Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/TvyRECXy_2kuUXoj5Hlt2k89428.roa
File:                     TvyRECXy_2kuUXoj5Hlt2k89428.roa (raw, json)
Hash identifier:          MfnUYoCZuGX67Gtcsprh2PfLu/wKFxQpd/8QFUpYIng=
Subject key identifier:   4E:FC:91:10:25:F2:FF:69:2E:51:7A:23:E4:79:6D:DA:4F:3D:E3:6F
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0746
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/TvyRECXy_2kuUXoj5Hlt2k89428.roa
Signing time:             Tue 31 Mar 2026 08:27:33 +0000
ROA not before:           Tue 31 Mar 2026 08:27:33 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:3b00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1862 (0x746)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:27:33 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=4EFC911025F2FF692E517A23E4796DDA4F3DE36F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ef:f9:70:7e:8c:2e:52:27:3b:32:e8:22:a5:
                    c1:b9:69:52:bc:eb:ab:34:e2:9e:34:ad:7e:6d:b7:
                    d1:be:45:28:fe:dc:f5:4b:d9:ea:b7:38:58:ed:1b:
                    15:1e:e8:0e:35:8f:78:9f:12:ad:91:50:9d:31:4a:
                    db:b6:7d:0d:a5:1f:cc:50:c8:5a:04:85:80:0c:90:
                    6c:76:0c:a5:97:94:48:98:fe:66:18:d1:30:c9:bb:
                    85:1d:99:82:a8:c4:de:82:94:3f:ca:6a:0d:9d:0c:
                    7f:be:be:99:3e:b3:cb:77:8f:fe:5d:b8:e1:27:60:
                    23:bd:af:35:8f:b3:12:2d:c2:81:b9:20:f3:25:90:
                    8a:7e:7e:98:5f:78:e7:6b:a2:ef:76:9c:6c:82:e7:
                    b2:9c:97:2d:74:3c:d5:db:f1:ab:65:98:a4:15:63:
                    d8:6a:b2:b0:d0:55:41:30:c0:3f:66:f9:a3:3b:4a:
                    b3:6c:53:f7:9a:17:54:b1:de:cd:2e:c0:bc:84:28:
                    44:42:fb:cb:c6:44:d3:a6:07:c5:bf:86:0c:a3:aa:
                    c5:0b:dd:99:8c:9e:a6:ba:7f:37:ed:66:79:f8:91:
                    7e:71:cb:51:9e:b2:e0:5e:61:3b:ca:66:3a:37:b6:
                    02:55:ea:e9:bf:31:10:be:14:1b:fb:e0:d7:0c:32:
                    45:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:FC:91:10:25:F2:FF:69:2E:51:7A:23:E4:79:6D:DA:4F:3D:E3:6F
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/TvyRECXy_2kuUXoj5Hlt2k89428.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:3b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         c4:97:89:24:99:f4:59:1d:8e:51:fe:08:85:00:bd:34:b1:5a:
         50:c4:b6:80:0a:04:53:4a:92:c3:07:63:dd:73:f8:69:0b:24:
         da:96:f8:a8:28:66:a5:d5:fd:3e:e9:7f:de:7e:e4:ff:c0:ff:
         65:b0:ab:67:6d:36:28:5e:af:8a:d3:03:e6:56:07:4a:a5:f6:
         51:56:00:16:6b:04:7a:c3:95:43:93:67:ce:f6:31:36:fb:3f:
         88:d1:89:90:02:20:14:73:c0:14:8a:49:9e:b2:4d:a5:a7:ff:
         21:b6:e4:c9:55:5d:e7:28:5b:ab:e3:82:dd:e0:31:4c:37:db:
         cb:55:27:83:b0:9a:2e:dd:7e:83:3a:0d:37:c1:19:af:ee:60:
         dd:76:41:95:72:13:83:e1:6a:01:74:48:0b:32:4e:ce:e2:f0:
         06:70:f6:d9:d9:80:61:cd:9e:56:05:38:54:f9:f8:7d:99:ea:
         97:ca:0d:ca:6e:cc:40:e3:4b:09:80:a6:ad:f4:76:5f:6e:d2:
         da:ea:fc:04:c2:2a:48:35:ef:af:a2:e0:4f:35:f0:30:06:91:
         d2:db:47:2d:f8:8d:5d:8d:3e:e4:f3:30:ef:ec:27:16:38:b9:
         e8:14:79:32:6f:19:15:81:2e:02:54:3c:30:78:9e:1e:74:d9:
         6c:bb:42:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:37 2026 by rpki-client