Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/LvWBPTj-ivbbLUZ12VtIlEJZtIk.roa
File:                     LvWBPTj-ivbbLUZ12VtIlEJZtIk.roa (raw, json)
Hash identifier:          nJ/T/RW+CvLhd7hl78vUYHI+C/UrSYn9G4ugMys2swE=
Subject key identifier:   2E:F5:81:3D:38:FE:8A:F6:DB:2D:46:75:D9:5B:48:94:42:59:B4:89
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       070D
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/LvWBPTj-ivbbLUZ12VtIlEJZtIk.roa
Signing time:             Tue 31 Mar 2026 08:27:07 +0000
ROA not before:           Tue 31 Mar 2026 08:27:07 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:6600::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1805 (0x70d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:27:07 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=2EF5813D38FE8AF6DB2D4675D95B48944259B489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:99:e8:9b:a9:a2:3f:5f:6f:25:dd:49:14:57:
                    98:5c:7a:bf:84:34:b2:d1:22:d8:eb:6a:dd:c0:be:
                    f9:03:2a:83:7c:24:64:a6:46:a0:48:00:c7:34:76:
                    89:bb:04:e1:8a:5c:ab:c0:46:a1:92:1e:17:66:b1:
                    10:4c:df:7d:b2:7b:90:c6:e2:50:3e:5a:29:67:82:
                    6b:e5:f4:25:51:6b:a7:39:d2:78:64:e9:04:ef:2b:
                    f1:8e:07:6c:9b:81:51:2a:e7:35:9b:d7:58:97:c4:
                    a1:c4:54:8c:f5:13:1a:45:54:05:bb:6e:1b:5e:ae:
                    0c:23:f3:67:a6:0e:df:0d:fb:d4:49:69:8b:60:69:
                    54:90:63:a4:2a:77:bf:5e:c8:97:79:01:df:69:9b:
                    aa:8b:2a:6c:72:71:18:38:27:f0:ce:23:8d:c0:03:
                    e7:ff:53:0f:91:50:b7:09:79:05:1d:67:d9:32:2b:
                    52:d7:49:60:41:7b:55:67:1c:02:73:c4:d2:08:14:
                    49:c9:83:9b:1c:16:d7:f7:8e:75:5d:b0:cc:f3:e7:
                    00:58:73:08:2d:e9:22:ce:43:59:41:5b:41:82:a3:
                    f9:0f:57:03:8d:4a:7a:d7:17:cc:44:84:86:40:22:
                    f5:99:ac:63:a4:97:26:1e:10:c3:3a:ab:28:04:a5:
                    17:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:F5:81:3D:38:FE:8A:F6:DB:2D:46:75:D9:5B:48:94:42:59:B4:89
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/LvWBPTj-ivbbLUZ12VtIlEJZtIk.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:6600::/40

    Signature Algorithm: sha256WithRSAEncryption
         12:48:34:cf:4d:8d:17:37:6c:af:6d:2e:57:1f:47:d3:05:2b:
         e2:44:8f:dc:26:a5:be:a7:67:f0:0a:4f:e5:61:cb:4d:c0:d4:
         bc:7a:20:82:31:9b:8f:22:13:73:4d:b0:1e:39:e9:22:63:98:
         22:81:16:ea:15:b7:f1:1c:46:3f:23:fa:be:aa:b9:9f:7c:c1:
         aa:fa:9f:29:a0:36:47:17:0d:a9:02:c1:1a:61:e6:cd:98:3d:
         1f:a1:59:c8:42:2f:7c:c5:fb:a5:e0:e9:02:09:b6:84:ef:01:
         aa:15:0c:c0:93:2c:58:47:d5:86:df:f9:99:e7:39:9e:2a:3e:
         c3:30:61:ef:bf:d1:85:d8:79:1d:83:ce:67:f4:08:42:a7:46:
         47:d2:03:04:b1:95:fd:ca:38:e4:55:bd:da:58:e3:03:32:00:
         68:35:05:5e:9a:2a:c6:0f:d8:6c:48:d7:9b:7e:36:2f:28:34:
         96:7f:05:65:e3:cc:bc:75:cd:f7:c2:33:d9:31:ff:07:2c:89:
         55:92:ba:83:41:56:f2:32:8d:4e:a1:b2:44:3d:84:56:b9:bf:
         78:4d:4d:36:22:32:ca:1f:fd:cf:24:af:54:fc:ad:58:51:2b:
         2e:09:78:36:13:61:dd:45:4b:5c:03:26:f2:71:a9:fb:d4:6b:
         e1:10:ab:b2
-----BEGIN CERTIFICATE-----
MIIEwzCCA6ugAwIBAgICBw0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjAzMzEw
ODI3MDdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDJFRjU4MTNEMzhGRThB
RjZEQjJENDY3NUQ5NUI0ODk0NDI1OUI0ODkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCqmeibqaI/X28l3UkUV5hcer+ENLLRItjrat3AvvkDKoN8JGSm
RqBIAMc0dom7BOGKXKvARqGSHhdmsRBM332ye5DG4lA+Wilngmvl9CVRa6c50nhk
6QTvK/GOB2ybgVEq5zWb11iXxKHEVIz1ExpFVAW7bhtergwj82emDt8N+9RJaYtg
aVSQY6Qqd79eyJd5Ad9pm6qLKmxycRg4J/DOI43AA+f/Uw+RULcJeQUdZ9kyK1LX
SWBBe1VnHAJzxNIIFEnJg5scFtf3jnVdsMzz5wBYcwgt6SLOQ1lBW0GCo/kPVwON
SnrXF8xEhIZAIvWZrGOklyYeEMM6qygEpRdBAgMBAAGjggHfMIIB2zAdBgNVHQ4E
FgQULvWBPTj+ivbbLUZ12VtIlEJZtIkwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDEyOS9MdldCUFRqLWl2YmJMVVoxMlZ0SWxFSlp0SWsucm9h
MCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJAoAa2YwDQYJKoZIhvcNAQEL
BQADggEBABJINM9NjRc3bK9tLlcfR9MFK+JEj9wmpb6nZ/AKT+Vhy03A1Lx6IIIx
m48iE3NNsB456SJjmCKBFuoVt/EcRj8j+r6quZ98war6nymgNkcXDakCwRph5s2Y
PR+hWchCL3zF+6Xg6QIJtoTvAaoVDMCTLFhH1Ybf+ZnnOZ4qPsMwYe+/0YXYeR2D
zmf0CEKnRkfSAwSxlf3KOORVvdpY4wMyAGg1BV6aKsYP2GxI15t+Ni8oNJZ/BWXj
zLx1zffCM9kx/wcsiVWSuoNBVvIyjU6hskQ9hFa5v3hNTTYiMsof/c8kr1T8rVhR
Ky4JeDYTYd1FS1wDJvJxqfvUa+EQq7I=
-----END CERTIFICATE-----
Generated at Tue Apr 7 22:26:38 2026 by rpki-client