Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/MIt6BFdA-E2De-njJ48jsmkVv70.roa
File:                     MIt6BFdA-E2De-njJ48jsmkVv70.roa (raw, json)
Hash identifier:          V5s5zr+F0h/lgMFT/OfUBGWdx7wyOL4nLmzzw2516/c=
Subject key identifier:   30:8B:7A:04:57:40:F8:4D:83:7B:E9:E3:27:8F:23:B2:69:15:BF:BD
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0695
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/MIt6BFdA-E2De-njJ48jsmkVv70.roa
Signing time:             Tue 31 Mar 2026 08:26:10 +0000
ROA not before:           Tue 31 Mar 2026 08:26:10 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:9700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1685 (0x695)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:26:10 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=308B7A045740F84D837BE9E3278F23B26915BFBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ed:41:1e:63:69:f4:75:63:d9:53:ee:c9:e1:
                    85:62:4f:ea:cb:e6:c3:ad:63:c1:56:8c:5b:32:88:
                    c4:77:01:af:d5:b4:69:ce:9d:00:dc:28:55:9d:4f:
                    d8:3d:a8:5a:c6:c6:9b:93:71:84:84:e3:5b:47:ce:
                    b9:5b:7c:ae:90:35:5a:5c:90:ae:e4:61:e4:1e:1a:
                    f0:0d:34:c2:65:74:42:56:df:8d:8b:b6:58:fb:b4:
                    b5:27:16:6d:18:ff:b3:01:bb:13:f5:2e:fb:2e:20:
                    91:8a:ab:ea:71:e9:1f:d1:51:6b:45:f6:71:b1:9d:
                    90:20:87:31:b7:e4:e1:59:cd:25:b4:a5:c8:d9:c0:
                    25:70:4d:31:cf:ff:b9:83:c7:c2:06:3e:02:a0:95:
                    db:34:8b:c8:a3:69:51:2d:00:93:27:8e:de:a2:af:
                    b7:a8:0f:0c:31:ac:24:8b:25:50:cd:7b:d4:79:a0:
                    1f:ba:17:5e:3f:ee:83:d3:f1:a3:23:20:7f:c4:ad:
                    0d:9c:6e:0d:5c:fc:71:1c:3b:ca:fa:8d:f5:96:7b:
                    5d:8d:72:d7:ed:f8:21:36:f5:b4:ef:31:90:70:08:
                    9f:6a:e3:21:fd:d9:14:c6:01:c4:e8:8d:78:33:5b:
                    b7:db:5d:8c:91:41:cd:2e:2f:e2:86:34:40:14:89:
                    41:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:8B:7A:04:57:40:F8:4D:83:7B:E9:E3:27:8F:23:B2:69:15:BF:BD
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/MIt6BFdA-E2De-njJ48jsmkVv70.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:9700::/40

    Signature Algorithm: sha256WithRSAEncryption
         be:28:38:0f:78:af:ad:98:eb:af:95:ae:6a:bd:86:c0:07:ca:
         aa:5c:6e:e3:a8:5c:d2:d3:29:f3:28:a0:d1:1a:db:c5:84:53:
         c7:b2:c2:11:d1:fb:90:8b:a9:fe:19:9a:41:5f:59:d8:cf:44:
         fd:22:fc:01:52:31:ac:a0:ea:79:2c:0f:ce:99:d1:21:97:3f:
         84:0c:90:4e:27:ea:ef:54:81:88:c6:3b:8b:22:24:9e:bc:4a:
         84:c5:fb:67:9b:27:36:ad:e3:c6:ac:d7:81:e3:03:85:dd:99:
         6e:bd:a3:ea:1f:36:1a:67:50:71:9d:60:1e:b2:96:65:a2:5b:
         2c:b8:04:8a:c1:51:9a:2d:dc:7d:bb:39:d2:c8:36:31:de:4b:
         fc:34:cf:d9:1e:9a:a6:84:7a:cd:b9:2b:e1:b0:66:8c:d5:c9:
         8d:b0:d9:60:da:3f:b3:8d:bb:0f:5d:ab:61:13:0b:0b:00:98:
         b9:90:71:e3:1c:42:8d:4c:fb:7c:81:d7:66:eb:19:3c:2c:f1:
         1f:34:e2:8d:9f:75:ed:66:ba:25:24:6d:00:f2:b4:a0:b8:ad:
         fb:cd:e2:dc:7d:95:3e:1d:63:8f:ce:0e:f4:62:09:9d:ea:de:
         a1:3c:99:77:cf:68:59:ec:1e:99:79:0d:e0:20:98:6e:d0:7a:
         c1:f6:41:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:10 2026 by rpki-client