Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/OFBpW6NoFj8FOaebGWt_1bsOcAw.roa
File:                     OFBpW6NoFj8FOaebGWt_1bsOcAw.roa (raw, json)
Hash identifier:          YSGukDBzZV8a6vxShKEyjW+cuuSZmWR29X+ZYfSiJ/o=
Subject key identifier:   38:50:69:5B:A3:68:16:3F:05:39:A7:9B:19:6B:7F:D5:BB:0E:70:0C
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       066B
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/OFBpW6NoFj8FOaebGWt_1bsOcAw.roa
Signing time:             Tue 31 Mar 2026 08:25:47 +0000
ROA not before:           Tue 31 Mar 2026 08:25:47 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:f600::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1643 (0x66b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:25:47 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=3850695BA368163F0539A79B196B7FD5BB0E700C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9f:48:db:51:2c:9f:eb:9f:02:e7:6a:dd:51:
                    79:39:60:00:b3:9c:af:dd:1c:f6:f6:22:fa:5e:38:
                    ee:b3:c9:ad:93:9a:0d:77:f3:ef:27:d6:28:77:b9:
                    8e:29:6b:32:9a:44:c4:b3:08:de:e9:48:9e:90:7b:
                    cb:30:2c:db:c9:9b:a6:70:33:76:5f:87:0d:b4:76:
                    47:6e:1c:4d:af:01:bd:47:ed:53:12:2f:e4:5d:10:
                    bd:47:76:fd:a4:24:2b:c3:89:26:e7:9a:8f:22:1d:
                    92:58:a4:e5:7f:1c:39:7c:ba:ac:31:c1:74:e7:49:
                    9a:15:e4:48:53:b5:a4:9f:b9:db:9b:54:c3:fd:17:
                    8c:ae:9f:2f:be:c2:0d:8a:c2:1f:ee:2e:7a:8d:19:
                    5f:96:e6:c9:51:6d:60:f9:1a:4c:8b:2c:eb:22:ea:
                    44:4e:1e:a6:b3:b3:66:e2:2c:b9:39:f1:8b:f6:3c:
                    10:b8:30:b0:93:ec:f8:89:39:be:1a:7f:f8:84:d4:
                    d4:a2:10:61:fe:33:02:0c:7a:a6:46:f5:46:45:3f:
                    75:1e:2e:95:95:19:50:eb:82:2e:b9:3d:e3:88:92:
                    cd:31:3d:c2:9a:98:ea:a7:6d:fb:45:a7:3a:02:b9:
                    85:66:64:47:42:b7:d4:34:8c:b1:3c:6f:03:61:10:
                    7a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:50:69:5B:A3:68:16:3F:05:39:A7:9B:19:6B:7F:D5:BB:0E:70:0C
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/OFBpW6NoFj8FOaebGWt_1bsOcAw.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:f600::/40

    Signature Algorithm: sha256WithRSAEncryption
         07:2a:ee:48:6f:1a:fc:ef:af:ac:cc:ea:09:4e:7f:d5:e9:56:
         12:56:5a:0f:c1:8f:67:d7:36:0b:f5:1c:4d:23:5d:b0:60:67:
         94:36:4f:4c:be:37:be:96:84:42:42:c8:bd:1e:aa:21:69:ff:
         75:6a:2d:c8:06:12:c1:69:70:63:f5:40:bd:d9:f8:e4:8c:29:
         e8:1e:73:9c:4f:d9:b2:ba:af:a2:aa:af:9c:e9:9c:c8:5f:91:
         8f:83:09:f2:d7:0a:bd:f2:ae:13:e8:36:fc:4e:3c:52:da:28:
         55:ee:40:45:79:00:2c:7c:09:9c:38:0b:fd:2e:a5:28:55:2b:
         c7:2d:82:96:29:a3:fa:9f:3d:57:6e:18:4c:35:23:b0:eb:f9:
         d6:59:d5:14:95:89:af:00:d2:99:34:61:a4:82:4c:2f:0d:3a:
         ea:af:32:c4:c0:1b:e2:5b:5c:41:38:e2:ef:2a:60:fa:29:53:
         45:3a:e8:5f:f8:69:60:fb:9e:18:0f:3f:29:68:18:01:25:a2:
         f3:40:3b:21:80:87:85:0f:58:e2:e0:aa:44:56:f4:c1:f3:e5:
         d3:0d:4c:ad:b9:c4:5c:6a:76:1e:a1:63:38:c2:ab:25:e7:02:
         81:c1:f3:01:4b:ed:72:af:23:be:3c:63:7e:0e:0c:d6:29:03:
         9c:6a:2a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:01 2026 by rpki-client