Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/FRrDafSnq5BSDZutGA1UyEMGhFw.roa
File:                     FRrDafSnq5BSDZutGA1UyEMGhFw.roa (raw, json)
Hash identifier:          1n2uMGTqPFkS+wqgw2ZL+GZDWDaLgX6rZcFDwcOCy3E=
Subject key identifier:   15:1A:C3:69:F4:A7:AB:90:52:0D:9B:AD:18:0D:54:C8:43:06:84:5C
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       06BC
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/FRrDafSnq5BSDZutGA1UyEMGhFw.roa
Signing time:             Tue 31 Mar 2026 08:26:27 +0000
ROA not before:           Tue 31 Mar 2026 08:26:27 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:6f00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1724 (0x6bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:26:27 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=151AC369F4A7AB90520D9BAD180D54C84306845C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:87:fb:b0:70:41:17:95:a1:93:84:6b:b3:20:
                    db:49:ca:b0:35:67:88:c3:56:94:7f:f4:48:de:6c:
                    35:e4:02:d6:24:0c:c2:d7:c3:e4:61:f6:f4:83:77:
                    0c:42:6d:42:bd:9e:58:5e:13:e4:1c:d6:f2:f0:34:
                    52:fc:f4:04:71:d5:ec:08:51:6f:db:52:92:03:4d:
                    e1:bc:3e:26:2d:ca:38:7d:c1:7f:3b:68:a2:29:e7:
                    f0:44:f2:5d:9c:12:ce:11:00:99:a6:da:ea:15:ae:
                    b1:89:66:e7:34:e0:0a:94:d9:c0:bf:f7:13:b0:b2:
                    29:52:c9:ff:10:5e:42:6d:26:0f:fb:10:92:1d:12:
                    c0:ef:b3:ad:c5:84:08:e2:13:96:32:30:54:8c:95:
                    a7:98:7b:b3:12:86:42:fb:0b:5b:b7:73:ff:84:cf:
                    02:60:bc:51:83:62:bb:71:87:be:c1:38:e8:a0:99:
                    5f:7c:e6:0a:b2:36:0d:7b:78:90:81:ad:c6:0a:8c:
                    fa:36:ec:22:06:39:73:2f:f7:16:30:42:aa:e0:b3:
                    67:15:2a:8a:94:c8:4f:e7:4f:fb:02:fd:f0:ec:37:
                    9f:08:2a:c7:45:a3:6f:8c:be:c9:a1:ee:75:51:06:
                    fe:73:1b:02:12:3f:08:20:95:0d:eb:58:c6:61:56:
                    0b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:1A:C3:69:F4:A7:AB:90:52:0D:9B:AD:18:0D:54:C8:43:06:84:5C
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/FRrDafSnq5BSDZutGA1UyEMGhFw.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:6f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         cd:0f:b5:56:6b:53:b7:fb:42:5c:17:1d:ce:0c:88:08:1e:a8:
         17:6e:94:77:af:9c:18:4f:4a:a6:5f:f2:83:50:b1:83:ee:bf:
         25:d8:36:06:74:d3:55:a9:c1:ba:cd:55:ac:34:58:a2:df:2c:
         4b:36:7e:05:45:d9:06:b7:2c:33:fc:43:75:f2:21:3a:30:14:
         1b:b2:89:cd:91:c3:5b:c8:c3:82:aa:db:3d:dd:f8:2c:b1:01:
         d1:f4:0f:93:11:5d:f8:5b:29:a6:35:0d:95:5f:4d:76:b4:1b:
         1c:9e:5f:bc:52:45:f6:59:79:22:44:ca:3e:f1:8d:d3:7e:90:
         38:94:33:2e:b3:5e:29:44:2f:b6:10:68:f1:20:02:c1:b4:34:
         32:97:da:3a:ca:83:41:2f:db:39:88:04:cc:fa:b8:e5:4e:44:
         2b:89:1f:2e:04:2c:21:bb:f6:72:40:5e:e8:08:f8:c4:a1:c5:
         11:88:77:20:d1:7f:6b:87:1e:af:9a:f2:ee:3e:10:97:41:1c:
         ec:e3:88:ee:9a:39:14:2c:f3:ca:30:ee:90:7e:e8:4a:94:42:
         f3:18:e8:86:c6:a4:ac:01:9a:2c:48:89:05:86:37:5c:fc:39:
         6d:6f:3f:ba:39:94:2b:1b:63:6b:ec:7b:8c:ff:46:89:44:62:
         76:5a:99:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:32 2026 by rpki-client