Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/8EZwJ8JJZNVFEpgk3_D7_y0TvgE.roa
File:                     8EZwJ8JJZNVFEpgk3_D7_y0TvgE.roa (raw, json)
Hash identifier:          Pvpw05K1TV9+an9h2+T5y4QkN+9xoqmLPSwebZdWRIw=
Subject key identifier:   F0:46:70:27:C2:49:64:D5:45:12:98:24:DF:F0:FB:FF:2D:13:BE:01
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0694
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/8EZwJ8JJZNVFEpgk3_D7_y0TvgE.roa
Signing time:             Tue 31 Mar 2026 08:26:09 +0000
ROA not before:           Tue 31 Mar 2026 08:26:09 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:3d00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1684 (0x694)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:26:09 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F0467027C24964D545129824DFF0FBFF2D13BE01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:51:88:a0:51:76:69:a9:84:00:21:4f:53:34:
                    6d:8f:3a:37:ca:41:81:25:53:e0:eb:09:37:7f:06:
                    79:13:91:ac:6c:e7:17:37:9f:7f:11:36:de:75:bb:
                    34:56:ea:9f:35:b8:c1:63:2a:9f:d5:0c:52:3f:f5:
                    94:13:26:d4:41:25:d8:00:9d:f1:c9:a9:15:7b:05:
                    41:35:22:30:2a:4a:b5:42:4d:17:28:f5:c5:81:e7:
                    50:05:ba:b9:7a:fd:41:70:2f:a8:03:b4:cc:96:28:
                    57:42:07:27:76:4d:82:33:45:f7:68:0a:64:10:b3:
                    c5:50:4e:73:0d:4c:42:c7:a7:ae:d1:10:dd:5e:ea:
                    54:55:f4:72:3f:20:2a:e1:21:58:ee:5a:20:22:16:
                    84:60:5b:87:1a:c7:84:cc:39:5d:38:41:da:7d:a4:
                    e3:6b:19:e2:0a:4a:c6:1f:03:58:31:d2:1f:b1:78:
                    cf:0f:2e:42:c9:38:be:eb:87:55:c5:e0:12:37:9d:
                    8a:5f:2b:c1:77:6a:1a:6b:0a:24:16:30:5c:64:b6:
                    bc:a8:9c:63:b5:3b:44:b3:08:e2:e6:2d:e7:29:7d:
                    32:a3:eb:dc:0f:29:cb:55:dd:8a:68:39:0b:63:45:
                    44:cd:4a:95:ba:0e:5c:c8:83:c6:6f:ea:f4:45:b1:
                    56:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:46:70:27:C2:49:64:D5:45:12:98:24:DF:F0:FB:FF:2D:13:BE:01
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/8EZwJ8JJZNVFEpgk3_D7_y0TvgE.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:3d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         7c:fb:a9:29:30:e6:43:b1:9e:e7:b9:78:45:bd:1e:6e:dd:0e:
         28:61:6f:dd:f1:31:b0:15:dc:a2:a3:f3:95:91:78:6c:7e:d9:
         82:5d:56:0a:6d:7c:ba:7e:25:fc:1d:92:b6:a6:be:45:de:99:
         e4:ab:85:62:2c:8b:5c:12:71:b5:31:d5:b0:17:a5:04:09:49:
         fd:c4:6d:41:da:5a:41:9c:3e:2b:b3:ac:e5:4e:64:ee:b1:ab:
         f5:2f:f9:47:68:8c:c0:13:29:4a:f7:41:68:ae:b3:ba:a1:75:
         0f:33:af:78:88:3e:54:3b:4b:21:bc:14:9a:1f:87:17:4c:8f:
         20:15:60:b5:8d:56:d3:f1:a4:27:8e:dc:ff:67:76:cc:53:9e:
         e6:e9:97:81:9d:15:a8:03:35:9e:fc:9a:1b:75:7e:75:d6:9d:
         21:46:51:1a:43:84:bd:0a:90:38:24:05:31:a6:2c:20:90:61:
         df:8c:e9:8f:b6:63:65:ec:c7:ec:94:ae:0e:13:d8:87:8b:91:
         57:b6:01:b2:97:4b:7f:01:e2:b0:0f:c7:b3:4a:9c:00:ab:cc:
         53:29:62:f6:a8:8b:e9:ff:b8:d1:c4:65:dd:17:b2:b4:4b:7f:
         79:5c:09:78:28:bc:f6:d7:ef:09:6e:2d:02:b0:13:4e:c2:98:
         a8:3d:ce:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 21:01:41 2026 by rpki-client