Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/TYCcmNaG4hUshot4ylfKtMgte00.roa
File:                     TYCcmNaG4hUshot4ylfKtMgte00.roa (raw, json)
Hash identifier:          VivUJKWvLGN6YOBpPEmag6hixBfZ3w0gnGDKpDXYgpU=
Subject key identifier:   4D:80:9C:98:D6:86:E2:15:2C:86:8B:78:CA:57:CA:B4:C8:2D:7B:4D
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       065F
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/TYCcmNaG4hUshot4ylfKtMgte00.roa
Signing time:             Tue 31 Mar 2026 08:25:42 +0000
ROA not before:           Tue 31 Mar 2026 08:25:42 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:60:f01e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1631 (0x65f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:25:42 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=4D809C98D686E2152C868B78CA57CAB4C82D7B4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:bc:e1:a5:2f:61:ca:c9:e4:53:63:a1:76:5b:
                    13:74:65:de:79:d1:89:0c:f4:23:c7:a2:ac:f2:94:
                    a6:9f:d1:52:2f:09:d5:1c:a3:95:83:f6:b1:d5:cc:
                    14:f6:cb:0a:d8:2d:68:db:00:b8:a9:51:f8:c6:d6:
                    4a:87:51:39:6a:07:1b:05:e9:2b:f0:23:9d:aa:7a:
                    f7:64:cd:78:64:89:50:ce:14:9c:58:fa:a6:4e:d9:
                    b3:65:c6:db:ac:a2:1b:ff:7b:5c:fe:e7:29:8e:45:
                    f3:d3:eb:f1:c3:20:25:52:94:cd:37:b4:fd:89:7d:
                    85:6d:48:b3:78:15:e1:80:d4:d8:18:04:ea:c8:1c:
                    40:70:1e:d8:b0:fa:ba:04:0f:02:2f:10:ab:91:a2:
                    cf:47:19:9d:7d:0d:83:3b:87:86:0e:cb:b6:fd:6c:
                    3d:00:da:96:b1:84:11:04:b1:67:90:0b:ce:61:54:
                    53:56:e6:ba:d3:fe:f1:16:d8:cf:5c:98:ee:bb:d0:
                    c1:64:ff:59:e8:52:54:04:71:04:13:f1:4d:af:9a:
                    9e:88:dc:e7:27:6a:8d:eb:72:74:5d:45:7d:4f:06:
                    23:6d:37:32:e5:95:01:c8:97:94:e6:b5:c6:33:15:
                    d9:55:ed:ef:ad:b7:61:52:a4:66:e4:c2:3a:ea:cf:
                    22:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:80:9C:98:D6:86:E2:15:2C:86:8B:78:CA:57:CA:B4:C8:2D:7B:4D
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/TYCcmNaG4hUshot4ylfKtMgte00.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:60:f01e::/48

    Signature Algorithm: sha256WithRSAEncryption
         b1:a3:3b:ab:21:32:c0:4b:96:d3:74:ea:88:03:0a:b1:0e:22:
         79:c8:46:c1:bc:4a:7b:a7:bc:d4:1d:3c:ad:13:58:e1:a3:d5:
         c9:7a:bc:6d:fa:0c:64:49:82:ce:e3:4d:db:21:94:8e:95:12:
         8d:a4:17:89:b3:dd:4f:7c:74:b6:f7:ed:90:44:42:3f:fc:cb:
         a9:4f:62:9c:c5:de:31:4e:e4:36:bd:84:1f:47:13:3c:db:0d:
         b6:50:c9:47:81:e3:00:8b:5f:ad:77:1b:77:5d:ae:ca:ad:a5:
         d4:0b:52:0c:18:9b:ae:8f:5b:3c:01:11:63:2b:f2:b4:8b:2b:
         31:0b:fa:bb:68:da:55:bc:c4:b7:05:ee:9f:c3:72:8d:3a:b9:
         a1:2c:a2:27:7a:29:0b:9f:eb:45:fd:cc:a8:de:72:39:b6:40:
         a2:2a:a1:a1:f4:f1:b3:85:67:8a:4a:95:d1:2b:f7:66:ea:9d:
         f7:c3:65:ae:42:93:d0:66:58:a8:b4:96:82:20:e3:7d:8a:0a:
         3e:c5:03:25:62:a8:c9:d9:b0:5f:20:21:b7:e3:06:1c:62:82:
         98:0c:3b:41:37:5f:42:33:6c:42:25:b6:2c:ed:6c:46:90:82:
         e8:ac:f7:43:c5:0d:b8:78:dc:87:82:96:c3:ca:ba:be:c1:d9:
         db:e9:ee:ea
-----BEGIN CERTIFICATE-----
MIIExDCCA6ygAwIBAgICBl8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjAzMzEw
ODI1NDJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDREODA5Qzk4RDY4NkUy
MTUyQzg2OEI3OENBNTdDQUI0QzgyRDdCNEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDgvOGlL2HKyeRTY6F2WxN0Zd550YkM9CPHoqzylKaf0VIvCdUc
o5WD9rHVzBT2ywrYLWjbALipUfjG1kqHUTlqBxsF6SvwI52qevdkzXhkiVDOFJxY
+qZO2bNlxtusohv/e1z+5ymORfPT6/HDICVSlM03tP2JfYVtSLN4FeGA1NgYBOrI
HEBwHtiw+roEDwIvEKuRos9HGZ19DYM7h4YOy7b9bD0A2paxhBEEsWeQC85hVFNW
5rrT/vEW2M9cmO670MFk/1noUlQEcQQT8U2vmp6I3Ocnao3rcnRdRX1PBiNtNzLl
lQHIl5TmtcYzFdlV7e+tt2FSpGbkwjrqzyJdAgMBAAGjggHgMIIB3DAdBgNVHQ4E
FgQUTYCcmNaG4hUshot4ylfKtMgte00wHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDEyOS9UWUNjbU5hRzRoVXNob3Q0eWxmS3RNZ3RlMDAucm9h
MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAoAYPAeMA0GCSqGSIb3DQEB
CwUAA4IBAQCxozurITLAS5bTdOqIAwqxDiJ5yEbBvEp7p7zUHTytE1jho9XJerxt
+gxkSYLO403bIZSOlRKNpBeJs91PfHS29+2QREI//MupT2Kcxd4xTuQ2vYQfRxM8
2w22UMlHgeMAi1+tdxt3Xa7KraXUC1IMGJuuj1s8ARFjK/K0iysxC/q7aNpVvMS3
Be6fw3KNOrmhLKIneikLn+tF/cyo3nI5tkCiKqGh9PGzhWeKSpXRK/dm6p33w2Wu
QpPQZliotJaCION9igo+xQMlYqjJ2bBfICG34wYcYoKYDDtBN19CM2xCJbYs7WxG
kILorPdDxQ24eNyHgpbDyrq+wdnb6e7q
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:37 2026 by rpki-client