Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/MDyhoCxlg1aiPLO4pm65dZOFKDo.roa
File:                     MDyhoCxlg1aiPLO4pm65dZOFKDo.roa (raw, json)
Hash identifier:          RZVBl2m90vpMZWsZbJbeTfUu1+ob3MpENsz4adWKuro=
Subject key identifier:   30:3C:A1:A0:2C:65:83:56:A2:3C:B3:B8:A6:6E:B9:75:93:85:28:3A
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0767
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/MDyhoCxlg1aiPLO4pm65dZOFKDo.roa
Signing time:             Tue 31 Mar 2026 08:27:48 +0000
ROA not before:           Tue 31 Mar 2026 08:27:48 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:61:2c00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1895 (0x767)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:27:48 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=303CA1A02C658356A23CB3B8A66EB9759385283A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:58:43:41:a8:be:09:40:03:9f:8f:bd:a7:4f:
                    a5:81:9f:64:29:d0:b9:0e:df:73:58:b6:3f:49:d7:
                    c9:6b:f1:fa:c4:45:0b:77:bb:57:4d:4b:93:39:d8:
                    da:02:db:3a:7a:f5:6e:87:11:21:a8:08:20:d9:b6:
                    b3:a1:1b:b8:d5:f2:ea:d7:26:0e:45:c9:47:72:e0:
                    89:2f:45:95:73:2a:aa:0b:05:72:97:a6:0d:6d:cd:
                    48:45:00:f5:1e:88:96:60:2d:f7:9b:e8:65:eb:71:
                    e9:9e:8d:98:62:34:cd:a4:51:27:d2:cd:8d:44:5e:
                    d7:44:d2:e7:85:54:28:ae:f5:22:15:ee:2b:48:23:
                    06:4f:41:9d:b1:c0:c1:1c:5a:68:21:34:7c:ad:b5:
                    3b:5e:1b:66:6a:1c:c4:ce:49:41:38:71:03:d9:7a:
                    79:b3:42:c7:ea:08:1b:a6:5d:27:cf:61:86:1e:97:
                    77:f1:93:fa:51:f9:8a:2b:df:59:b2:65:b0:e0:26:
                    79:3e:37:f5:ef:7d:6f:61:50:44:26:fe:8c:2d:11:
                    11:74:1e:42:11:29:6d:56:07:1f:12:3f:32:1c:04:
                    7d:5f:52:13:a7:58:79:76:cf:9d:5b:e5:da:cc:e5:
                    3a:f3:52:d7:6e:4e:01:84:f6:5b:11:83:1f:a3:33:
                    53:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:3C:A1:A0:2C:65:83:56:A2:3C:B3:B8:A6:6E:B9:75:93:85:28:3A
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/MDyhoCxlg1aiPLO4pm65dZOFKDo.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:2c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         44:c1:54:18:b6:d0:4e:4a:68:29:0f:58:41:0a:e5:8a:a7:5e:
         7b:c4:9b:20:df:83:04:af:eb:af:f9:94:e7:06:e5:a4:13:0e:
         16:e8:7e:df:06:30:71:e4:c2:95:ab:7e:da:79:cc:d5:79:87:
         1a:61:92:51:f1:66:25:c9:30:8b:eb:af:74:ca:27:0c:c8:19:
         c5:de:ab:1e:10:97:f0:9d:17:b4:d2:7f:ae:0d:13:34:b7:60:
         51:bc:e8:8c:1d:7a:a7:ec:93:36:eb:7f:a9:a8:3a:57:82:f0:
         ee:3d:8a:35:5e:86:34:c6:65:05:99:40:61:66:90:d1:72:4c:
         68:38:c5:7a:3d:a0:3c:f9:d8:9d:0f:b1:91:f7:c6:ac:f4:62:
         88:ed:f3:ca:79:8e:ca:cc:53:0a:86:8c:02:93:6a:a5:22:09:
         9b:c6:2a:91:fa:e3:50:24:b9:36:04:5b:af:96:02:82:05:b3:
         dd:18:c8:61:b9:cb:31:36:db:b5:96:0b:31:52:ab:f5:de:87:
         d5:74:41:ff:1d:d5:b5:9c:78:ca:ee:f6:eb:55:32:0b:4d:c1:
         01:cb:3f:0a:f8:5e:70:c7:77:e5:2e:1f:c8:7c:9d:a2:e9:34:
         ab:1a:79:7c:f2:b8:e1:df:63:86:82:b2:b3:a2:61:ed:53:91:
         51:17:6a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:00 2026 by rpki-client