Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/RxkKObchIpq9ZwDGQaivdQtMwuQ.roa
File:                     RxkKObchIpq9ZwDGQaivdQtMwuQ.roa (raw, json)
Hash identifier:          OJPMDKtY70CoIHUzum9NRsDgC4IuLoJ6sl2hF+eucvM=
Subject key identifier:   47:19:0A:39:B7:21:22:9A:BD:67:00:C6:41:A8:AF:75:0B:4C:C2:E4
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       065D
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/RxkKObchIpq9ZwDGQaivdQtMwuQ.roa
Signing time:             Tue 31 Mar 2026 08:25:41 +0000
ROA not before:           Tue 31 Mar 2026 08:25:41 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1629 (0x65d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:25:41 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=47190A39B721229ABD6700C641A8AF750B4CC2E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1b:b9:d2:d2:ec:c4:09:10:e2:4c:69:82:98:
                    ec:e8:64:91:b6:7c:08:99:ab:5b:44:42:1b:55:0f:
                    db:52:0b:cc:37:1d:ba:3d:6f:4f:50:63:b9:52:4c:
                    ef:e9:2f:ab:37:13:76:f5:32:ef:62:f3:12:f2:ec:
                    30:cc:1f:53:41:0e:d6:d0:29:51:48:83:1c:b6:d5:
                    36:6d:d7:2d:f4:c6:5c:22:b4:bc:d2:39:07:5c:2d:
                    b3:cf:33:f0:d1:2a:c9:43:50:7b:09:3d:aa:87:cb:
                    29:5a:d5:d4:5b:c9:fb:fb:76:27:af:b3:bc:95:9f:
                    bd:26:48:e0:65:6f:ec:5b:dc:07:3e:5e:53:9e:7b:
                    a0:09:8e:c4:70:a9:b4:7a:03:cf:a2:c3:81:76:f8:
                    0a:5f:56:05:f3:f6:d4:43:5c:40:aa:d0:72:ac:4d:
                    4f:b9:11:08:01:90:56:7d:c0:16:3d:6f:f7:ec:0c:
                    57:1c:f5:a3:43:f7:bb:a7:a8:67:b5:90:b8:33:c3:
                    8b:aa:a6:a9:46:ed:a3:4e:cf:7a:1e:3c:b8:46:a6:
                    58:60:a2:c2:d7:de:d0:4a:85:0b:70:2a:bd:7d:82:
                    2c:ed:2f:9c:96:94:e9:69:81:6a:8f:80:59:92:90:
                    cb:81:ae:25:69:c0:ff:ec:61:67:cd:d6:74:0d:df:
                    bf:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:19:0A:39:B7:21:22:9A:BD:67:00:C6:41:A8:AF:75:0B:4C:C2:E4
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/RxkKObchIpq9ZwDGQaivdQtMwuQ.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         5f:6b:f4:47:7e:3e:f9:6e:79:5e:76:26:6b:5a:ac:59:87:ea:
         86:7a:9c:c6:9c:d6:a7:76:6f:c5:d6:2d:80:a3:7b:67:fe:13:
         6f:6e:bd:67:d5:57:91:66:d9:62:98:23:b0:63:ab:f1:7d:e8:
         7e:6d:de:62:8f:1c:8b:94:d2:97:4f:23:fe:14:30:f6:1c:0a:
         94:b0:10:a5:07:7d:34:2e:e0:c2:9c:77:ea:de:67:00:f8:55:
         40:77:d9:09:54:4f:0c:f6:2e:76:62:b4:d9:01:99:9a:91:a5:
         20:71:e9:e4:4e:c4:54:68:46:be:07:4c:09:a2:54:b1:32:48:
         db:01:4b:e8:50:03:39:2d:16:d8:46:f3:c4:f9:d8:a3:ee:a2:
         04:2d:a1:3f:fc:da:f9:c2:89:3d:32:3b:ff:28:e9:52:5d:0a:
         03:77:39:9e:98:fc:ef:4a:4a:0b:84:c1:3c:f0:f5:6d:90:f5:
         b2:e8:a6:3e:50:fd:7f:b4:a4:85:e2:aa:52:78:d0:a0:35:f0:
         89:d3:75:43:14:3a:4b:b4:07:38:32:52:12:95:39:7e:0b:7c:
         30:35:90:7c:d9:21:40:f4:42:d0:23:df:c8:20:03:e5:fb:64:
         5c:50:4c:ab:2b:60:43:fe:81:55:56:9d:33:45:3e:13:21:1c:
         60:02:ec:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:18 2026 by rpki-client