Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/5ClyMiNRsleMAiQAeyYqn-Gyf58.roa
File:                     5ClyMiNRsleMAiQAeyYqn-Gyf58.roa (raw, json)
Hash identifier:          HcABadEps696Tg6aV0C1dJockXVyRhoXBUKM3zb1sH8=
Subject key identifier:   E4:29:72:32:23:51:B2:57:8C:02:24:00:7B:26:2A:9F:E1:B2:7F:9F
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       073F
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/5ClyMiNRsleMAiQAeyYqn-Gyf58.roa
Signing time:             Tue 31 Mar 2026 08:27:30 +0000
ROA not before:           Tue 31 Mar 2026 08:27:30 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:6800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1855 (0x73f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:27:30 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=E42972322351B2578C0224007B262A9FE1B27F9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:34:77:f4:7a:96:ed:b4:46:91:b0:ca:84:05:
                    a3:2f:ac:0c:9b:6a:c1:c1:ca:cf:b7:37:55:d7:24:
                    15:32:0f:97:4e:53:6b:fb:2c:17:7c:9f:96:14:5e:
                    c2:da:ce:d7:87:5c:40:de:41:43:ef:94:e9:25:4b:
                    dd:a3:27:90:88:79:5e:d3:4c:f8:48:92:9a:5c:43:
                    8b:21:c9:24:05:88:ff:c4:8a:d2:3c:f4:98:54:cb:
                    4c:f7:9b:33:f7:97:e3:3e:40:46:2a:6b:b2:a9:31:
                    25:da:a1:25:ea:08:1f:94:8b:ee:d3:2c:63:f3:03:
                    71:1e:e1:bc:a6:ba:21:da:5d:1e:37:0c:ec:58:8e:
                    1c:51:5b:46:ba:91:2f:5f:df:c4:02:a3:7a:75:c1:
                    99:37:0b:f9:34:fc:72:a1:ae:5d:eb:6c:48:2b:cb:
                    f8:8b:f2:cf:23:a5:51:1b:1a:18:66:7f:36:fd:56:
                    11:6b:56:11:7a:7e:ae:de:b6:27:de:09:3c:97:92:
                    1f:e6:a7:e4:78:20:a5:12:83:2c:e4:30:f6:c3:1f:
                    2e:01:c5:c0:99:f7:dc:5c:40:4f:7d:b3:0c:a9:49:
                    87:ec:ac:8f:53:72:b6:46:9f:28:a1:8c:46:e3:d1:
                    0d:3e:35:3a:a5:9d:83:b8:81:82:6d:ef:a2:a7:90:
                    51:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:29:72:32:23:51:B2:57:8C:02:24:00:7B:26:2A:9F:E1:B2:7F:9F
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/5ClyMiNRsleMAiQAeyYqn-Gyf58.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:6800::/40

    Signature Algorithm: sha256WithRSAEncryption
         41:db:0b:f7:d7:2f:3a:aa:da:c0:65:97:f1:a6:ed:b6:cd:4f:
         74:89:ab:5e:a6:98:2e:07:58:b7:90:c1:93:45:6f:96:ff:19:
         18:74:00:09:f4:d6:d5:32:77:af:d4:1a:e1:0d:f2:4b:de:3a:
         a2:ed:66:19:13:ad:ad:89:d6:46:c1:e4:be:3a:87:b2:62:3f:
         af:e2:d6:78:4d:a8:41:09:c9:55:54:3b:70:b5:74:e0:e0:ee:
         2c:36:34:e2:6f:4f:2e:9a:03:fa:e1:f6:d7:c3:99:69:1b:20:
         d5:a8:36:49:d2:6d:34:af:a2:74:bd:c7:fd:3e:11:28:4a:9f:
         c7:a1:3a:97:48:75:b8:7d:c6:5a:64:83:e6:13:d4:98:b0:2c:
         3d:00:4b:f6:80:8b:9e:c4:61:84:2a:d1:b6:80:a6:6b:d9:4c:
         a9:40:df:11:5d:10:9d:8b:2a:62:cf:51:bf:c5:10:3f:2d:47:
         b3:8d:47:e6:71:52:0e:df:bd:9c:57:05:e1:46:ff:95:9f:84:
         6a:fe:18:d8:52:d1:07:95:44:3a:9c:b2:a9:d7:ff:18:7c:8e:
         a4:9d:f1:04:fc:3c:00:7d:89:0e:07:63:54:89:a2:3f:7d:e2:
         4e:6f:43:09:3a:a4:e6:22:34:5d:db:bf:13:18:fb:95:02:9b:
         66:d6:e8:2d
-----BEGIN CERTIFICATE-----
MIIEwzCCA6ugAwIBAgICBz8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjAzMzEw
ODI3MzBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEU0Mjk3MjMyMjM1MUIy
NTc4QzAyMjQwMDdCMjYyQTlGRTFCMjdGOUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC0NHf0epbttEaRsMqEBaMvrAybasHBys+3N1XXJBUyD5dOU2v7
LBd8n5YUXsLazteHXEDeQUPvlOklS92jJ5CIeV7TTPhIkppcQ4shySQFiP/EitI8
9JhUy0z3mzP3l+M+QEYqa7KpMSXaoSXqCB+Ui+7TLGPzA3Ee4bymuiHaXR43DOxY
jhxRW0a6kS9f38QCo3p1wZk3C/k0/HKhrl3rbEgry/iL8s8jpVEbGhhmfzb9VhFr
VhF6fq7etifeCTyXkh/mp+R4IKUSgyzkMPbDHy4BxcCZ99xcQE99swypSYfsrI9T
crZGnyihjEbj0Q0+NTqlnYO4gYJt76KnkFHrAgMBAAGjggHfMIIB2zAdBgNVHQ4E
FgQU5ClyMiNRsleMAiQAeyYqn+Gyf58wHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDEyOS81Q2x5TWlOUnNsZU1BaVFBZXlZcW4tR3lmNTgucm9h
MCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJAoAa2gwDQYJKoZIhvcNAQEL
BQADggEBAEHbC/fXLzqq2sBll/Gm7bbNT3SJq16mmC4HWLeQwZNFb5b/GRh0AAn0
1tUyd6/UGuEN8kveOqLtZhkTra2J1kbB5L46h7JiP6/i1nhNqEEJyVVUO3C1dODg
7iw2NOJvTy6aA/rh9tfDmWkbINWoNknSbTSvonS9x/0+EShKn8ehOpdIdbh9xlpk
g+YT1JiwLD0AS/aAi57EYYQq0baApmvZTKlA3xFdEJ2LKmLPUb/FED8tR7ONR+Zx
Ug7fvZxXBeFG/5WfhGr+GNhS0QeVRDqcsqnX/xh8jqSd8QT8PAB9iQ4HY1SJoj99
4k5vQwk6pOYiNF3bvxMY+5UCm2bW6C0=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:33 2026 by rpki-client