Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/NVpUama1VxclAzVyyKZK7GTMeiE.roa
File:                     NVpUama1VxclAzVyyKZK7GTMeiE.roa (raw, json)
Hash identifier:          +q6uLHSP4sxLxXQF529pwbkBE1dA+6tVp8XYYUa5lSY=
Subject key identifier:   35:5A:54:6A:66:B5:57:17:25:03:35:72:C8:A6:4A:EC:64:CC:7A:21
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0700
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/NVpUama1VxclAzVyyKZK7GTMeiE.roa
Signing time:             Tue 31 Mar 2026 08:26:57 +0000
ROA not before:           Tue 31 Mar 2026 08:26:57 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:be00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1792 (0x700)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:26:57 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=355A546A66B5571725033572C8A64AEC64CC7A21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:15:e8:3f:2b:7e:27:e0:59:58:04:90:6b:92:
                    69:2b:a0:a3:cf:de:52:8c:08:aa:f2:62:b3:0f:46:
                    f7:ad:c5:05:32:cc:8e:92:3e:ff:9c:f8:8b:a3:01:
                    fd:91:cc:43:6d:b3:d7:5b:ea:ca:19:6d:b5:c0:d8:
                    99:62:f4:17:e1:bc:9a:a0:3c:2d:8d:23:a7:8c:07:
                    bc:36:f8:b7:77:0a:bb:35:b5:ac:99:ea:34:6c:cf:
                    a3:d6:d8:3c:ca:7d:02:68:11:00:aa:c5:7c:71:ce:
                    6c:a4:82:96:35:cd:6a:39:3d:04:78:b2:c9:cf:d9:
                    ee:23:a9:c0:b1:a1:f0:dc:bf:f9:ac:17:c4:a4:6d:
                    3b:d6:90:ce:64:bd:2b:d1:cb:34:a7:cc:e6:f9:12:
                    1e:b7:6b:10:7d:d6:dd:e0:89:23:bb:fd:9e:08:a9:
                    7c:85:fa:af:40:d4:5d:d0:7d:03:71:f2:69:25:db:
                    4c:22:75:71:4d:49:d3:af:70:ce:e4:df:5b:a1:e0:
                    de:a2:48:69:9b:e3:b5:61:39:fa:24:c1:91:05:72:
                    6f:03:3d:6e:33:3c:44:52:99:7c:f7:5a:3a:f5:02:
                    f7:7d:71:ab:d2:cd:01:c7:c4:a0:c2:d6:af:2b:87:
                    43:01:d9:dd:28:7c:f1:22:fd:84:25:5d:5c:de:04:
                    6f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:5A:54:6A:66:B5:57:17:25:03:35:72:C8:A6:4A:EC:64:CC:7A:21
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/NVpUama1VxclAzVyyKZK7GTMeiE.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:be00::/40

    Signature Algorithm: sha256WithRSAEncryption
         b5:3d:d4:7e:17:92:39:0e:c7:f9:71:e2:e5:ce:2c:d0:a6:cf:
         f2:86:54:50:ca:3f:9f:a3:dc:6e:5c:70:e0:63:7c:e6:de:46:
         82:d8:d0:dc:17:17:2a:12:74:67:2d:2b:92:2f:74:7c:7a:ad:
         8f:31:e2:9d:4a:24:a1:23:38:3b:a7:f0:00:01:01:87:03:5f:
         9e:65:55:69:9e:70:c3:ea:97:d9:0c:5e:2b:e3:46:d5:c3:aa:
         eb:30:b8:93:b4:e6:4b:91:5c:8b:ba:df:b9:f1:4f:8f:3c:91:
         6b:9a:79:84:cb:97:05:17:ec:6d:38:93:7d:df:b0:72:02:78:
         2e:24:e7:3d:6f:23:9b:3e:79:e8:27:7e:07:86:91:bc:15:d1:
         23:5b:48:96:1f:e6:b2:af:d8:bc:f4:47:57:d8:3c:fe:01:c9:
         74:df:77:22:52:71:d9:5a:ce:b2:bf:3c:4b:a9:2b:a9:ce:c2:
         45:1b:25:32:f2:7c:c5:bd:21:4b:a6:cc:b6:33:c2:b8:de:a9:
         4b:78:05:40:9c:27:36:fe:a6:2d:e1:96:0f:5e:c0:ff:d2:fc:
         d7:6e:0a:4e:b7:4f:e3:45:43:83:43:c5:1b:08:e1:e6:6a:58:
         14:5d:23:be:ca:81:5c:9b:d5:28:c8:df:14:70:df:50:25:50:
         57:54:ab:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:09 2026 by rpki-client