Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/TtUDJUnTBvIjIAPt3IyIsXRHCxU.roa
File:                     TtUDJUnTBvIjIAPt3IyIsXRHCxU.roa (raw, json)
Hash identifier:          GCnZqXa90tL/EWTKqLgnoKwOR7K4/fGD9UhquhnPkUo=
Subject key identifier:   4E:D5:03:25:49:D3:06:F2:23:20:03:ED:DC:8C:88:B1:74:47:0B:15
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0722
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/TtUDJUnTBvIjIAPt3IyIsXRHCxU.roa
Signing time:             Tue 31 Mar 2026 08:27:15 +0000
ROA not before:           Tue 31 Mar 2026 08:27:15 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:b300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1826 (0x722)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:27:15 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=4ED5032549D306F2232003EDDC8C88B174470B15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:93:8d:52:9e:f0:4f:68:e7:3e:1f:5a:9b:72:
                    f5:97:52:7f:c3:72:6e:9e:fe:99:15:fc:0a:cf:9a:
                    b8:50:5c:32:11:9e:ed:b2:e3:98:c7:c0:b6:0d:65:
                    31:ee:a4:d3:da:4d:60:0b:04:af:40:55:79:a8:56:
                    29:df:b9:92:14:53:44:b7:6f:3e:61:ec:71:ae:a9:
                    64:5d:45:c1:86:b5:67:c0:0d:c8:8f:d4:c4:bb:4d:
                    01:9b:02:55:6b:62:1e:63:e1:61:85:f4:74:dc:7a:
                    05:a6:b7:14:2f:64:e8:aa:86:9a:46:ff:7d:24:fd:
                    dc:80:ec:4c:7c:1a:c7:57:c3:c8:9f:13:16:4d:6c:
                    cb:0c:81:b4:2c:b7:c0:f3:15:37:bf:63:01:86:d2:
                    f2:6d:83:b7:8b:be:94:e7:22:1b:22:43:1e:a7:ac:
                    e2:0a:f3:46:0d:3c:cd:f9:4e:b7:17:6a:27:69:79:
                    e3:e2:a7:3e:7a:f5:de:42:2a:7a:99:1e:4a:96:68:
                    f0:67:90:d6:e0:44:85:40:ed:5d:ac:64:33:6f:ae:
                    eb:55:af:91:98:eb:67:20:53:8c:40:49:d6:87:5a:
                    64:5b:ac:5e:6e:b7:56:cb:b9:59:dc:d6:c7:b2:53:
                    60:3e:d7:59:2f:1c:2c:49:e9:2c:48:50:69:fd:e0:
                    a9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:D5:03:25:49:D3:06:F2:23:20:03:ED:DC:8C:88:B1:74:47:0B:15
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/TtUDJUnTBvIjIAPt3IyIsXRHCxU.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:b300::/40

    Signature Algorithm: sha256WithRSAEncryption
         04:0a:53:65:f1:78:7a:a4:41:53:5a:0a:c7:78:b9:1e:21:9e:
         dd:da:4f:b6:62:8b:cf:52:ab:83:20:aa:d0:02:0d:f0:5c:a7:
         0c:42:8b:8c:77:7b:c1:66:88:1e:d2:38:48:99:47:25:22:07:
         2a:7b:94:be:40:cd:b6:a1:e7:83:b7:ed:d4:00:1c:f1:0d:c5:
         fb:b6:fc:5f:c4:31:31:9d:fd:7d:5e:dc:eb:28:f2:7f:7b:d4:
         bb:c0:4f:4b:a1:46:0a:54:78:e7:e7:a4:de:f5:59:42:fe:71:
         c0:77:a4:15:be:4e:13:a5:cf:2f:70:dd:c0:97:a8:86:86:b1:
         1a:93:c5:14:39:50:f0:ae:3d:33:85:9f:c9:b2:c9:37:cd:44:
         4c:51:80:7d:6a:d7:ac:3d:a8:0f:34:06:27:a1:25:75:5e:45:
         ed:fe:9b:70:02:f0:89:07:73:c1:59:2b:0f:88:37:19:9a:6c:
         c4:fb:99:6b:2e:2e:9e:0a:21:2f:9f:c3:3a:97:88:fd:a0:1e:
         82:62:99:aa:4f:52:ee:df:93:b8:77:d7:af:07:45:3b:8f:fc:
         18:11:b9:5f:6e:8e:5b:a6:ff:df:8a:f6:73:66:42:bc:6d:07:
         e5:90:00:a9:94:24:cf:fa:e3:39:cb:03:92:94:91:1b:0b:ad:
         f2:df:31:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:44 2026 by rpki-client