Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/RaJoRqfejj2RIaWdNcpwo7Vw-OI.roa
File:                     RaJoRqfejj2RIaWdNcpwo7Vw-OI.roa (raw, json)
Hash identifier:          dcYOVUK6E9hMa9jmgR5V6ZAD43Ami38/mG0aPOJvkNw=
Subject key identifier:   45:A2:68:46:A7:DE:8E:3D:91:21:A5:9D:35:CA:70:A3:B5:70:F8:E2
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0668
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/RaJoRqfejj2RIaWdNcpwo7Vw-OI.roa
Signing time:             Tue 31 Mar 2026 08:25:46 +0000
ROA not before:           Tue 31 Mar 2026 08:25:46 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:eb00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1640 (0x668)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:25:46 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=45A26846A7DE8E3D9121A59D35CA70A3B570F8E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:19:bf:6f:08:5d:bc:2d:5a:af:61:69:1a:5f:
                    04:9d:cc:8f:9b:46:fc:e7:2b:9f:80:37:7f:4f:c8:
                    cb:a1:00:b3:f0:69:83:3c:5f:eb:63:95:50:af:9c:
                    4d:39:f0:43:a2:eb:91:0d:6f:2f:ee:90:e4:e2:0b:
                    dc:d1:6e:af:99:c0:28:b0:73:73:7d:69:a9:6d:f1:
                    9e:f8:0e:f8:9f:55:29:1a:78:13:4a:ab:6e:ff:73:
                    fe:15:65:60:2c:a7:c1:26:25:3c:cc:2f:49:81:61:
                    fa:c8:47:91:e0:d3:8f:48:28:19:e8:db:3a:ff:db:
                    e7:d3:c6:12:9a:50:6d:07:f1:2d:66:fd:75:6d:a5:
                    d9:2d:26:4d:0a:26:c4:6e:2e:64:90:f7:3b:91:64:
                    1a:26:30:9c:7f:e1:65:83:22:02:f2:5a:65:43:8b:
                    c8:4c:ec:88:00:de:1c:7c:64:d9:16:34:f6:13:78:
                    75:3d:6b:67:fa:19:fa:47:a9:34:99:51:d3:e0:70:
                    e4:63:f5:01:58:56:34:b7:68:71:f8:10:ff:ed:96:
                    48:8a:1b:19:a2:d3:c7:8a:c7:5e:2a:f4:83:8b:98:
                    6d:23:d5:21:d4:c4:84:6f:e9:a5:c2:76:1c:0b:4a:
                    6c:42:47:26:c5:67:f0:93:41:75:9f:6b:db:cb:85:
                    59:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A2:68:46:A7:DE:8E:3D:91:21:A5:9D:35:CA:70:A3:B5:70:F8:E2
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/RaJoRqfejj2RIaWdNcpwo7Vw-OI.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:eb00::/40

    Signature Algorithm: sha256WithRSAEncryption
         af:a2:00:5e:c7:a8:ba:71:6c:ae:d0:99:d3:90:7c:f4:28:e3:
         1b:c0:ee:3f:53:1d:6e:a8:c1:74:b5:e7:7d:ba:80:1f:ef:c8:
         98:91:16:3e:c2:87:4f:49:92:71:2d:12:4b:bf:2e:c7:43:77:
         82:df:a4:b5:38:50:4f:4e:ec:de:7d:5f:5c:c2:57:79:e7:e9:
         6e:31:bd:39:ba:41:54:c2:1b:e5:cb:18:19:aa:ac:f6:c2:e2:
         79:fa:39:2d:1d:fc:7e:a9:b7:d2:8d:44:c5:29:0c:a8:ec:c6:
         32:96:72:db:5a:7e:ef:58:0b:94:08:c9:a6:ca:27:32:5e:ff:
         38:c6:32:35:c4:4d:2b:cf:59:69:e5:18:ed:37:f8:be:2d:44:
         c5:f8:e4:78:f7:46:d8:3e:f6:1b:6d:30:1d:9b:78:7a:f7:b7:
         ad:79:c9:6f:6f:47:de:5f:fe:bf:8f:07:0f:6e:81:47:d3:44:
         f5:a2:a4:fa:c4:6f:2b:ab:95:ae:a6:fe:7d:41:77:14:c9:05:
         de:ae:4b:f2:d3:12:cd:79:b4:1e:a2:e0:af:12:4a:12:ce:86:
         f9:27:ac:f9:79:9b:88:26:b9:45:bc:f3:d0:b1:83:b5:f5:e6:
         e7:bf:3a:5e:7b:51:d2:54:40:ba:31:ce:88:bf:2e:50:ec:e3:
         1c:dc:81:ad
-----BEGIN CERTIFICATE-----
MIIEwzCCA6ugAwIBAgICBmgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjAzMzEw
ODI1NDZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQ1QTI2ODQ2QTdERThF
M0Q5MTIxQTU5RDM1Q0E3MEEzQjU3MEY4RTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC1Gb9vCF28LVqvYWkaXwSdzI+bRvznK5+AN39PyMuhALPwaYM8
X+tjlVCvnE058EOi65ENby/ukOTiC9zRbq+ZwCiwc3N9aalt8Z74DvifVSkaeBNK
q27/c/4VZWAsp8EmJTzML0mBYfrIR5Hg049IKBno2zr/2+fTxhKaUG0H8S1m/XVt
pdktJk0KJsRuLmSQ9zuRZBomMJx/4WWDIgLyWmVDi8hM7IgA3hx8ZNkWNPYTeHU9
a2f6GfpHqTSZUdPgcORj9QFYVjS3aHH4EP/tlkiKGxmi08eKx14q9IOLmG0j1SHU
xIRv6aXCdhwLSmxCRybFZ/CTQXWfa9vLhVkDAgMBAAGjggHfMIIB2zAdBgNVHQ4E
FgQURaJoRqfejj2RIaWdNcpwo7Vw+OIwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDEyOS9SYUpvUnFmZWpqMlJJYVdkTmNwd283VnctT0kucm9h
MCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJAoAa+swDQYJKoZIhvcNAQEL
BQADggEBAK+iAF7HqLpxbK7QmdOQfPQo4xvA7j9THW6owXS15326gB/vyJiRFj7C
h09JknEtEku/LsdDd4LfpLU4UE9O7N59X1zCV3nn6W4xvTm6QVTCG+XLGBmqrPbC
4nn6OS0d/H6pt9KNRMUpDKjsxjKWcttafu9YC5QIyabKJzJe/zjGMjXETSvPWWnl
GO03+L4tRMX45Hj3Rtg+9httMB2beHr3t615yW9vR95f/r+PBw9ugUfTRPWipPrE
byurla6m/n1BdxTJBd6uS/LTEs15tB6i4K8SShLOhvknrPl5m4gmuUW889Cxg7X1
5ue/Ol57UdJUQLoxzoi/LlDs4xzcga0=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:33 2026 by rpki-client