Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/DxBTWr9xBXCkxKp0qIbTzuaEYAA.roa
File:                     DxBTWr9xBXCkxKp0qIbTzuaEYAA.roa (raw, json)
Hash identifier:          jfi8npotYyMYHL6+pDDmZqzGHwwutVsLUeazZd6pk/g=
Subject key identifier:   0F:10:53:5A:BF:71:05:70:A4:C4:AA:74:A8:86:D3:CE:E6:84:60:00
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0740
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/DxBTWr9xBXCkxKp0qIbTzuaEYAA.roa
Signing time:             Tue 31 Mar 2026 08:27:30 +0000
ROA not before:           Tue 31 Mar 2026 08:27:30 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:9b00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1856 (0x740)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:27:30 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=0F10535ABF710570A4C4AA74A886D3CEE6846000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:9e:55:7e:0e:ce:1d:09:18:35:8e:95:82:0d:
                    48:9f:55:79:63:70:fe:14:53:6c:2c:9e:20:d7:15:
                    e1:3d:fc:fe:30:ce:41:d2:94:98:5e:a5:51:2a:53:
                    83:71:ca:57:4a:b0:72:22:91:f6:83:98:f3:ec:0d:
                    c6:d3:61:9a:46:51:02:c3:ad:76:16:9a:b8:a3:c1:
                    fe:2e:a3:26:3f:16:0e:7a:b4:65:5a:e4:43:0e:b1:
                    64:0b:53:6e:f2:00:59:a0:61:64:fc:3b:a3:46:44:
                    ae:db:0b:bf:2e:85:6b:a6:5e:5a:ab:61:7f:1f:db:
                    54:f5:22:ad:98:3e:d7:92:6b:a2:a6:59:00:e9:3e:
                    89:55:09:b8:4b:15:63:e2:8b:e0:6a:92:32:f8:24:
                    90:7c:8c:13:44:19:66:1d:d0:c8:3b:0e:4e:71:5a:
                    91:4a:ff:bb:9c:c9:ea:7e:b9:88:e8:83:95:41:d4:
                    d7:21:97:75:84:a1:c2:40:47:8b:c7:00:6f:74:e0:
                    cc:76:e6:fa:8e:90:29:f7:ab:bf:20:86:53:85:0b:
                    42:a4:c3:ce:46:55:b8:fd:9b:b0:17:d6:e5:ae:69:
                    f0:6a:93:63:6f:8a:20:b0:cc:0a:b8:c7:e5:b9:8a:
                    03:43:1f:ec:08:c4:f1:ce:90:89:fd:8d:a4:ee:12:
                    62:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:10:53:5A:BF:71:05:70:A4:C4:AA:74:A8:86:D3:CE:E6:84:60:00
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/DxBTWr9xBXCkxKp0qIbTzuaEYAA.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:9b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         0f:3a:d9:d6:01:3f:af:0d:c9:b4:a9:90:69:95:a4:2e:b4:b1:
         7a:08:97:c6:d2:a5:dd:68:dd:c0:c6:ab:1b:c5:94:15:da:3a:
         88:55:54:61:f1:7a:5f:ee:9d:08:32:d9:20:5f:41:ff:2b:94:
         00:3f:ee:e0:17:1d:2e:98:3b:2e:02:92:39:b4:13:c4:87:0e:
         ef:96:b2:6f:f5:66:89:ff:30:47:74:7f:87:e2:a2:89:0f:19:
         a6:4b:9c:33:c6:12:b4:66:c8:a9:85:54:14:f1:93:27:48:a6:
         83:96:6d:96:83:9c:f6:16:75:58:e0:cc:27:68:ed:b3:84:d3:
         42:7f:5c:39:1b:e0:b9:06:11:41:a9:bd:94:a7:a4:25:62:75:
         cb:e4:36:5b:24:a0:f0:17:1b:26:45:52:50:32:2b:6f:ad:02:
         dc:ba:8a:67:aa:36:98:a3:70:79:c6:e8:e5:9e:e6:82:10:43:
         e7:4d:65:12:51:78:90:f3:27:15:d6:32:ee:04:88:e1:fd:f2:
         06:ac:8e:4e:77:e1:ad:aa:06:21:69:68:61:8b:ed:7e:29:5f:
         80:73:50:ba:a0:80:1e:ca:aa:10:6c:27:69:f8:aa:77:ed:b2:
         26:97:72:6c:0a:57:94:26:a7:33:1a:e2:ea:87:2d:10:47:77:
         08:c4:0d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:37 2026 by rpki-client