Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/LDpcDri1bxXDZQT2N7Z7KpgZnyQ.roa
File:                     LDpcDri1bxXDZQT2N7Z7KpgZnyQ.roa (raw, json)
Hash identifier:          pEx7h+yJTOVjXSmd1uslW09JS1L4cUnJpXH7QzEB1kQ=
Subject key identifier:   2C:3A:5C:0E:B8:B5:6F:15:C3:65:04:F6:37:B6:7B:2A:98:19:9F:24
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0704
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/LDpcDri1bxXDZQT2N7Z7KpgZnyQ.roa
Signing time:             Tue 31 Mar 2026 08:26:59 +0000
ROA not before:           Tue 31 Mar 2026 08:26:59 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:8d00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1796 (0x704)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:26:59 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=2C3A5C0EB8B56F15C36504F637B67B2A98199F24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e5:22:b1:17:b4:1f:4f:d5:f8:3f:23:90:b9:
                    31:33:76:52:db:d3:39:dd:4f:1e:8f:34:ae:71:cc:
                    f9:4f:b0:ee:54:e4:23:f7:f9:3c:11:33:59:21:3b:
                    2e:a5:5f:76:64:ba:4c:f8:4d:17:01:bc:95:61:8d:
                    ce:d4:0f:55:41:61:ee:fc:af:ff:65:91:8c:55:d7:
                    49:07:3c:5d:ef:52:e7:18:47:ac:3a:3c:d6:aa:fd:
                    27:01:1d:ac:99:f3:0b:42:b0:49:dd:0a:91:c7:ca:
                    5b:94:fb:7e:0e:6a:f4:c0:35:9f:12:d2:53:4a:f6:
                    ed:3a:46:5b:87:98:c2:40:31:25:ce:2d:6a:8d:12:
                    5a:97:00:75:c2:16:47:79:67:e7:f7:3c:01:ec:7d:
                    c7:d8:ec:c6:57:8c:a9:1d:1b:59:ee:d5:4d:8a:1c:
                    c8:6b:58:08:0f:47:b0:1d:9b:71:7b:8a:16:38:d5:
                    a8:d9:86:d1:0f:c6:7a:22:df:d7:9c:a7:6b:ad:fa:
                    34:03:33:d7:ae:0f:23:2e:33:dc:7b:76:78:15:7b:
                    40:65:7b:06:df:66:46:cc:8e:77:aa:a3:0f:79:84:
                    d9:8c:3d:b9:86:6e:62:cf:02:da:b4:a9:77:3f:9e:
                    23:4f:fa:0d:64:a8:31:50:69:c1:df:b5:1e:d8:f0:
                    de:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:3A:5C:0E:B8:B5:6F:15:C3:65:04:F6:37:B6:7B:2A:98:19:9F:24
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/LDpcDri1bxXDZQT2N7Z7KpgZnyQ.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:8d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         1a:31:d3:0f:ca:2c:e1:f9:b5:47:cf:97:1b:b1:b6:96:99:0d:
         8e:67:17:1a:06:94:95:ae:ff:a4:7b:78:67:a8:9d:58:86:e7:
         db:87:f3:60:7c:16:8f:5c:a0:87:11:e9:82:23:4e:d7:76:e4:
         35:c2:64:9e:b1:06:75:c8:b7:31:9f:71:31:b7:f9:94:4e:6b:
         e0:c4:09:89:52:d0:a0:a8:59:34:7f:a0:e6:85:6b:2e:ad:9b:
         f4:19:cd:51:50:75:cd:4a:b4:98:a9:a6:d7:d0:53:88:ac:d5:
         a0:8d:ae:d5:06:08:8c:e9:d2:b2:f6:40:d1:be:75:9f:9c:e1:
         08:a5:a9:74:e0:b3:98:c6:e5:3a:91:27:75:7b:41:cb:77:c5:
         1f:b5:1e:14:54:8f:84:b1:46:f4:c8:ce:bd:e6:97:f3:8b:d3:
         54:13:03:62:ff:41:ed:db:00:fc:90:50:ff:00:54:f5:13:fd:
         19:c0:08:eb:3e:f8:03:f3:4b:2b:8e:d3:91:57:a8:5d:0e:31:
         79:1f:af:f7:0f:41:31:d9:1b:42:93:54:5b:af:b5:23:35:ce:
         f1:ee:b3:8c:f9:34:c4:ae:3c:50:f9:06:8b:ba:7f:80:a5:1a:
         69:c8:81:e7:3f:9a:e9:95:97:3c:04:b0:01:06:5f:06:6e:fc:
         36:25:41:85
-----BEGIN CERTIFICATE-----
MIIEwzCCA6ugAwIBAgICBwQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjAzMzEw
ODI2NTlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDJDM0E1QzBFQjhCNTZG
MTVDMzY1MDRGNjM3QjY3QjJBOTgxOTlGMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDY5SKxF7QfT9X4PyOQuTEzdlLb0zndTx6PNK5xzPlPsO5U5CP3
+TwRM1khOy6lX3Zkukz4TRcBvJVhjc7UD1VBYe78r/9lkYxV10kHPF3vUucYR6w6
PNaq/ScBHayZ8wtCsEndCpHHyluU+34OavTANZ8S0lNK9u06RluHmMJAMSXOLWqN
ElqXAHXCFkd5Z+f3PAHsfcfY7MZXjKkdG1nu1U2KHMhrWAgPR7Adm3F7ihY41ajZ
htEPxnoi39ecp2ut+jQDM9euDyMuM9x7dngVe0BlewbfZkbMjneqow95hNmMPbmG
bmLPAtq0qXc/niNP+g1kqDFQacHftR7Y8N7tAgMBAAGjggHfMIIB2zAdBgNVHQ4E
FgQULDpcDri1bxXDZQT2N7Z7KpgZnyQwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDEyOS9MRHBjRHJpMWJ4WERaUVQyTjdaN0twZ1pueVEucm9h
MCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJAoAa40wDQYJKoZIhvcNAQEL
BQADggEBABox0w/KLOH5tUfPlxuxtpaZDY5nFxoGlJWu/6R7eGeonViG59uH82B8
Fo9coIcR6YIjTtd25DXCZJ6xBnXItzGfcTG3+ZROa+DECYlS0KCoWTR/oOaFay6t
m/QZzVFQdc1KtJipptfQU4is1aCNrtUGCIzp0rL2QNG+dZ+c4QilqXTgs5jG5TqR
J3V7Qct3xR+1HhRUj4SxRvTIzr3ml/OL01QTA2L/Qe3bAPyQUP8AVPUT/RnACOs+
+APzSyuO05FXqF0OMXkfr/cPQTHZG0KTVFuvtSM1zvHus4z5NMSuPFD5Bou6f4Cl
GmnIgec/mumVlzwEsAEGXwZu/DYlQYU=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:42 2026 by rpki-client