Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/JDvtuSbPaaCFEXX-Q9UFGBRJ1Lc.roa
File:                     JDvtuSbPaaCFEXX-Q9UFGBRJ1Lc.roa (raw, json)
Hash identifier:          s8NFuDo9v0i3F34vbhz3QpdilHEHU+AxHsbWTQ7KXlg=
Subject key identifier:   24:3B:ED:B9:26:CF:69:A0:85:11:75:FE:43:D5:05:18:14:49:D4:B7
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       066F
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/JDvtuSbPaaCFEXX-Q9UFGBRJ1Lc.roa
Signing time:             Tue 31 Mar 2026 08:25:50 +0000
ROA not before:           Tue 31 Mar 2026 08:25:50 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:4f00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1647 (0x66f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:25:50 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=243BEDB926CF69A0851175FE43D505181449D4B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:95:ca:a2:e0:63:57:7a:f1:e0:f3:02:19:8a:
                    7a:aa:9d:54:c3:dd:f9:cb:26:30:33:d4:5a:44:f7:
                    de:53:32:ed:69:76:16:d2:cd:01:6a:7f:97:1a:00:
                    00:94:91:a4:57:c5:6b:c5:80:f9:6d:d0:9e:c4:ba:
                    85:00:19:3c:dc:fe:be:5a:3e:a5:54:91:5b:4f:45:
                    26:58:8d:d1:59:98:1b:50:06:c4:d5:53:28:7d:18:
                    d7:26:83:92:18:a4:90:f3:84:5e:b6:7b:80:b4:4a:
                    4c:5d:fc:53:51:97:c3:82:ff:a0:d4:7d:74:dc:74:
                    dc:74:17:7d:ca:8d:f2:46:77:d3:09:1e:eb:71:17:
                    c2:73:e9:37:30:ac:be:85:ab:08:f9:4d:2a:4e:51:
                    6d:08:89:ed:04:22:28:4d:d6:91:13:69:1e:e8:72:
                    72:d3:67:6d:e6:05:fc:f3:12:8a:b2:18:0b:68:e3:
                    a6:5c:43:66:35:eb:ff:d8:91:5f:66:39:c0:c8:75:
                    55:64:ea:d3:38:92:54:8f:f4:48:3a:23:7f:20:96:
                    6a:40:d4:dc:36:8b:81:af:e2:c1:f2:c6:62:0e:fc:
                    d7:ba:45:ab:fb:fc:68:ae:f3:cf:de:80:83:33:88:
                    e7:b7:51:99:2c:10:5e:ce:9b:be:66:3a:f0:47:cc:
                    8f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:3B:ED:B9:26:CF:69:A0:85:11:75:FE:43:D5:05:18:14:49:D4:B7
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/JDvtuSbPaaCFEXX-Q9UFGBRJ1Lc.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:4f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         6e:9c:34:a2:c3:93:a6:f1:22:40:4f:04:8b:9a:16:4a:c3:91:
         05:ea:4c:75:89:31:69:fc:f2:a4:0e:33:0c:2f:88:e7:21:3f:
         98:a0:04:19:2d:80:cd:a3:8c:ef:61:4c:09:78:7d:1d:90:13:
         8c:e1:4b:82:59:a1:f3:e9:fa:c3:8b:bc:a3:e6:d9:e4:bb:79:
         a5:ea:79:1d:de:35:69:f7:5f:3a:25:8c:ca:fc:f4:8d:a2:51:
         fc:6b:4c:f5:04:cd:94:37:c4:f8:20:d5:08:b2:7b:ac:6d:2f:
         de:d9:bf:d5:3c:48:c8:1c:e9:18:72:32:a0:58:44:b8:69:60:
         ba:2c:5d:b8:37:6a:48:9f:69:57:bd:d1:4e:b4:9e:63:8d:92:
         5b:a0:be:d7:20:c6:73:3a:8c:1e:cf:3c:76:32:0c:47:40:15:
         69:7e:04:69:ef:cc:c6:97:3e:b9:17:00:3f:d4:2b:25:90:22:
         b4:3a:e8:32:61:cf:cb:97:73:42:a2:1f:cf:5e:f7:b3:87:c6:
         ff:b7:46:41:96:04:4a:d4:cb:87:f0:e1:c1:c4:4b:c4:df:32:
         d6:2e:22:0e:d1:52:78:32:28:bf:6c:f7:bc:ab:81:40:86:6e:
         79:d0:32:7d:34:fb:18:b2:3b:b5:b5:ad:d3:03:71:7d:60:d4:
         a2:ef:21:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:31 2026 by rpki-client