Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Gr1_bYlzh-ih8Gs9n49uP6MmpuM.roa
File:                     Gr1_bYlzh-ih8Gs9n49uP6MmpuM.roa (raw, json)
Hash identifier:          5/bCnHPxcShBfqzHy/1kjJDB/Hz1+jMlEFQyR2Wq5f4=
Subject key identifier:   1A:BD:7F:6D:89:73:87:E8:A1:F0:6B:3D:9F:8F:6E:3F:A3:26:A6:E3
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0703
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Gr1_bYlzh-ih8Gs9n49uP6MmpuM.roa
Signing time:             Tue 31 Mar 2026 08:26:59 +0000
ROA not before:           Tue 31 Mar 2026 08:26:59 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:4500::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1795 (0x703)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:26:59 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=1ABD7F6D897387E8A1F06B3D9F8F6E3FA326A6E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:93:5a:d2:86:d3:2a:72:45:75:e8:84:02:90:
                    21:63:d2:b4:d7:90:f6:3d:4a:c2:f1:d3:7e:0a:1f:
                    7b:bb:ff:e4:90:d5:74:95:11:c0:61:2b:7b:43:8f:
                    87:25:ff:7a:83:10:2d:40:40:e7:a6:85:2c:26:94:
                    6c:4e:f3:d4:cc:25:bb:5f:36:3d:71:6a:16:6c:2f:
                    08:ae:8d:fa:c6:41:8a:4d:c0:20:52:20:47:62:2f:
                    b8:92:fe:c3:19:ec:7f:5e:80:a6:82:3c:68:4d:d2:
                    ae:bf:9a:37:70:6a:11:74:63:a0:7d:ef:78:b9:ab:
                    bb:70:d0:fa:9e:07:a1:ea:61:40:3b:8c:63:30:ea:
                    aa:17:1a:62:22:16:ae:cc:70:8c:38:dd:74:f1:3a:
                    b4:5a:14:cc:25:16:7c:2e:93:6a:ce:98:b9:36:9e:
                    1c:de:15:bf:a8:b1:f7:69:7d:e3:97:e9:a4:8a:b8:
                    a4:9f:e2:28:9c:0d:cb:5e:20:38:d7:bd:54:76:93:
                    46:7e:47:65:50:b5:79:84:1f:60:de:26:0d:54:5f:
                    ef:de:1e:45:3d:52:ea:2c:7a:da:b8:59:e3:cc:0f:
                    3a:00:60:91:ba:43:21:45:95:13:e6:dc:97:03:df:
                    14:14:93:08:95:e2:39:55:41:3a:f6:bd:c6:16:87:
                    3b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:BD:7F:6D:89:73:87:E8:A1:F0:6B:3D:9F:8F:6E:3F:A3:26:A6:E3
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Gr1_bYlzh-ih8Gs9n49uP6MmpuM.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:4500::/40

    Signature Algorithm: sha256WithRSAEncryption
         9f:bc:aa:67:63:52:04:f0:19:b8:5c:32:43:eb:80:ab:28:c6:
         4a:78:9b:7c:47:e4:68:a7:fe:7a:ca:86:75:18:d3:42:c0:b0:
         70:5d:0f:14:ed:c3:51:c7:6e:e9:b9:ab:03:21:ec:79:cf:fb:
         1a:5b:7d:2b:b0:66:a4:bd:44:e3:e9:ae:2c:5e:3f:6c:22:78:
         98:0d:72:fb:9e:25:96:46:bf:3f:27:b1:8f:b1:e6:c0:3c:0f:
         9d:47:2f:3b:70:04:19:e8:fa:b9:c7:50:e1:c6:f4:1a:3d:bc:
         18:6e:8b:d0:32:8b:e3:b6:31:87:2e:1b:cd:6d:dd:70:0d:01:
         27:df:8b:0e:d3:80:32:c9:93:50:6b:34:ba:a9:52:a4:44:45:
         22:80:c2:e6:c4:15:35:ec:a4:56:c3:56:bd:08:74:82:bf:27:
         54:72:24:0a:10:5a:6c:63:11:6e:bc:31:a4:88:0f:a3:61:70:
         ee:a3:bd:d2:ae:b3:99:bc:e0:02:08:f7:d2:0e:6b:a0:56:88:
         93:6c:cd:b1:1f:f2:70:13:8b:71:60:74:74:83:a8:47:29:e7:
         2b:cc:82:af:e1:57:db:81:d7:e6:bc:32:79:37:d8:8f:de:54:
         9a:f0:da:71:4e:28:e6:e9:7c:11:ee:32:a6:5b:72:c0:3c:09:
         05:8e:b8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:10 2026 by rpki-client