Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/W458569tUxXN8a6c7INrG0vZQfw.roa
File:                     W458569tUxXN8a6c7INrG0vZQfw.roa (raw, json)
Hash identifier:          zSonmBschNXiQUaEd4g8/id3EmFIj0wKAHX6ViDykBg=
Subject key identifier:   5B:8E:7C:E7:AF:6D:53:15:CD:F1:AE:9C:EC:83:6B:1B:4B:D9:41:FC
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       070F
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/W458569tUxXN8a6c7INrG0vZQfw.roa
Signing time:             Tue 31 Mar 2026 08:27:08 +0000
ROA not before:           Tue 31 Mar 2026 08:27:08 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:d800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1807 (0x70f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:27:08 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=5B8E7CE7AF6D5315CDF1AE9CEC836B1B4BD941FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:28:3c:40:0b:22:b2:81:ac:1b:e9:7d:6f:6b:
                    a6:b5:cb:16:5a:0d:28:0a:40:a8:f4:03:6d:ad:f8:
                    9f:b4:50:2c:48:c4:f5:1d:9e:12:0b:2a:bb:0a:cc:
                    4a:2d:dd:32:90:28:f7:fd:4f:1c:d0:b9:67:c4:0b:
                    2b:af:fd:39:7d:9a:9c:c7:de:99:1f:2b:71:e9:28:
                    7b:df:37:e7:b2:bc:6b:3c:a3:1b:5e:70:62:d0:2c:
                    37:13:5a:a9:46:64:18:97:49:85:7d:c1:2a:c5:70:
                    47:ad:38:05:02:9a:da:79:cc:90:60:82:72:a5:71:
                    13:59:ef:3a:7a:db:5d:d5:de:7d:dd:e3:11:61:48:
                    0b:22:dd:af:55:c6:93:60:c7:77:cc:b1:cd:0b:1c:
                    19:06:d0:bb:ba:7f:61:2b:c7:af:11:91:f8:28:23:
                    c1:3b:bf:15:b6:9f:42:9a:05:7a:0e:1e:f9:de:43:
                    a6:40:e7:41:05:f0:a9:59:ba:b1:eb:b3:c6:c4:a7:
                    07:2f:22:6d:51:a2:6d:81:f9:94:e8:a6:bc:db:3a:
                    b9:4c:23:36:ea:c9:76:25:41:72:05:6d:fb:0f:a8:
                    c3:98:b4:d5:17:90:5d:6f:5b:d9:41:a2:10:4f:3d:
                    e5:4e:1c:47:67:7f:c9:2e:57:f8:d3:cf:52:be:78:
                    e7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:8E:7C:E7:AF:6D:53:15:CD:F1:AE:9C:EC:83:6B:1B:4B:D9:41:FC
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/W458569tUxXN8a6c7INrG0vZQfw.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:d800::/40

    Signature Algorithm: sha256WithRSAEncryption
         4b:ce:0b:32:56:7d:b6:53:a7:ad:d0:67:58:12:92:05:58:3d:
         c2:d2:df:1a:0c:f3:ec:19:cf:84:53:ea:9b:74:6a:aa:be:7c:
         9b:d4:54:6b:da:9d:c4:2b:7e:32:6d:30:0f:69:b0:43:90:65:
         81:25:5f:d1:ed:26:96:9e:80:d4:6b:26:6a:30:8d:07:3b:08:
         3a:a4:b1:2b:e0:de:1b:80:6b:64:c5:4f:28:5d:79:f7:f7:4a:
         3f:81:89:20:9e:3f:9e:22:66:80:3a:b6:32:75:6c:74:81:28:
         2e:7d:f5:1a:91:1f:bf:d2:7e:75:e1:ec:dc:d4:47:58:45:ba:
         f8:37:4c:4f:e5:9a:3a:55:24:ba:64:1a:a4:6e:d1:d1:df:22:
         04:32:f2:dc:c0:44:c2:50:fe:e2:34:4e:29:da:75:12:df:85:
         64:a5:31:90:7b:96:ab:48:f5:74:39:18:67:78:1c:fb:22:fa:
         fb:42:f0:8d:ac:8e:1c:74:94:7e:4c:ab:4d:81:b1:6f:8a:a4:
         e1:e2:8a:9a:4d:9e:30:46:28:7e:59:ea:e7:8e:77:c6:a5:b2:
         38:c4:34:18:1a:47:d7:87:ec:56:29:cd:08:41:44:5a:d5:b3:
         5f:5e:73:77:3a:cc:ec:07:21:00:b9:60:dd:f4:55:3e:a2:72:
         a4:64:0b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:30 2026 by rpki-client