Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/6QGRyU9muYEQDamI_Q1CYJP-Dnw.roa
File:                     6QGRyU9muYEQDamI_Q1CYJP-Dnw.roa (raw, json)
Hash identifier:          lQkEnKbODhPQ7Yixu9EudU4ZdTy9IA4lQ3qM8wqmaHY=
Subject key identifier:   E9:01:91:C9:4F:66:B9:81:10:0D:A9:88:FD:0D:42:60:93:FE:0E:7C
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       06FC
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/6QGRyU9muYEQDamI_Q1CYJP-Dnw.roa
Signing time:             Tue 31 Mar 2026 08:26:55 +0000
ROA not before:           Tue 31 Mar 2026 08:26:55 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:2:c90::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1788 (0x6fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:26:55 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=E90191C94F66B981100DA988FD0D426093FE0E7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:24:81:1a:2d:97:cd:84:e2:08:4f:72:f2:7f:
                    d7:dc:90:e3:f2:f4:e7:1c:eb:68:b4:e5:11:b2:5c:
                    c8:e9:ae:69:3e:8e:a7:40:ed:e1:c7:38:4e:a1:dc:
                    82:45:ef:dd:c7:9e:7c:2a:6f:48:b8:8b:70:24:03:
                    68:1a:49:60:bc:bf:e1:55:d4:d3:92:ba:5f:91:8c:
                    86:5f:f2:e3:26:39:7a:64:fc:ea:7f:52:7a:ed:04:
                    48:35:f7:df:fd:d1:b5:03:3a:b7:90:ab:40:90:cd:
                    a0:23:e0:87:15:8a:1e:f9:e1:6c:da:94:06:64:71:
                    db:1a:61:0e:1f:ff:41:2d:da:72:ef:f1:73:d8:5a:
                    4c:a3:ff:5f:cf:45:a1:d2:37:3f:8b:08:f7:6c:50:
                    59:65:25:de:33:68:02:df:d7:69:05:11:ea:dc:8a:
                    ba:20:e9:a7:ed:42:53:4b:85:cf:cf:64:91:31:13:
                    41:9e:24:5b:83:51:6f:b0:d6:32:a9:99:c5:20:1a:
                    15:a1:f4:bc:0c:91:e7:fd:a5:01:ad:c9:bc:c9:32:
                    ee:c0:8f:c6:a2:ad:8a:01:c0:82:7c:f5:ec:33:80:
                    03:9f:57:52:50:0d:cf:70:61:ef:a8:57:5a:88:bb:
                    8d:54:3d:1b:ac:f3:ee:00:8c:a7:81:42:66:6e:02:
                    d0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:01:91:C9:4F:66:B9:81:10:0D:A9:88:FD:0D:42:60:93:FE:0E:7C
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/6QGRyU9muYEQDamI_Q1CYJP-Dnw.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:2:c90::/44

    Signature Algorithm: sha256WithRSAEncryption
         2e:bf:52:33:fe:89:0e:03:49:16:b2:63:72:bb:92:cc:4f:a4:
         72:a3:2a:9d:57:09:16:24:31:5e:ac:c5:0b:ef:d5:b7:80:10:
         13:e1:36:0c:33:2c:24:a7:8b:6f:b5:a8:73:b3:cc:71:24:c9:
         4a:a8:ad:33:84:17:81:e7:4a:ea:92:47:9e:49:93:ec:1b:2f:
         db:b2:a0:20:22:e9:af:17:56:a6:80:5f:b3:31:0d:d3:01:e4:
         cf:2d:bc:ba:95:49:d8:6a:57:77:79:fc:18:46:0e:88:89:c9:
         f8:37:c6:6d:dc:58:2e:f4:cf:f3:06:eb:e7:b2:47:c5:fa:fa:
         34:7d:63:d2:c3:1a:2b:a4:35:b8:f7:b5:c2:81:a2:28:4c:37:
         62:90:42:1b:c9:8a:57:24:77:3c:ba:a7:78:c1:12:54:08:be:
         5f:22:dd:28:dd:86:32:0f:fa:bd:58:6f:17:a0:aa:03:fc:aa:
         6f:10:ac:b1:c0:cb:6b:5b:21:b5:ff:33:99:40:a0:65:f1:63:
         5d:2a:01:0f:bf:7d:c6:a5:1f:4c:af:92:eb:ed:3d:d9:86:ca:
         34:ab:05:9b:7a:46:84:07:00:0b:cc:6d:dd:ac:d5:4b:19:e4:
         8e:c9:3e:eb:00:49:a1:70:c8:b3:90:7c:7a:67:59:32:94:c5:
         d2:20:81:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:34 2026 by rpki-client