Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Qtk6grmaxGdAmaE9h81_qn-v_ZQ.roa
File:                     Qtk6grmaxGdAmaE9h81_qn-v_ZQ.roa (raw, json)
Hash identifier:          F2kc4b/HUwROPb9zI4QADM0UjzYvAf184EJ3ZUKdDHY=
Subject key identifier:   42:D9:3A:82:B9:9A:C4:67:40:99:A1:3D:87:CD:7F:AA:7F:AF:FD:94
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0789
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Qtk6grmaxGdAmaE9h81_qn-v_ZQ.roa
Signing time:             Tue 31 Mar 2026 08:28:08 +0000
ROA not before:           Tue 31 Mar 2026 08:28:08 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:61:7e00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1929 (0x789)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:28:08 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=42D93A82B99AC4674099A13D87CD7FAA7FAFFD94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:41:3a:50:67:24:14:94:a7:ea:18:f8:fb:0f:
                    cd:3f:83:e4:40:87:fb:85:64:bb:0a:08:f1:46:8b:
                    e5:e6:e8:96:c2:30:92:66:af:9b:ae:a6:88:6a:7e:
                    10:a9:d6:11:bc:20:03:cb:f2:7e:06:8a:3e:95:2a:
                    a2:8b:e5:07:2f:a7:80:90:9b:ba:20:20:fc:3c:3d:
                    ad:66:e3:be:a9:fe:91:95:1f:54:f4:7e:af:1f:0f:
                    8b:9d:fc:08:e4:dd:0b:b7:00:9f:09:a2:d0:3c:2b:
                    91:a4:a2:f2:a9:78:5e:50:45:bd:ea:66:30:13:81:
                    0d:49:6e:f7:e1:5e:74:36:ef:9d:9b:c5:43:19:f0:
                    c6:8c:33:0a:d6:28:f2:36:1a:38:19:4b:d2:a6:b4:
                    04:b5:16:ee:7b:78:eb:ca:05:69:f7:57:08:4d:03:
                    6c:fb:2a:69:67:f7:67:d8:ae:fc:77:d0:77:38:71:
                    09:2d:3e:bc:58:38:04:4f:13:da:50:a0:76:53:ab:
                    37:50:74:fe:9b:b5:5c:8a:c5:41:84:86:b0:5d:5f:
                    8d:0f:de:0f:59:dc:e1:00:7c:0a:16:3e:a7:dc:b4:
                    7c:12:8b:2a:e9:31:e6:b0:83:54:51:05:f4:75:16:
                    0c:d6:34:bb:00:ae:e0:04:4e:8a:5b:74:13:7f:c0:
                    a0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:D9:3A:82:B9:9A:C4:67:40:99:A1:3D:87:CD:7F:AA:7F:AF:FD:94
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Qtk6grmaxGdAmaE9h81_qn-v_ZQ.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:7e00::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:ef:a0:75:6a:c5:48:7e:c2:d6:c2:e3:b9:2e:87:f0:fb:ca:
         fa:22:1e:12:da:d7:e4:9f:41:b0:bf:2c:4d:2b:4a:80:71:97:
         b2:1f:cc:01:01:de:19:4c:40:7c:bc:a0:a2:fa:58:f6:9e:39:
         4d:21:fc:f3:c7:a4:1b:2f:b7:ad:d6:d7:99:35:c1:e3:c3:a4:
         e9:18:c0:64:c0:a8:22:83:6d:44:f2:70:94:b8:78:7e:40:5a:
         68:31:76:5b:fa:93:f8:2f:44:e3:f5:3f:e0:19:dc:2c:e9:e9:
         5d:de:b1:a9:18:65:0b:44:11:dc:58:4d:49:cf:20:07:56:89:
         72:2a:cf:8a:79:48:7f:3d:c7:78:35:dd:ba:f4:e4:b8:90:cc:
         c6:32:f3:20:72:bd:a3:4b:bf:30:c9:bf:3c:1e:d7:c4:c9:c4:
         f4:0f:b2:d6:0f:d3:3b:86:c1:1a:f0:49:f6:2f:d4:86:b0:55:
         97:a3:0d:0e:a8:82:94:99:a6:87:e8:ed:0e:49:da:db:03:99:
         07:fb:94:c0:b0:eb:09:4b:67:1a:51:2e:cd:f6:ad:b4:48:f9:
         c8:f9:48:35:37:5a:53:58:79:2d:80:67:18:f5:f1:ca:4f:8f:
         01:22:d1:ad:67:5f:c4:92:f6:21:35:6c:b1:cf:22:ff:2b:d4:
         fd:3f:22:de
-----BEGIN CERTIFICATE-----
MIIExDCCA6ygAwIBAgICB4kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjAzMzEw
ODI4MDhaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQyRDkzQTgyQjk5QUM0
Njc0MDk5QTEzRDg3Q0Q3RkFBN0ZBRkZEOTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDzQTpQZyQUlKfqGPj7D80/g+RAh/uFZLsKCPFGi+Xm6JbCMJJm
r5uupohqfhCp1hG8IAPL8n4Gij6VKqKL5Qcvp4CQm7ogIPw8Pa1m476p/pGVH1T0
fq8fD4ud/Ajk3Qu3AJ8JotA8K5GkovKpeF5QRb3qZjATgQ1JbvfhXnQ2752bxUMZ
8MaMMwrWKPI2GjgZS9KmtAS1Fu57eOvKBWn3VwhNA2z7Kmln92fYrvx30Hc4cQkt
PrxYOARPE9pQoHZTqzdQdP6btVyKxUGEhrBdX40P3g9Z3OEAfAoWPqfctHwSiyrp
Meawg1RRBfR1FgzWNLsAruAETopbdBN/wKAhAgMBAAGjggHgMIIB3DAdBgNVHQ4E
FgQUQtk6grmaxGdAmaE9h81/qn+v/ZQwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDEyOS9RdGs2Z3JtYXhHZEFtYUU5aDgxX3FuLXZfWlEucm9h
MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAoAYX4AMA0GCSqGSIb3DQEB
CwUAA4IBAQA/76B1asVIfsLWwuO5Lofw+8r6Ih4S2tfkn0GwvyxNK0qAcZeyH8wB
Ad4ZTEB8vKCi+lj2njlNIfzzx6QbL7et1teZNcHjw6TpGMBkwKgig21E8nCUuHh+
QFpoMXZb+pP4L0Tj9T/gGdws6eld3rGpGGULRBHcWE1JzyAHVolyKs+KeUh/Pcd4
Nd269OS4kMzGMvMgcr2jS78wyb88HtfEycT0D7LWD9M7hsEa8En2L9SGsFWXow0O
qIKUmaaH6O0OSdrbA5kH+5TAsOsJS2caUS7N9q20SPnI+Ug1N1pTWHktgGcY9fHK
T48BItGtZ1/EkvYhNWyxzyL/K9T9PyLe
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:17 2026 by rpki-client