Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Bov4RZlUtmVhXlU3zDQnmX91eEc.roa
File:                     Bov4RZlUtmVhXlU3zDQnmX91eEc.roa (raw, json)
Hash identifier:          o0NqhH/hnLz71isDHc7bZ7FRu9jAhVrFHUUKXr5niC0=
Subject key identifier:   06:8B:F8:45:99:54:B6:65:61:5E:55:37:CC:34:27:99:7F:75:78:47
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0654
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Bov4RZlUtmVhXlU3zDQnmX91eEc.roa
Signing time:             Tue 31 Mar 2026 08:25:34 +0000
ROA not before:           Tue 31 Mar 2026 08:25:34 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:1900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1620 (0x654)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:25:34 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=068BF8459954B665615E5537CC3427997F757847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b9:a9:40:70:57:b8:52:65:ce:c2:1f:2b:3e:
                    26:e5:73:38:a5:b5:1d:10:b7:55:89:a8:52:48:a3:
                    43:e6:9c:10:21:39:36:d8:b5:8e:8f:c9:7a:98:d6:
                    70:65:ae:7b:0d:17:81:ef:3b:eb:91:7f:08:29:81:
                    c1:af:91:0e:ea:68:6b:f0:d4:9a:77:ba:a8:78:58:
                    e9:d1:ec:37:3c:35:5d:f8:5e:56:8c:ab:c5:d2:32:
                    2a:29:63:09:a9:6e:05:54:ac:f2:01:e6:df:13:4f:
                    54:f4:56:ff:c7:6a:49:d4:d2:3a:ae:cb:a4:7c:0f:
                    d4:08:8f:34:16:02:c4:e7:ee:d8:cb:62:c9:d8:f6:
                    29:ef:19:db:b2:43:99:a4:55:63:99:90:12:37:7e:
                    6f:75:00:ff:fb:15:16:ad:81:1a:8d:38:d5:ba:8c:
                    20:96:13:45:8f:27:b8:81:23:21:61:6c:6c:a3:42:
                    9a:a5:fe:87:ac:46:3e:ec:d6:f4:c1:a0:3f:a2:82:
                    71:8d:e5:8b:1b:93:b3:5e:97:28:d5:8b:c2:cf:21:
                    fe:ff:c1:1a:25:96:7d:9a:94:71:78:66:20:4d:ae:
                    0e:06:5e:52:72:55:c1:87:95:bf:ca:21:f5:2d:8c:
                    30:35:e6:90:9e:a8:ea:62:8b:c1:57:19:f5:08:74:
                    50:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:8B:F8:45:99:54:B6:65:61:5E:55:37:CC:34:27:99:7F:75:78:47
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Bov4RZlUtmVhXlU3zDQnmX91eEc.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:1900::/40

    Signature Algorithm: sha256WithRSAEncryption
         8e:30:c5:34:e4:02:bb:54:e4:3f:6e:60:43:79:32:24:87:f3:
         59:34:b9:54:a6:b6:7a:41:67:2c:27:3e:58:ac:f6:af:bf:b5:
         42:4a:43:f9:a3:d0:51:97:3e:e9:bd:36:d7:0b:d2:8b:fa:bb:
         f4:16:37:d0:8c:3d:74:be:9b:04:94:0d:44:0d:55:b3:3e:1c:
         80:ed:9e:b9:13:eb:c0:d3:57:d4:c1:05:d4:e5:fb:57:d3:96:
         64:2b:a1:f0:5f:85:d2:1f:05:18:f0:ec:29:95:d2:2f:38:36:
         be:f1:a3:b5:c8:03:27:f7:6a:66:e6:0a:76:89:0f:20:b2:e8:
         5c:52:e8:65:9f:2f:79:3b:c3:4b:11:55:1a:3e:b2:c9:86:e6:
         f6:78:0c:52:eb:c2:6a:a6:b0:6a:1f:19:f4:ec:cb:92:26:3b:
         1b:37:2f:81:47:10:fa:de:c5:c6:63:ee:fa:00:14:e5:cb:c7:
         9f:b6:00:04:38:ca:bf:fb:29:24:db:60:c2:24:21:0d:ef:70:
         52:db:64:6c:72:1d:cc:6f:27:bc:92:eb:71:58:fd:58:c7:d9:
         53:1a:61:3f:a9:2a:15:e1:d3:50:cc:c6:b9:cb:e0:ac:d6:52:
         8d:8a:e9:f1:3c:86:47:7e:9e:42:d6:6e:5d:05:02:63:75:be:
         a4:1d:58:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:15 2026 by rpki-client