Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/MhFeWkkR9HLrfqzigVCab_B4_gc.roa
File:                     MhFeWkkR9HLrfqzigVCab_B4_gc.roa (raw, json)
Hash identifier:          6jsUoZzrPuseLpQXZl91c2S6nsZrHNt0gp6OsCdHjKM=
Subject key identifier:   32:11:5E:5A:49:11:F4:72:EB:7E:AC:E2:81:50:9A:6F:F0:78:FE:07
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0782
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/MhFeWkkR9HLrfqzigVCab_B4_gc.roa
Signing time:             Tue 31 Mar 2026 08:28:02 +0000
ROA not before:           Tue 31 Mar 2026 08:28:02 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:61:6000::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1922 (0x782)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:28:02 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=32115E5A4911F472EB7EACE281509A6FF078FE07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2a:43:34:f7:fa:70:ee:12:32:c6:b0:47:c3:
                    98:ba:00:55:89:80:f8:c5:a7:7a:f3:f5:3d:ca:48:
                    d0:7e:4f:5d:a6:9d:64:93:94:06:ef:91:d9:21:60:
                    f9:4a:79:7b:d6:34:58:90:dc:d0:9b:77:e5:13:d1:
                    64:a6:51:25:18:fd:99:44:be:94:d0:46:0d:93:74:
                    5a:6e:f0:e8:81:0b:98:a1:6d:30:e0:7b:57:d5:42:
                    30:27:ec:c4:37:77:61:25:f2:8b:bf:21:3e:d9:1a:
                    3c:43:54:08:b1:88:99:3c:6a:66:8f:8c:79:9e:79:
                    7a:8f:0d:4d:b0:16:a9:c3:1a:d8:6a:53:05:f8:30:
                    e7:ec:d8:6a:17:2f:54:6c:6a:8b:4a:0c:26:16:d3:
                    d6:e7:70:88:c9:52:33:5b:f4:06:21:e2:18:96:13:
                    02:9f:bc:59:1b:73:c2:25:07:6d:c3:09:3a:61:8c:
                    1d:ae:4c:30:d6:38:75:04:e8:47:9b:f3:f3:2f:77:
                    70:f7:50:db:68:58:20:f7:87:34:91:ac:73:07:a5:
                    19:a6:e6:7e:2f:4c:e2:68:4d:ce:e5:cb:52:fd:a3:
                    7a:52:c8:d5:15:af:99:70:1d:bb:ad:06:bf:ad:d9:
                    5b:27:a3:1a:93:13:49:fb:60:4a:17:88:3b:78:e3:
                    25:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:11:5E:5A:49:11:F4:72:EB:7E:AC:E2:81:50:9A:6F:F0:78:FE:07
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/MhFeWkkR9HLrfqzigVCab_B4_gc.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:6000::/37

    Signature Algorithm: sha256WithRSAEncryption
         87:c4:3a:53:f1:59:41:c1:41:ec:a7:96:c6:da:4e:f4:ce:0d:
         2c:e6:c2:94:e7:37:a6:f2:c2:19:80:2c:3f:23:21:a9:60:38:
         33:c2:88:38:85:be:5f:6d:ca:16:d1:7e:85:b1:95:74:ca:23:
         7a:c4:b1:47:06:f2:a0:73:7f:a6:2e:e1:8c:45:c9:03:de:0c:
         a1:55:b2:61:f3:f7:dd:05:5b:a4:1c:05:97:9c:af:da:bb:08:
         ff:be:cd:5c:d0:e8:7a:5b:39:77:7c:1d:34:49:84:d6:84:e6:
         28:99:98:ef:90:b3:40:e0:50:f7:c1:a0:20:56:e2:34:91:3f:
         cf:d5:2a:42:7c:4f:fa:20:db:c1:48:db:0e:5a:4e:39:2e:45:
         49:e6:ed:72:55:45:b9:fa:0f:ae:e5:3e:21:50:c0:93:79:8c:
         d4:7c:61:5a:8e:51:75:b4:c0:15:23:b6:44:56:02:50:40:43:
         dc:d7:5c:5f:6d:ba:a3:09:ea:6e:1d:77:44:4a:50:e0:3a:b1:
         37:12:89:69:14:25:85:67:2b:27:96:3d:ec:44:33:5f:47:fa:
         8b:90:44:ef:e5:b9:1d:03:5a:63:f9:fd:ce:0f:11:c7:24:f7:
         6d:3f:87:cb:24:1d:c3:d3:44:67:13:df:9d:69:64:37:f7:65:
         f4:a3:8c:32
-----BEGIN CERTIFICATE-----
MIIEwzCCA6ugAwIBAgICB4IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjAzMzEw
ODI4MDJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDMyMTE1RTVBNDkxMUY0
NzJFQjdFQUNFMjgxNTA5QTZGRjA3OEZFMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCgKkM09/pw7hIyxrBHw5i6AFWJgPjFp3rz9T3KSNB+T12mnWST
lAbvkdkhYPlKeXvWNFiQ3NCbd+UT0WSmUSUY/ZlEvpTQRg2TdFpu8OiBC5ihbTDg
e1fVQjAn7MQ3d2El8ou/IT7ZGjxDVAixiJk8amaPjHmeeXqPDU2wFqnDGthqUwX4
MOfs2GoXL1RsaotKDCYW09bncIjJUjNb9AYh4hiWEwKfvFkbc8IlB23DCTphjB2u
TDDWOHUE6Eeb8/Mvd3D3UNtoWCD3hzSRrHMHpRmm5n4vTOJoTc7ly1L9o3pSyNUV
r5lwHbutBr+t2VsnoxqTE0n7YEoXiDt44yXnAgMBAAGjggHfMIIB2zAdBgNVHQ4E
FgQUMhFeWkkR9HLrfqzigVCab/B4/gcwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDEyOS9NaEZlV2trUjlITHJmcXppZ1ZDYWJfQjRfZ2Mucm9h
MCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYDJAoAYWAwDQYJKoZIhvcNAQEL
BQADggEBAIfEOlPxWUHBQeynlsbaTvTODSzmwpTnN6bywhmALD8jIalgODPCiDiF
vl9tyhbRfoWxlXTKI3rEsUcG8qBzf6Yu4YxFyQPeDKFVsmHz990FW6QcBZecr9q7
CP++zVzQ6HpbOXd8HTRJhNaE5iiZmO+Qs0DgUPfBoCBW4jSRP8/VKkJ8T/og28FI
2w5aTjkuRUnm7XJVRbn6D67lPiFQwJN5jNR8YVqOUXW0wBUjtkRWAlBAQ9zXXF9t
uqMJ6m4dd0RKUOA6sTcSiWkUJYVnKyeWPexEM19H+ouQRO/luR0DWmP5/c4PEcck
920/h8skHcPTRGcT351pZDf3ZfSjjDI=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:42 2026 by rpki-client