Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/VZEou_fDboNdBwgHQDHE-LB7I2c.roa
File:                     VZEou_fDboNdBwgHQDHE-LB7I2c.roa (raw, json)
Hash identifier:          yIN6vzU3CGJX8RBb6MI6CA5kjk1eKZqyo7LWYbCXYco=
Subject key identifier:   55:91:28:BB:F7:C3:6E:83:5D:07:08:07:40:31:C4:F8:B0:7B:23:67
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       078F
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/VZEou_fDboNdBwgHQDHE-LB7I2c.roa
Signing time:             Tue 31 Mar 2026 08:28:12 +0000
ROA not before:           Tue 31 Mar 2026 08:28:12 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:42:100::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1935 (0x78f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:28:12 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=559128BBF7C36E835D0708074031C4F8B07B2367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c5:5a:77:f5:95:ab:81:b1:b1:76:f9:bb:4e:
                    28:38:04:37:44:ae:ee:17:8f:89:01:71:d5:12:19:
                    d2:b3:77:af:58:a2:74:a1:a6:9d:b3:46:97:b5:39:
                    85:1a:f1:30:8b:f8:5f:9b:18:f1:90:2b:f9:60:73:
                    90:2e:9c:50:12:f3:a3:68:9f:d4:9c:55:c6:c6:1c:
                    ec:53:a6:50:c4:06:5c:5e:f4:08:d5:0a:94:77:e6:
                    9a:af:eb:b8:a0:72:61:56:34:21:9a:83:a5:96:07:
                    a2:d8:b6:11:d4:2a:bd:06:de:18:bb:27:47:41:27:
                    c8:9f:27:85:26:9e:15:c5:9f:05:14:bf:b6:50:ce:
                    d3:4a:df:05:69:3e:07:b7:13:db:18:be:ee:9f:a1:
                    60:3a:ec:ec:51:f8:8e:0f:ba:bc:9a:54:0e:8e:69:
                    42:d2:03:2d:70:fa:a9:91:2a:7b:30:8e:64:79:eb:
                    02:48:56:d7:2e:84:8a:a4:18:c2:3c:5e:17:2b:0f:
                    c0:94:c1:c1:45:f6:45:32:f4:50:0f:17:24:2b:1c:
                    12:a3:20:e3:e9:b0:2f:49:8f:9e:9a:d2:ca:26:87:
                    de:d0:cd:27:bd:a5:0d:ea:d5:1d:6a:b3:a6:d0:53:
                    37:ae:70:46:de:82:dd:c0:a1:7a:09:a7:2f:54:77:
                    b8:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:91:28:BB:F7:C3:6E:83:5D:07:08:07:40:31:C4:F8:B0:7B:23:67
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/VZEou_fDboNdBwgHQDHE-LB7I2c.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:42:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         6e:76:38:c8:41:85:43:bf:7c:c1:c1:54:cf:c9:0a:64:ac:45:
         0f:af:81:4e:b5:d6:6e:f0:a8:fa:84:58:90:e3:3e:a2:ce:d6:
         cc:b9:ab:c1:8e:91:ab:4b:a3:14:e1:0f:13:1b:5f:0e:8b:04:
         4c:c7:de:26:65:5d:70:67:47:bc:c0:b6:bb:cd:dd:95:c6:db:
         ab:3b:79:21:e9:a6:f1:41:78:40:ed:10:b0:1a:3d:4d:e0:18:
         a0:bf:08:1b:c2:73:f4:ea:87:92:4c:65:ec:ce:f7:5c:fa:d4:
         51:95:12:c1:af:96:75:e9:2e:1b:9c:44:e1:48:63:d5:46:76:
         f6:6b:1b:7a:6e:96:0a:96:6e:f8:e5:9d:87:7a:c7:fe:8b:b8:
         04:39:b2:be:b1:7d:ed:d0:0d:cb:8b:18:0a:97:e6:e7:0c:24:
         87:81:91:3e:d8:79:d9:47:7d:54:8f:92:60:0e:7b:ec:93:74:
         ec:e3:3a:d4:6e:92:28:f2:28:6a:8c:70:1c:b2:43:66:b3:c7:
         32:54:b8:30:3b:22:04:77:90:19:92:d0:cc:26:87:9b:f7:f8:
         36:97:2a:c8:58:7c:e2:4d:07:47:3b:97:6b:2c:f2:5b:83:e8:
         84:44:23:f0:cb:5f:2b:e6:31:95:78:6a:96:c2:60:aa:5c:af:
         e6:e5:97:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:14 2026 by rpki-client