Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/UNlz8HQeRXlFXTctG5r0Bq4s0PU.roa
File:                     UNlz8HQeRXlFXTctG5r0Bq4s0PU.roa (raw, json)
Hash identifier:          s/Xes5nl2LjgWFZHHV/ZqXRhFBQF9eSJfeGmFMwJ9aI=
Subject key identifier:   50:D9:73:F0:74:1E:45:79:45:5D:37:2D:1B:9A:F4:06:AE:2C:D0:F5
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0648
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/UNlz8HQeRXlFXTctG5r0Bq4s0PU.roa
Signing time:             Tue 31 Mar 2026 08:25:30 +0000
ROA not before:           Tue 31 Mar 2026 08:25:30 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:ab00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1608 (0x648)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:25:30 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=50D973F0741E4579455D372D1B9AF406AE2CD0F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:68:c2:fc:47:f6:a5:f4:46:e3:37:e1:2f:37:
                    e6:6b:3b:00:c2:88:86:6f:c4:af:e5:78:1d:6f:78:
                    89:af:f6:9f:ef:21:fc:a5:ab:6b:b9:29:ee:0d:a9:
                    94:7d:00:7f:7b:f4:1c:12:3b:28:eb:1f:8a:fc:46:
                    b6:be:42:bc:59:79:7c:b4:a1:aa:0d:d2:10:48:5e:
                    7d:ca:c9:5e:be:35:cf:77:8d:12:4d:18:89:d9:ae:
                    11:3e:21:5e:da:cf:e4:d8:fe:a4:a8:d9:9e:72:ff:
                    6a:b8:ca:dc:80:1d:4a:93:10:c0:08:f3:74:11:b8:
                    0d:3c:f2:4b:a1:67:44:8b:16:de:f2:78:44:ee:ac:
                    00:78:6c:42:e4:ac:e0:cf:b2:a8:c8:02:67:0b:db:
                    57:4c:b3:2b:d5:61:e3:89:af:2f:2e:05:a0:9c:83:
                    a6:69:95:dd:43:b8:06:d5:07:5f:c6:48:aa:3e:36:
                    12:51:dd:87:6a:e7:c7:f8:74:e6:29:a8:c8:2b:99:
                    28:da:61:f8:0f:f3:77:87:ab:e5:4d:b3:cb:d5:1d:
                    ee:75:a2:79:2c:84:8c:c3:4d:88:75:e7:c3:a3:37:
                    3b:ef:3d:1e:16:15:eb:29:16:49:46:fb:80:53:27:
                    a2:29:26:84:8f:71:79:f7:9f:cb:e8:61:71:ec:b0:
                    73:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D9:73:F0:74:1E:45:79:45:5D:37:2D:1B:9A:F4:06:AE:2C:D0:F5
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/UNlz8HQeRXlFXTctG5r0Bq4s0PU.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:ab00::/40

    Signature Algorithm: sha256WithRSAEncryption
         01:eb:9b:9b:43:6f:86:11:36:bf:65:e6:83:ae:96:b5:cc:90:
         69:bb:e6:51:c1:a7:39:90:e0:58:66:ff:ca:9c:39:9e:d6:d4:
         e8:d4:6a:98:5f:63:68:61:49:cb:b3:2d:57:5c:2c:b5:f2:11:
         26:ec:0c:7a:ba:87:97:3e:64:1f:8f:b6:db:c6:14:48:ae:2d:
         68:3f:9d:0d:d4:a4:43:f6:18:c3:09:cc:d5:6b:8d:cc:bc:28:
         ee:f9:2e:71:12:c9:ca:66:fd:3c:ca:5e:5d:9a:91:c2:16:70:
         a1:9d:f3:38:ef:98:27:fd:a7:a5:5b:f6:9a:9d:07:4b:7f:71:
         77:70:31:15:1a:50:e0:e7:0d:f4:25:78:cf:76:66:dc:73:c8:
         b8:26:f0:a1:ac:0c:9b:ef:a9:75:e8:82:d2:c5:e7:ea:af:fc:
         5d:33:58:7d:9c:05:67:f8:14:81:85:74:41:62:13:85:2e:55:
         f9:80:c2:a1:4a:3c:7c:0a:5b:50:19:97:10:b2:83:4f:d0:e3:
         da:2c:f8:27:2c:a2:b4:59:7c:50:9e:93:d1:1a:eb:10:49:3d:
         7f:20:75:a6:09:74:7e:c3:35:10:76:ba:0d:d8:6a:ff:14:16:
         70:5d:89:10:64:c4:07:10:6d:84:46:94:8f:09:b6:3d:e5:9c:
         0c:f8:a7:f0
-----BEGIN CERTIFICATE-----
MIIEwzCCA6ugAwIBAgICBkgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjAzMzEw
ODI1MzBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDUwRDk3M0YwNzQxRTQ1
Nzk0NTVEMzcyRDFCOUFGNDA2QUUyQ0QwRjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDJaML8R/al9EbjN+EvN+ZrOwDCiIZvxK/leB1veImv9p/vIfyl
q2u5Ke4NqZR9AH979BwSOyjrH4r8Rra+QrxZeXy0oaoN0hBIXn3KyV6+Nc93jRJN
GInZrhE+IV7az+TY/qSo2Z5y/2q4ytyAHUqTEMAI83QRuA088kuhZ0SLFt7yeETu
rAB4bELkrODPsqjIAmcL21dMsyvVYeOJry8uBaCcg6Zpld1DuAbVB1/GSKo+NhJR
3Ydq58f4dOYpqMgrmSjaYfgP83eHq+VNs8vVHe51onkshIzDTYh158OjNzvvPR4W
FespFklG+4BTJ6IpJoSPcXn3n8voYXHssHNvAgMBAAGjggHfMIIB2zAdBgNVHQ4E
FgQUUNlz8HQeRXlFXTctG5r0Bq4s0PUwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDEyOS9VTmx6OEhRZVJYbEZYVGN0RzVyMEJxNHMwUFUucm9h
MCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJAoAa6swDQYJKoZIhvcNAQEL
BQADggEBAAHrm5tDb4YRNr9l5oOulrXMkGm75lHBpzmQ4Fhm/8qcOZ7W1OjUaphf
Y2hhScuzLVdcLLXyESbsDHq6h5c+ZB+PttvGFEiuLWg/nQ3UpEP2GMMJzNVrjcy8
KO75LnESycpm/TzKXl2akcIWcKGd8zjvmCf9p6Vb9pqdB0t/cXdwMRUaUODnDfQl
eM92ZtxzyLgm8KGsDJvvqXXogtLF5+qv/F0zWH2cBWf4FIGFdEFiE4UuVfmAwqFK
PHwKW1AZlxCyg0/Q49os+CcsorRZfFCek9Ea6xBJPX8gdaYJdH7DNRB2ug3Yav8U
FnBdiRBkxAcQbYRGlI8Jtj3lnAz4p/A=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:34 2026 by rpki-client