Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/FrWqA6sKSURLJLiT07CtdV49Nco.roa
File:                     FrWqA6sKSURLJLiT07CtdV49Nco.roa (raw, json)
Hash identifier:          6bnxHLxGcG2W675lO9fZAIO/T1TrDUQjscKfhfrQtOA=
Subject key identifier:   16:B5:AA:03:AB:0A:49:44:4B:24:B8:93:D3:B0:AD:75:5E:3D:35:CA
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       06E7
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/FrWqA6sKSURLJLiT07CtdV49Nco.roa
Signing time:             Tue 31 Mar 2026 08:26:46 +0000
ROA not before:           Tue 31 Mar 2026 08:26:46 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:9f00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1767 (0x6e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:26:46 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=16B5AA03AB0A49444B24B893D3B0AD755E3D35CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ba:4c:d8:23:51:a2:2e:0a:fe:a5:7a:e5:16:
                    56:3b:13:3f:e4:f7:f2:78:a4:eb:97:c7:c1:17:9b:
                    c2:b5:26:b1:eb:87:21:34:53:9f:2d:54:15:22:33:
                    13:bb:29:42:63:9d:4a:65:24:ac:b0:af:99:26:0a:
                    1a:9f:27:a1:68:f9:65:c3:44:03:62:3f:4d:77:ce:
                    fb:a6:4e:28:ab:d8:3f:45:0c:0a:52:35:b5:47:6d:
                    2d:90:1d:cc:57:b8:60:70:23:75:a7:93:20:36:28:
                    8a:8a:59:6c:91:99:cf:99:aa:89:12:7a:9e:61:bf:
                    a2:91:e8:6b:db:67:b1:58:16:2d:2d:46:cf:71:35:
                    ed:99:d5:6d:da:08:3b:7e:c1:01:84:b6:c5:14:ac:
                    ca:be:f8:26:7f:4c:59:2a:6a:86:be:9a:79:e2:54:
                    00:48:d5:3c:a5:7d:e2:39:e7:64:7c:a4:62:30:a6:
                    73:da:2f:2f:df:d6:be:9a:63:89:4c:d1:ed:8e:a4:
                    f5:bb:31:ff:54:1c:46:a3:72:2c:e4:e8:d0:86:b7:
                    c4:7b:d9:27:47:30:83:42:b1:df:5d:27:1e:4b:9d:
                    2c:d7:3f:d7:70:7e:e3:e8:94:32:83:62:f2:6d:62:
                    4c:40:d9:13:b7:8a:45:40:75:a2:df:de:5e:3c:4a:
                    ae:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:B5:AA:03:AB:0A:49:44:4B:24:B8:93:D3:B0:AD:75:5E:3D:35:CA
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/FrWqA6sKSURLJLiT07CtdV49Nco.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:9f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         ac:8f:88:51:3d:b4:6a:02:0d:51:14:c8:a4:3a:1b:83:df:e7:
         73:2e:6e:24:c0:04:0d:bc:84:e0:c7:ad:f8:7f:10:1f:98:09:
         a0:db:e8:49:52:47:de:77:3f:67:80:ef:5e:f9:db:69:94:d2:
         16:4f:78:af:3b:e1:13:01:97:16:b8:50:38:64:6d:e3:b2:6f:
         b8:1d:fd:64:99:0b:14:f5:07:f6:69:fd:90:49:a4:50:6a:4c:
         97:1f:1d:6b:f1:7d:48:34:56:55:42:00:43:b1:a5:cf:ac:3c:
         28:b8:1b:4e:30:7b:af:c8:ec:e7:30:0a:09:d5:e4:99:eb:80:
         d0:f5:fc:c7:f1:2c:96:7d:34:92:4b:15:fb:d3:45:eb:fa:9c:
         84:7b:63:dd:aa:66:5e:2b:ec:fb:37:1b:e3:cb:5a:07:71:12:
         ce:23:d5:9c:f0:ab:35:e3:58:bd:65:8d:cd:b5:61:cb:d7:75:
         3a:b5:3f:dc:34:9a:8e:4e:af:74:fa:63:3c:3d:73:bb:f0:ca:
         45:55:92:82:3f:d0:09:a3:b3:d9:24:09:e5:4c:04:3d:22:c8:
         94:c9:67:bd:71:ee:6b:0d:e3:dd:3d:36:a8:0c:16:e4:eb:14:
         87:4a:ab:e0:de:6b:f3:b3:d9:3d:f5:10:07:c5:2b:a9:e7:f7:
         ae:c7:b2:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:02 2026 by rpki-client