Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/H2rT8xq5ohr-Qt2YxVCo4292DnA.roa
File:                     H2rT8xq5ohr-Qt2YxVCo4292DnA.roa (raw, json)
Hash identifier:          naOO/GnqDcVMC6nOeHm7r3iv/5JWMbcAqwTjN0sKpuc=
Subject key identifier:   1F:6A:D3:F3:1A:B9:A2:1A:FE:42:DD:98:C5:50:A8:E3:6F:76:0E:70
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       065B
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/H2rT8xq5ohr-Qt2YxVCo4292DnA.roa
Signing time:             Tue 31 Mar 2026 08:25:39 +0000
ROA not before:           Tue 31 Mar 2026 08:25:39 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:aa00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1627 (0x65b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:25:39 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=1F6AD3F31AB9A21AFE42DD98C550A8E36F760E70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fc:74:73:db:35:d3:35:25:a7:ba:9c:58:b3:
                    83:11:da:a8:48:1d:18:b5:f8:b4:db:dd:f5:5d:01:
                    5b:e8:9a:1f:74:0d:86:58:db:55:b3:1e:12:a5:24:
                    cf:00:a0:e3:eb:ed:ee:5f:9e:ac:f1:71:cf:3d:f3:
                    54:d0:ed:30:e2:60:9a:d3:8e:68:ff:78:e7:34:48:
                    7f:e1:e6:80:7c:2c:df:fe:cd:46:32:1d:5d:0e:8f:
                    53:f4:ca:f7:b3:4a:ba:93:5c:68:9b:e2:e3:6a:e1:
                    b8:5a:70:d0:48:81:29:c2:c4:42:04:7e:81:a7:eb:
                    b2:a6:ca:09:0e:a1:fb:a8:39:74:1e:99:1a:19:a7:
                    b1:cb:03:e1:8b:15:3f:c0:a4:85:94:5b:bc:12:d8:
                    24:1a:e6:79:d2:c8:a6:51:03:81:47:b1:88:38:b0:
                    31:ee:c9:6c:29:e3:e3:5f:25:fe:44:1b:6c:2b:0f:
                    e5:1d:16:f1:be:60:f3:a8:85:1c:e3:e0:9f:f6:ed:
                    36:08:bc:79:57:c9:6a:24:ab:c0:25:90:81:33:d4:
                    dd:dc:8f:8f:41:de:79:70:91:fe:c9:74:5f:aa:b4:
                    d0:53:19:8e:2a:64:e9:a1:fc:46:b8:44:98:27:0d:
                    c1:2d:ec:6c:99:a2:ac:7b:9f:ee:ff:10:8e:ae:a3:
                    51:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:6A:D3:F3:1A:B9:A2:1A:FE:42:DD:98:C5:50:A8:E3:6F:76:0E:70
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/H2rT8xq5ohr-Qt2YxVCo4292DnA.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:aa00::/40

    Signature Algorithm: sha256WithRSAEncryption
         7a:35:f0:39:e4:02:e7:a2:44:ca:61:c7:7c:b8:5a:5c:81:65:
         29:fb:bb:31:8c:80:97:72:57:b7:91:ea:0d:b9:f3:b6:96:b4:
         f5:3f:70:4d:c9:bd:ca:fe:f7:18:59:ef:37:24:14:6d:1e:f2:
         2a:7f:ac:a8:db:cb:dc:e7:b1:f7:c9:9e:b5:de:8c:54:cf:1c:
         ec:43:c9:ee:82:3b:ec:bc:5d:ed:8d:87:9f:4f:5b:e0:e4:3c:
         3b:a4:4a:18:db:aa:03:bc:76:13:42:2d:fe:72:63:6d:b0:31:
         4d:20:21:ee:57:b2:ad:f6:a3:43:9d:79:f4:7f:33:ea:fc:3f:
         f6:49:44:13:77:a8:47:e5:e0:f5:35:2c:c9:ce:43:7b:0d:25:
         a3:07:ef:b2:66:c3:d3:79:ed:18:a7:be:d7:19:80:cf:e5:7e:
         1c:3c:33:9c:09:f5:21:36:ef:61:6e:64:e2:44:84:d2:3e:14:
         a8:be:e7:a5:72:fa:82:20:94:93:70:99:d1:63:ba:1d:d3:79:
         88:10:1e:18:a1:55:08:39:3c:57:f8:9a:2e:38:ba:90:60:b2:
         b6:b4:8b:95:a7:12:7d:47:aa:26:2c:c7:47:97:52:6c:ce:f1:
         ab:18:19:fb:e4:08:92:b6:dc:79:16:ba:60:8b:0b:3a:84:ad:
         ec:44:ba:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:32 2026 by rpki-client