Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/IF09KLegCCV48iq15QWJ67pioEk.roa
File:                     IF09KLegCCV48iq15QWJ67pioEk.roa (raw, json)
Hash identifier:          6Fs04ir1gTwXNuMvTPt6I2+/blFqHueC0OvE0ETB9ug=
Subject key identifier:   20:5D:3D:28:B7:A0:08:25:78:F2:2A:B5:E5:05:89:EB:BA:62:A0:49
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       073E
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/IF09KLegCCV48iq15QWJ67pioEk.roa
Signing time:             Tue 31 Mar 2026 08:27:30 +0000
ROA not before:           Tue 31 Mar 2026 08:27:30 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:a600::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1854 (0x73e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:27:30 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=205D3D28B7A0082578F22AB5E50589EBBA62A049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3e:cb:c2:9c:1c:93:8d:35:9a:6d:30:bd:5a:
                    9a:41:0a:7b:fc:bd:45:d3:31:26:1f:d6:61:70:ef:
                    b8:05:cc:af:23:b0:dd:fb:fb:29:f2:a2:6a:e6:d8:
                    69:7f:83:af:54:9f:cd:ad:ef:59:91:6d:6b:72:32:
                    f7:d9:3f:a6:f1:c1:2f:46:51:c1:07:12:cf:6b:7b:
                    a5:d5:9b:5b:4b:c0:07:33:3c:b9:6e:97:1c:71:df:
                    23:a6:89:16:d2:33:ac:58:ef:d8:74:c0:2a:cd:ab:
                    33:9a:92:4b:11:81:47:a8:d5:76:4f:0e:25:91:94:
                    72:0a:5d:16:c8:47:5f:8d:9d:ab:26:55:47:08:a7:
                    6c:44:d6:02:16:37:d3:d1:15:12:6c:d2:e9:a6:d4:
                    49:52:98:cb:cf:c2:8d:6c:3e:00:89:e9:dc:8b:53:
                    c1:37:f5:6d:f3:09:29:7e:82:f0:44:0c:a4:05:6e:
                    5d:43:17:89:e0:b7:e0:a0:00:75:89:52:1c:d7:45:
                    a8:41:9e:ad:79:51:72:a8:5c:df:1f:41:18:2c:72:
                    cf:72:31:49:72:fb:ae:5e:a4:7d:3e:0d:24:bd:d6:
                    2f:ef:00:98:36:c5:7a:6c:ed:a4:09:11:6d:bb:8a:
                    fd:12:73:63:ef:9b:f2:50:c7:36:7b:75:2e:cf:9b:
                    83:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:5D:3D:28:B7:A0:08:25:78:F2:2A:B5:E5:05:89:EB:BA:62:A0:49
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/IF09KLegCCV48iq15QWJ67pioEk.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:a600::/40

    Signature Algorithm: sha256WithRSAEncryption
         2f:67:38:a3:cf:d7:3c:28:69:90:a4:94:3e:23:a2:94:4c:9d:
         90:f7:29:d6:bb:45:90:25:93:45:78:e8:54:9e:3b:b1:80:1d:
         83:62:d5:04:77:fd:21:11:c3:45:25:13:fc:38:f1:e4:d6:b9:
         6f:87:18:6a:f5:6e:2b:ff:3f:65:b1:82:e8:37:8f:3d:ea:77:
         99:41:e1:1a:20:7c:3c:b3:ff:b1:4a:01:60:93:bb:94:1a:fc:
         a2:83:f3:01:51:21:20:70:95:94:58:56:be:d5:88:a0:32:ae:
         d0:09:9c:7f:a5:e1:0d:1e:54:60:f1:73:ed:6e:33:1d:b4:2f:
         f9:e7:0f:15:8c:4a:a0:63:88:89:13:72:51:a8:58:76:34:90:
         5c:a3:53:3f:5a:2a:08:63:23:da:4a:0e:b5:e9:78:9f:45:f2:
         69:db:e1:bb:7e:71:5d:c4:ef:17:a4:cd:1c:b7:4c:f5:fd:5e:
         fb:48:ac:17:c4:3b:34:db:fc:39:70:52:fb:e4:b4:69:5f:84:
         b3:d2:42:b6:85:b1:75:ba:a9:67:4e:e5:1b:b5:1e:35:87:f4:
         fd:ff:3a:13:43:9a:cf:98:34:71:ac:37:52:d5:55:b8:fc:72:
         9e:bc:b6:eb:d7:d9:1e:17:b6:a0:60:21:49:a7:d8:42:04:d2:
         1b:7e:43:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:11 2026 by rpki-client