Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/HQrKvQvSqkiuqts4fUD4tcOwd_g.roa
File:                     HQrKvQvSqkiuqts4fUD4tcOwd_g.roa (raw, json)
Hash identifier:          ExMtgkcXwPBD0hOBgVaLfD6Y/4mJOCIfdd4dAIcGigY=
Subject key identifier:   1D:0A:CA:BD:0B:D2:AA:48:AE:AA:DB:38:7D:40:F8:B5:C3:B0:77:F8
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0734
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/HQrKvQvSqkiuqts4fUD4tcOwd_g.roa
Signing time:             Tue 31 Mar 2026 08:27:25 +0000
ROA not before:           Tue 31 Mar 2026 08:27:25 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:2400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1844 (0x734)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:27:25 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=1D0ACABD0BD2AA48AEAADB387D40F8B5C3B077F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:8f:b9:6a:51:b6:ea:0f:23:2f:d4:12:31:2a:
                    79:cb:65:6d:38:f9:cc:ff:7a:9f:b8:c1:b0:a4:c9:
                    4e:05:5e:71:63:5b:96:49:90:b2:2c:7a:cd:bd:36:
                    6f:8b:e9:bf:a5:2d:b7:d1:52:c3:46:c6:41:24:3a:
                    8b:cb:73:ec:0f:a9:8e:62:e7:57:84:bf:a6:41:5f:
                    f6:b8:31:ed:2a:44:c2:9e:79:06:22:93:fa:43:4f:
                    11:a5:22:30:db:e8:af:43:2c:57:8c:d6:18:66:0e:
                    ec:63:86:88:94:a3:8c:73:d7:59:2b:5b:34:10:6b:
                    0e:e0:4b:a4:97:b1:db:51:b3:59:82:b4:ea:c1:d0:
                    c4:14:7c:e0:bb:54:8b:21:be:c5:3e:21:c2:94:90:
                    41:7c:33:d5:f9:86:c6:be:42:52:83:7a:9e:0f:40:
                    27:fa:13:a2:8c:b9:14:a4:f5:f7:a5:72:f7:78:0b:
                    48:45:08:df:55:9d:94:eb:a5:0c:02:da:56:7a:8d:
                    0f:b5:0a:22:c8:63:20:b4:dc:7e:53:50:e9:34:5f:
                    c5:5f:d1:d9:e1:55:2c:c8:d5:10:36:77:e0:79:ae:
                    e6:fe:49:3e:e7:ad:12:bd:7b:d7:4b:1a:99:f3:ae:
                    f7:06:0b:cc:70:46:46:b9:9d:f9:56:8a:f9:ea:ba:
                    3a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:0A:CA:BD:0B:D2:AA:48:AE:AA:DB:38:7D:40:F8:B5:C3:B0:77:F8
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/HQrKvQvSqkiuqts4fUD4tcOwd_g.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:2400::/40

    Signature Algorithm: sha256WithRSAEncryption
         c1:d1:85:04:64:86:d5:ce:68:8a:22:df:cb:a8:1a:c6:0c:b7:
         f2:d8:a8:8b:e4:b4:bf:02:b6:38:74:37:84:56:0f:e7:45:a2:
         00:57:02:35:0b:79:76:28:5e:35:7d:4e:7a:ec:d1:9e:ae:8e:
         fc:99:00:45:5c:67:09:32:ac:27:52:a4:65:65:d0:f4:b9:67:
         25:b4:05:2f:e2:dd:90:e4:5a:47:67:72:1f:73:8b:21:e3:21:
         c5:ee:23:4b:d0:09:ac:eb:fe:06:0e:c2:aa:89:9f:7e:ef:28:
         a4:32:c9:0b:f6:83:fb:9a:3b:42:1d:7f:d5:db:24:d8:ec:f7:
         7e:a9:8a:9a:78:35:9e:08:ed:ba:67:45:25:c9:f6:b6:3e:ee:
         c2:bb:47:21:8c:2e:0c:8f:ec:5f:a8:cc:64:45:e5:9f:56:db:
         5e:0f:71:10:07:6f:68:0f:65:9b:9f:0e:cd:94:1b:89:58:8a:
         8c:03:01:ef:35:2e:c5:7b:d7:fe:45:56:55:38:5c:59:6c:38:
         bd:4e:44:0e:b5:a2:d7:07:f0:1f:26:6c:51:4b:de:d1:a8:ab:
         51:0e:bf:57:d0:93:31:1f:c4:70:85:c6:49:80:3c:f5:bd:d0:
         84:58:c8:61:32:96:6f:06:c5:b6:ab:d5:84:d3:a8:0f:e1:3d:
         b7:84:fc:ee
-----BEGIN CERTIFICATE-----
MIIEwzCCA6ugAwIBAgICBzQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjAzMzEw
ODI3MjVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDFEMEFDQUJEMEJEMkFB
NDhBRUFBREIzODdENDBGOEI1QzNCMDc3RjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDbj7lqUbbqDyMv1BIxKnnLZW04+cz/ep+4wbCkyU4FXnFjW5ZJ
kLIses29Nm+L6b+lLbfRUsNGxkEkOovLc+wPqY5i51eEv6ZBX/a4Me0qRMKeeQYi
k/pDTxGlIjDb6K9DLFeM1hhmDuxjhoiUo4xz11krWzQQaw7gS6SXsdtRs1mCtOrB
0MQUfOC7VIshvsU+IcKUkEF8M9X5hsa+QlKDep4PQCf6E6KMuRSk9felcvd4C0hF
CN9VnZTrpQwC2lZ6jQ+1CiLIYyC03H5TUOk0X8Vf0dnhVSzI1RA2d+B5rub+ST7n
rRK9e9dLGpnzrvcGC8xwRka5nflWivnqujp7AgMBAAGjggHfMIIB2zAdBgNVHQ4E
FgQUHQrKvQvSqkiuqts4fUD4tcOwd/gwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDEyOS9IUXJLdlF2U3FraXVxdHM0ZlVENHRjT3dkX2cucm9h
MCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJAoAayQwDQYJKoZIhvcNAQEL
BQADggEBAMHRhQRkhtXOaIoi38uoGsYMt/LYqIvktL8Ctjh0N4RWD+dFogBXAjUL
eXYoXjV9Tnrs0Z6ujvyZAEVcZwkyrCdSpGVl0PS5ZyW0BS/i3ZDkWkdnch9ziyHj
IcXuI0vQCazr/gYOwqqJn37vKKQyyQv2g/uaO0Idf9XbJNjs936pipp4NZ4I7bpn
RSXJ9rY+7sK7RyGMLgyP7F+ozGRF5Z9W214PcRAHb2gPZZufDs2UG4lYiowDAe81
LsV71/5FVlU4XFlsOL1ORA61otcH8B8mbFFL3tGoq1EOv1fQkzEfxHCFxkmAPPW9
0IRYyGEylm8Gxbar1YTTqA/hPbeE/O4=
-----END CERTIFICATE-----
Generated at Tue Apr 7 22:26:35 2026 by rpki-client