Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/OltZiPfqS21r6V3JXw9BZmeyoyQ.roa
File:                     OltZiPfqS21r6V3JXw9BZmeyoyQ.roa (raw, json)
Hash identifier:          yrA+ECTEEK0GrTr8gR+KAyy/PsDPDsUs/1u0EWhB010=
Subject key identifier:   3A:5B:59:88:F7:EA:4B:6D:6B:E9:5D:C9:5F:0F:41:66:67:B2:A3:24
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0784
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/OltZiPfqS21r6V3JXw9BZmeyoyQ.roa
Signing time:             Tue 31 Mar 2026 08:28:05 +0000
ROA not before:           Tue 31 Mar 2026 08:28:05 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:61:6c00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1924 (0x784)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:28:05 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=3A5B5988F7EA4B6D6BE95DC95F0F416667B2A324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:8c:e7:48:16:0c:07:09:50:cc:b3:70:2a:d7:
                    f3:df:c1:05:44:62:a3:79:60:53:4b:fd:c7:29:0c:
                    b7:c9:d5:f2:10:95:d9:03:21:08:a2:74:8a:3c:f8:
                    97:e2:76:2c:42:38:4d:68:ff:24:4e:31:12:b4:16:
                    58:69:90:ca:91:78:1f:e0:ca:15:6b:62:d5:4e:ee:
                    a9:d9:89:46:a4:b9:aa:70:f5:6b:ac:4c:32:ed:e4:
                    b8:2d:53:a6:f3:c4:76:c6:9f:b9:ea:e9:fe:2e:dd:
                    b7:70:1e:95:dc:d4:0c:de:31:d7:35:02:cb:9a:d5:
                    1b:36:55:b9:e7:01:31:5e:db:f0:53:d6:33:0b:63:
                    48:12:66:12:d2:eb:12:30:df:11:b8:e6:55:c8:c4:
                    b9:7b:8a:d9:0a:30:e3:46:bf:73:75:27:17:0e:41:
                    fa:90:cd:eb:59:3f:61:d8:8d:7e:cc:ee:58:4a:69:
                    d0:ba:5a:73:14:07:aa:e8:57:8e:58:d8:e7:f8:18:
                    14:8d:57:10:61:40:4f:f2:28:6b:05:8b:69:a1:43:
                    5e:77:a1:9a:18:eb:30:61:fe:c5:a1:d9:e3:85:cf:
                    41:5a:30:4c:df:cb:ec:d2:bd:ec:03:34:32:85:f2:
                    93:23:f9:8f:4f:6d:54:7f:95:97:47:4c:e1:90:a9:
                    66:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:5B:59:88:F7:EA:4B:6D:6B:E9:5D:C9:5F:0F:41:66:67:B2:A3:24
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/OltZiPfqS21r6V3JXw9BZmeyoyQ.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:6c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         42:81:5c:c5:49:40:23:ae:36:50:2b:83:1f:38:8f:6e:56:76:
         23:91:f5:b5:e0:50:46:fd:70:7f:0a:b7:30:95:a4:f3:63:5c:
         6c:a8:0e:d9:ca:94:1d:d1:b1:6b:3c:07:fb:7f:d2:70:40:ff:
         f5:d1:f4:72:ba:5a:87:0a:18:87:29:cf:aa:d5:e2:0a:46:d6:
         f4:4c:71:98:95:5c:19:b7:bc:5f:f6:4d:04:7d:3b:91:a3:49:
         6a:9d:d9:fe:bb:ba:9c:15:e5:e9:4c:64:d5:4b:79:09:28:fe:
         94:f0:49:99:fa:57:31:86:0c:55:6a:77:f1:5d:0a:4e:d2:ac:
         36:a1:1d:fb:f1:6a:d9:28:ff:2f:50:1f:72:ca:61:c7:6f:a6:
         c4:b8:09:aa:da:0d:3b:74:f5:1e:d4:63:53:9d:cc:00:58:f8:
         c5:f8:91:7d:dd:bb:12:f2:4d:6e:6c:8d:73:ee:2d:13:a9:b5:
         dd:82:25:e7:e6:2e:fd:6a:d0:a3:79:6d:30:0e:da:45:b7:33:
         ce:9e:24:06:cc:43:2c:a4:5d:4d:55:5e:86:fa:4f:28:52:e6:
         90:1c:0a:cf:66:c5:f0:94:2e:8b:96:c4:cd:17:df:d6:6d:42:
         e9:86:2d:9f:cf:63:a3:e2:e4:2b:a9:e9:85:7d:92:20:f6:55:
         e3:16:3e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 22:26:35 2026 by rpki-client