Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/PUtK_Fqxyr6tqe4xd2JtSXjevkw.roa
File:                     PUtK_Fqxyr6tqe4xd2JtSXjevkw.roa (raw, json)
Hash identifier:          DxDJgP9OJ/SE5GVn5HqwKpG9Vh7NaVGwjjeVge/vwYo=
Subject key identifier:   3D:4B:4A:FC:5A:B1:CA:BE:AD:A9:EE:31:77:62:6D:49:78:DE:BE:4C
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       068C
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/PUtK_Fqxyr6tqe4xd2JtSXjevkw.roa
Signing time:             Tue 31 Mar 2026 08:26:06 +0000
ROA not before:           Tue 31 Mar 2026 08:26:06 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:b000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1676 (0x68c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:26:06 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=3D4B4AFC5AB1CABEADA9EE3177626D4978DEBE4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:94:db:d5:8f:11:e1:aa:c4:c8:79:98:63:29:
                    ac:c5:e2:5e:1b:92:3a:60:d2:5b:e9:56:06:2e:4b:
                    a7:c4:58:31:e9:e1:ee:69:20:9c:79:98:cf:24:c1:
                    36:a2:29:a0:85:9d:21:f8:4d:51:be:e6:23:7f:91:
                    d6:75:f6:54:56:10:cc:13:33:07:75:9d:3a:a3:9f:
                    a7:2d:95:70:a8:44:b6:b5:8f:75:c6:d7:e4:f7:05:
                    30:e4:b2:ce:b4:b0:8c:ab:8d:5e:f0:1d:96:98:a4:
                    a1:3a:bf:38:5f:89:0c:2c:8f:1d:f1:81:03:84:45:
                    b9:27:91:82:34:e9:90:32:c0:41:9c:30:e0:42:19:
                    c9:de:8f:f8:a9:0d:79:90:62:e6:05:c3:a9:a3:fe:
                    16:00:b4:c2:89:0b:87:1f:26:4c:4c:ab:72:e0:0f:
                    01:54:7b:b1:f3:ef:b1:da:17:7e:a7:d6:d7:6e:6a:
                    05:5b:72:aa:59:dd:40:d1:c6:4d:83:b9:eb:c5:25:
                    5c:27:06:85:82:e7:a5:83:c8:51:67:0c:93:5b:96:
                    e3:e7:7e:57:dd:ab:4d:cd:93:b9:23:bc:3a:27:b2:
                    73:81:55:7a:99:91:5e:54:51:cb:19:79:c4:b2:4f:
                    85:d1:b9:b5:57:ae:31:39:86:a8:59:86:ba:c9:03:
                    79:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:4B:4A:FC:5A:B1:CA:BE:AD:A9:EE:31:77:62:6D:49:78:DE:BE:4C
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/PUtK_Fqxyr6tqe4xd2JtSXjevkw.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:b000::/40

    Signature Algorithm: sha256WithRSAEncryption
         69:9f:34:8e:35:ae:dc:5f:45:2f:cc:bf:60:7f:de:3c:95:a2:
         f1:31:d6:cb:6d:76:d2:d0:6f:84:2c:47:af:1e:6c:0b:b5:3d:
         1f:67:77:b9:7e:9d:50:c1:d2:65:50:ae:e0:98:a9:8d:87:96:
         db:ee:de:4f:49:a2:ec:ce:5e:41:6d:3a:1f:1b:5a:62:d8:4c:
         87:34:0b:e8:de:c2:93:3c:bb:b5:9f:44:42:bf:24:44:e8:bc:
         a0:4a:17:3f:44:33:c9:e8:1a:b5:91:88:3b:96:39:48:68:ac:
         22:ee:36:f1:06:c4:b5:8d:a0:bd:d4:22:d3:9e:a3:04:73:b1:
         bd:cd:43:b7:03:58:ef:2b:22:83:b2:8c:1b:b0:ed:12:45:be:
         e2:0a:08:6d:7a:01:3b:ab:e4:a6:e7:e9:e7:3d:51:70:0f:1e:
         87:10:3a:ee:00:a2:64:cc:75:8a:bb:20:aa:be:77:02:2d:84:
         36:8d:3f:48:00:bf:8c:af:88:59:47:62:18:98:12:98:95:fa:
         9c:13:c5:bb:fd:0e:5b:c1:e8:3b:28:d4:06:a0:b5:17:79:0a:
         9f:58:72:8a:8e:d2:82:c6:45:1c:35:5c:ed:73:df:70:f2:ec:
         59:6c:f2:73:67:46:de:8b:39:a2:f9:28:7a:76:01:31:cd:fe:
         67:2d:fa:69
-----BEGIN CERTIFICATE-----
MIIEwzCCA6ugAwIBAgICBowwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjAzMzEw
ODI2MDZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDNENEI0QUZDNUFCMUNB
QkVBREE5RUUzMTc3NjI2RDQ5NzhERUJFNEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFlNvVjxHhqsTIeZhjKazF4l4bkjpg0lvpVgYuS6fEWDHp4e5p
IJx5mM8kwTaiKaCFnSH4TVG+5iN/kdZ19lRWEMwTMwd1nTqjn6ctlXCoRLa1j3XG
1+T3BTDkss60sIyrjV7wHZaYpKE6vzhfiQwsjx3xgQOERbknkYI06ZAywEGcMOBC
Gcnej/ipDXmQYuYFw6mj/hYAtMKJC4cfJkxMq3LgDwFUe7Hz77HaF36n1tduagVb
cqpZ3UDRxk2DuevFJVwnBoWC56WDyFFnDJNbluPnflfdq03Nk7kjvDonsnOBVXqZ
kV5UUcsZecSyT4XRubVXrjE5hqhZhrrJA3kbAgMBAAGjggHfMIIB2zAdBgNVHQ4E
FgQUPUtK/Fqxyr6tqe4xd2JtSXjevkwwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDEyOS9QVXRLX0ZxeHlyNnRxZTR4ZDJKdFNYamV2a3cucm9h
MCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJAoAa7AwDQYJKoZIhvcNAQEL
BQADggEBAGmfNI41rtxfRS/Mv2B/3jyVovEx1sttdtLQb4QsR68ebAu1PR9nd7l+
nVDB0mVQruCYqY2Hltvu3k9JouzOXkFtOh8bWmLYTIc0C+jewpM8u7WfREK/JETo
vKBKFz9EM8noGrWRiDuWOUhorCLuNvEGxLWNoL3UItOeowRzsb3NQ7cDWO8rIoOy
jBuw7RJFvuIKCG16ATur5Kbn6ec9UXAPHocQOu4AomTMdYq7IKq+dwIthDaNP0gA
v4yviFlHYhiYEpiV+pwTxbv9DlvB6Dso1AagtRd5Cp9YcoqO0oLGRRw1XO1z33Dy
7Fls8nNnRt6LOaL5KHp2ATHN/mct+mk=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:28 2026 by rpki-client