Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/DHquCAVif5u0_OSL-EtjLsawwZo.roa
File:                     DHquCAVif5u0_OSL-EtjLsawwZo.roa (raw, json)
Hash identifier:          DVIj9BC4aU6sVvmzQnqSC2CX57lRUutCdwVmbZhIQk8=
Subject key identifier:   0C:7A:AE:08:05:62:7F:9B:B4:FC:E4:8B:F8:4B:63:2E:C6:B0:C1:9A
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       076B
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/DHquCAVif5u0_OSL-EtjLsawwZo.roa
Signing time:             Tue 31 Mar 2026 08:27:50 +0000
ROA not before:           Tue 31 Mar 2026 08:27:50 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:61:e00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1899 (0x76b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:27:50 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=0C7AAE0805627F9BB4FCE48BF84B632EC6B0C19A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:25:5a:0a:e9:b7:2e:8e:af:e9:02:62:3a:36:
                    2b:2b:00:e4:22:ab:c1:d0:d8:a5:31:5d:8a:8a:38:
                    c2:8c:78:f4:98:ce:c8:be:55:ed:d9:95:b3:5c:01:
                    d5:ec:b8:10:7f:0c:93:d1:1c:a0:23:da:8e:6f:ce:
                    55:c9:94:1b:c8:8f:f6:ef:96:a1:37:01:08:58:5c:
                    2e:ee:5e:3b:0c:05:33:b1:bf:b3:7e:fc:c8:24:e8:
                    dc:8a:ea:70:ae:8e:2d:8d:18:2a:32:9b:99:2d:06:
                    0d:4a:73:b9:f0:11:68:bf:41:7c:9a:12:21:aa:33:
                    f7:52:b4:e0:f0:dc:cb:3d:4a:7d:35:11:fd:a0:a8:
                    91:93:79:38:87:94:2e:9e:f2:c3:bd:f7:f0:70:ee:
                    33:18:12:d0:6b:98:27:d9:a1:50:dd:a1:dc:26:5f:
                    1d:e8:74:c1:26:c6:52:ab:e4:f9:a9:5a:75:c4:07:
                    35:9a:3c:ec:28:b5:6f:05:8b:66:e1:a1:80:31:e3:
                    33:4e:ad:20:b4:ea:7a:f4:8c:d4:d1:98:55:b8:0a:
                    eb:69:08:96:e0:87:05:ea:b7:e4:5b:40:fd:5c:de:
                    0a:9b:33:5d:5e:63:97:d1:b3:7b:4b:f2:83:5e:9f:
                    35:9d:79:a3:26:0f:49:32:e7:26:a8:7b:64:62:63:
                    fc:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:7A:AE:08:05:62:7F:9B:B4:FC:E4:8B:F8:4B:63:2E:C6:B0:C1:9A
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/DHquCAVif5u0_OSL-EtjLsawwZo.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:e00::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:8e:55:34:21:3e:56:f8:6a:9f:f0:d2:46:27:8e:6a:12:b4:
         b7:47:24:72:6f:ab:ef:0a:aa:1d:91:22:33:93:ec:4d:a7:3f:
         64:f5:01:b1:91:aa:c8:49:45:a0:0e:6b:f5:27:0e:cd:c9:8b:
         64:fb:b6:17:dc:b6:11:79:7a:ab:4f:05:c5:04:b8:59:b7:75:
         7f:0f:3e:43:a3:45:dd:5a:5a:5a:66:ac:77:65:30:53:2d:38:
         1c:85:97:42:51:91:e0:81:25:50:46:59:b6:67:c9:da:73:40:
         79:37:01:b4:ca:98:e0:4e:28:5a:21:e7:c8:5e:96:bc:b4:ed:
         cc:35:24:68:b1:e2:7f:ab:2f:26:7b:b2:8c:2b:f2:b8:90:31:
         a7:1b:56:09:8a:70:20:ce:85:a8:c9:98:39:95:01:d6:2c:3f:
         3e:71:91:f9:96:18:4e:e8:57:6c:0c:c6:ad:b8:ae:38:61:6c:
         6d:6f:dc:f6:d1:53:1b:10:6d:19:7c:e5:51:3e:88:ac:8a:0c:
         8c:33:12:65:e2:f1:28:8d:eb:de:c4:02:7a:e4:c0:0f:63:61:
         33:10:d3:a6:20:13:73:92:66:71:0b:04:42:ed:02:bc:85:09:
         dd:86:fc:54:46:b1:8d:70:a1:e1:1b:68:91:23:4c:2a:63:fe:
         ff:d5:46:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:48 2026 by rpki-client