:55:2d:08:ef:
                    a4:c9:7e:0c:b4:67:3e:93:a1:49:d6:ee:00:e2:02:
                    7c:bd:56:de:a5:f3:0d:c3:69:fa:e5:5f:44:28:dc:
                    67:f5:26:84:77:60:2e:4d:4d:74:ca:52:62:ae:06:
                    99:f3:ba:5e:b7:a4:89:70:0c:4a:14:9c:2e:bc:2a:
                    17:f5:65:e7:21:c3:a5:8d:fc:af:a9:48:2e:30:14:
                    87:c7:41:bd:4b:de:a9:fd:00:1d:b5:98:91:93:a5:
                    cd:c4:d2:d8:67:af:c9:07:d6:2c:06:07:8c:4a:25:
                    0f:f8:92:38:b4:fd:45:aa:4b:f9:dd:54:ad:8b:bc:
                    a9:a8:34:90:73:0b:07:43:d1:5f:04:44:77:e3:6d:
                    0e:59:33:69:98:e9:25:bc:b0:f7:a2:61:6a:aa:c3:
                    8d:af:ef:2d:09:e5:b8:4c:24:39:76:95:34:c6:15:
                    85:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:B4:B9:68:C4:02:7F:18:32:82:F9:67:3F:00:36:C2:72:91:C9:8A
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/4rS5aMQCfxgygvlnPwA2wnKRyYo.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:7600::/40

    Signature Algorithm: sha256WithRSAEncryption
         35:d3:e1:1d:1f:c4:37:32:13:01:41:72:23:32:41:b0:ca:3f:
         d4:58:5a:41:a4:1b:55:62:3e:6b:9f:fa:cb:25:ba:ab:ee:00:
         81:90:b0:6f:5c:06:95:51:cd:72:bb:09:8b:4e:4c:35:6e:5a:
         11:7e:d3:d2:4b:3d:2a:ed:b2:3c:99:da:aa:1d:7a:05:fc:4c:
         4b:a0:8e:48:de:35:2c:34:db:8a:3e:cc:d2:41:55:5a:ca:6e:
         de:67:2f:cf:6d:dc:ac:58:18:79:39:37:e8:26:45:7c:cb:01:
         5e:c9:c4:47:2a:13:eb:51:55:b2:41:d1:24:b4:1a:7b:fe:3d:
         8a:dd:50:b0:51:cb:fa:cf:c3:05:9d:3f:12:c5:47:b9:48:95:
         08:8d:f6:02:15:38:8f:2f:da:6e:f5:af:4b:9b:1e:a1:6c:9a:
         26:89:52:75:cc:71:d5:83:a3:3b:95:ed:e6:01:6d:21:84:2e:
         0a:7a:14:f7:09:07:4d:f0:dc:ad:89:02:ad:94:2d:f5:35:9c:
         4b:7a:ff:df:96:62:18:8b:c1:34:0c:f4:21:dd:d9:30:cc:59:
         1b:7a:f6:f6:42:b3:92:af:3d:b9:98:dc:83:ee:ec:60:08:26:
         c0:62:50:27:c3:73:d3:29:cc:a0:e5:c3:80:41:b1:50:fd:a7:
         59:6e:a2:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:56 2026 by rpki-client