Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/73MZjjEw4B2DLCyChqLG02hO4mg.roa
File:                     73MZjjEw4B2DLCyChqLG02hO4mg.roa (raw, json)
Hash identifier:          WoeH1YGuaAnjZ+EsX29U1I+TGa0FpK+7wH6xjJA6zy4=
Subject key identifier:   EF:73:19:8E:31:30:E0:1D:83:2C:2C:82:86:A2:C6:D3:68:4E:E2:68
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0711
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/73MZjjEw4B2DLCyChqLG02hO4mg.roa
Signing time:             Tue 31 Mar 2026 08:27:09 +0000
ROA not before:           Tue 31 Mar 2026 08:27:09 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1809 (0x711)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:27:09 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=EF73198E3130E01D832C2C8286A2C6D3684EE268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9d:57:80:20:6d:49:98:7d:de:ed:4b:34:c9:
                    91:dd:f9:95:39:d7:bf:78:2f:61:e4:d7:24:39:67:
                    20:c9:60:bd:ec:e2:cf:6d:09:70:d9:f3:f9:b8:a7:
                    10:8f:05:02:f2:08:8d:30:5e:54:86:f0:01:31:b0:
                    e9:a5:31:de:7a:98:60:28:b3:04:17:57:7c:8c:55:
                    60:6a:58:05:3d:7e:f5:06:ee:99:4f:9d:c5:fd:2c:
                    a7:5f:11:a0:f0:c0:f4:d7:00:35:14:82:e8:55:72:
                    58:38:1f:f4:e1:2a:e6:91:46:48:72:c5:2b:5e:06:
                    6e:7f:c8:58:f1:44:c6:92:5b:66:e2:1b:7f:c6:1f:
                    c4:73:17:be:0a:8b:66:3c:77:b3:be:ae:e3:3c:57:
                    ce:fc:0b:1b:5f:2a:e2:65:c9:7b:32:34:ff:5c:8f:
                    44:9d:02:4b:a9:a3:f4:54:6e:eb:49:e2:43:6f:bf:
                    29:53:2b:aa:af:5d:cf:d5:c0:a8:12:1c:a0:5c:d5:
                    d0:a9:9e:05:12:08:2f:93:7a:ed:da:cf:55:21:4b:
                    5a:57:04:b2:a1:ba:f5:55:b7:c2:e5:5f:39:47:b4:
                    bb:a1:96:a0:9e:d7:47:e5:5b:c2:53:43:e9:9d:bb:
                    9f:73:2b:9c:dc:4c:5e:bb:31:60:6d:0e:39:6e:97:
                    ee:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:73:19:8E:31:30:E0:1D:83:2C:2C:82:86:A2:C6:D3:68:4E:E2:68
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/73MZjjEw4B2DLCyChqLG02hO4mg.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:900::/40

    Signature Algorithm: sha256WithRSAEncryption
         40:58:da:d0:28:65:88:f1:dc:76:61:aa:65:78:19:ec:2f:2b:
         7f:2c:4a:b6:2b:35:8d:58:e5:9f:ba:4b:e5:f1:b5:e9:92:b0:
         ad:0e:af:64:fe:a0:1f:37:b9:e8:ba:13:35:5b:19:6a:85:84:
         de:41:e5:dc:a4:6f:39:8e:a1:03:74:5f:b3:e4:e7:1f:a7:18:
         9f:a7:5c:92:2d:ec:57:9a:98:9f:00:a2:d8:df:6d:b7:2a:97:
         72:53:7f:95:63:a5:47:d2:03:f1:73:0e:31:48:53:cf:01:e5:
         c2:25:05:b4:27:91:63:f0:65:18:82:59:ef:fe:a7:36:fa:26:
         23:37:91:51:81:03:fb:7f:8d:06:01:2a:3e:22:7c:05:7b:28:
         41:58:79:63:5b:2d:fa:57:de:9f:e0:a2:c6:38:15:4a:d9:9d:
         3d:59:88:79:a5:48:9a:fe:59:07:46:06:84:5d:4e:92:f3:9d:
         20:fa:e4:bb:06:f8:ae:07:81:22:57:32:ee:62:ce:ac:84:60:
         8d:eb:65:61:a7:6d:4c:51:f6:f1:7d:f9:23:00:27:3a:52:59:
         f5:bf:53:c8:0f:8d:24:20:c8:75:1a:4f:5b:a2:9e:34:36:fe:
         5c:ff:07:7d:e9:b5:6f:5c:94:ec:7d:89:d0:c6:b8:79:cb:ee:
         0f:8b:40:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:12 2026 by rpki-client