Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/M1eqn9KDQW_QqxdLH5jaCNNkkz8.roa
File:                     M1eqn9KDQW_QqxdLH5jaCNNkkz8.roa (raw, json)
Hash identifier:          p3Qv0OiNLrKpZ7CBRubhWccCrlB0krfaK13OOUoc2Q0=
Subject key identifier:   33:57:AA:9F:D2:83:41:6F:D0:AB:17:4B:1F:98:DA:08:D3:64:93:3F
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0659
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/M1eqn9KDQW_QqxdLH5jaCNNkkz8.roa
Signing time:             Tue 31 Mar 2026 08:25:37 +0000
ROA not before:           Tue 31 Mar 2026 08:25:37 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:1200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1625 (0x659)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:25:37 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=3357AA9FD283416FD0AB174B1F98DA08D364933F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:13:95:8f:fc:a2:32:a7:6a:16:fd:f4:f5:0e:
                    27:6b:c1:a6:37:d8:71:24:c6:f2:e6:ba:c2:64:3e:
                    d6:3b:33:b1:9a:3d:cb:b5:9a:44:22:50:a1:a0:f4:
                    4d:74:a8:f2:11:e3:cc:80:63:be:ae:61:43:79:7b:
                    20:c0:2f:54:bf:6a:e9:84:ed:81:4d:ee:a6:a4:5b:
                    30:f7:16:a4:fb:fb:e5:72:d5:5b:b8:f6:9e:65:1a:
                    05:b3:47:c5:91:54:c6:c8:83:b7:8a:ff:09:2f:64:
                    ce:58:75:50:69:e9:cb:ef:f1:ce:1f:b3:3b:81:31:
                    6a:b3:d1:45:a0:54:62:3f:3e:66:31:bf:81:de:a4:
                    14:52:3e:a9:fe:a6:69:9b:62:a9:81:0f:62:03:59:
                    e4:b7:8b:9e:28:76:3a:e8:f8:4f:46:1a:ec:45:d9:
                    66:40:de:f2:35:94:2c:e5:50:a9:ef:57:17:aa:78:
                    71:f5:2b:43:85:9f:eb:ec:b7:f3:97:b1:91:1a:b3:
                    78:63:c2:b4:75:1a:a0:f2:05:fd:a9:b5:91:b8:18:
                    d6:0f:49:2f:61:b2:fc:c6:7b:bf:a6:12:98:21:00:
                    60:24:b0:bb:53:2a:e5:5b:23:7c:c9:44:4d:8d:b4:
                    9f:76:e0:22:81:4a:32:a1:b6:28:4c:6a:b8:96:a7:
                    b9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:57:AA:9F:D2:83:41:6F:D0:AB:17:4B:1F:98:DA:08:D3:64:93:3F
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/M1eqn9KDQW_QqxdLH5jaCNNkkz8.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:1200::/40

    Signature Algorithm: sha256WithRSAEncryption
         9d:68:9e:de:9c:86:63:74:51:8a:7b:6b:7a:32:07:03:98:d0:
         35:74:e6:f9:b9:d3:17:b3:ca:dc:aa:f4:7d:b2:e5:d0:55:c4:
         4f:ba:b3:ad:b3:d2:0b:b7:3b:05:8d:43:39:43:91:f7:75:4b:
         19:16:dd:5a:b6:6c:e4:5d:dc:82:39:32:f7:e8:69:bf:5a:08:
         5b:ff:d6:50:66:2d:1f:e1:33:cf:e8:4a:c2:16:0f:1f:1c:20:
         e7:50:10:8b:c3:7d:71:5b:76:d8:cf:c2:0b:e2:95:f1:6f:03:
         13:92:c6:04:a4:64:2c:ca:2f:cc:30:83:0f:b8:37:f2:fc:13:
         54:d7:2f:6a:0d:50:cf:e3:91:49:3e:48:3c:2f:87:6d:23:15:
         61:b4:d0:35:05:61:25:18:ab:22:20:8c:63:24:1d:08:9f:8d:
         86:d8:c7:f0:31:80:69:9c:09:7c:aa:4c:49:ff:34:c3:6c:f9:
         6e:13:a1:a6:bb:68:03:90:1f:f2:be:27:7c:93:06:b6:79:05:
         1c:83:9d:ac:53:46:06:94:40:26:0b:d3:15:35:7a:4b:78:28:
         5b:13:23:4b:01:1b:33:11:99:15:c6:b2:a9:37:46:0c:3f:8e:
         50:17:8e:45:08:f8:0d:57:f1:fd:4d:e6:6a:83:c3:53:35:49:
         92:7b:18:08
-----BEGIN CERTIFICATE-----
MIIEwzCCA6ugAwIBAgICBlkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjAzMzEw
ODI1MzdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDMzNTdBQTlGRDI4MzQx
NkZEMEFCMTc0QjFGOThEQTA4RDM2NDkzM0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC4E5WP/KIyp2oW/fT1DidrwaY32HEkxvLmusJkPtY7M7GaPcu1
mkQiUKGg9E10qPIR48yAY76uYUN5eyDAL1S/aumE7YFN7qakWzD3FqT7++Vy1Vu4
9p5lGgWzR8WRVMbIg7eK/wkvZM5YdVBp6cvv8c4fszuBMWqz0UWgVGI/PmYxv4He
pBRSPqn+pmmbYqmBD2IDWeS3i54odjro+E9GGuxF2WZA3vI1lCzlUKnvVxeqeHH1
K0OFn+vst/OXsZEas3hjwrR1GqDyBf2ptZG4GNYPSS9hsvzGe7+mEpghAGAksLtT
KuVbI3zJRE2NtJ924CKBSjKhtihMariWp7mjAgMBAAGjggHfMIIB2zAdBgNVHQ4E
FgQUM1eqn9KDQW/QqxdLH5jaCNNkkz8wHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDEyOS9NMWVxbjlLRFFXX1FxeGRMSDVqYUNOTmtrejgucm9h
MCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJAoAaxIwDQYJKoZIhvcNAQEL
BQADggEBAJ1ont6chmN0UYp7a3oyBwOY0DV05vm50xezytyq9H2y5dBVxE+6s62z
0gu3OwWNQzlDkfd1SxkW3Vq2bORd3II5Mvfoab9aCFv/1lBmLR/hM8/oSsIWDx8c
IOdQEIvDfXFbdtjPwgvilfFvAxOSxgSkZCzKL8wwgw+4N/L8E1TXL2oNUM/jkUk+
SDwvh20jFWG00DUFYSUYqyIgjGMkHQifjYbYx/AxgGmcCXyqTEn/NMNs+W4Toaa7
aAOQH/K+J3yTBrZ5BRyDnaxTRgaUQCYL0xU1ekt4KFsTI0sBGzMRmRXGsqk3Rgw/
jlAXjkUI+A1X8f1N5mqDw1M1SZJ7GAg=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:55 2026 by rpki-client