Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/WBlOCLRLmqZVpfQCFfuZ-iAmk20.roa
File:                     WBlOCLRLmqZVpfQCFfuZ-iAmk20.roa (raw, json)
Hash identifier:          OS4yec4qf7ezbeOAPTvH04P5EJVi/IuNSpwKhdVTvtQ=
Subject key identifier:   58:19:4E:08:B4:4B:9A:A6:55:A5:F4:02:15:FB:99:FA:20:26:93:6D
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       06C2
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/WBlOCLRLmqZVpfQCFfuZ-iAmk20.roa
Signing time:             Tue 31 Mar 2026 08:26:30 +0000
ROA not before:           Tue 31 Mar 2026 08:26:30 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:a200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1730 (0x6c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:26:30 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=58194E08B44B9AA655A5F40215FB99FA2026936D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d9:65:32:a7:55:b2:4b:60:4a:ed:4d:79:93:
                    d8:3b:f6:cc:9b:e3:bc:6f:7d:6b:10:89:4d:8a:2f:
                    df:c8:10:a4:11:6d:d6:72:fc:db:d7:28:f0:91:e5:
                    59:4d:8a:8f:b7:4a:40:e2:97:ad:8c:93:f6:3a:d7:
                    8b:0e:54:2b:c9:24:2f:e3:19:9b:1f:a8:15:67:d8:
                    95:90:93:31:49:0c:9c:b1:bc:e2:35:08:eb:ac:f5:
                    ee:0d:a9:ad:76:a1:f9:81:4a:b3:66:dd:88:89:32:
                    4b:96:8e:72:c5:9e:e2:8d:c2:fd:0f:22:3f:4a:9d:
                    59:ca:f7:5c:57:dd:6a:8a:6a:b5:52:8a:87:ec:db:
                    f2:15:ac:fc:ee:c5:d0:3d:95:68:80:4a:9c:47:fd:
                    92:d9:f9:aa:cd:8a:46:df:06:35:6d:97:98:38:79:
                    a7:6b:46:90:65:e7:bc:a5:f6:1b:18:cd:dd:15:9a:
                    37:ce:e1:99:a8:07:00:06:f3:e2:d6:2e:a3:1a:50:
                    d8:2c:e5:a4:b2:56:4b:17:4d:e1:01:ef:39:12:18:
                    3d:40:50:32:96:26:67:a0:3e:c9:de:c3:c7:4f:ae:
                    24:15:fc:d3:b6:8a:d8:cb:00:bf:90:88:38:2b:c8:
                    89:68:5d:4c:b8:9c:fa:0b:86:98:25:f8:ff:6c:2c:
                    a1:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:19:4E:08:B4:4B:9A:A6:55:A5:F4:02:15:FB:99:FA:20:26:93:6D
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/WBlOCLRLmqZVpfQCFfuZ-iAmk20.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:a200::/40

    Signature Algorithm: sha256WithRSAEncryption
         1a:67:a4:0a:11:43:f3:62:7f:b2:13:fd:7e:8a:82:d0:c7:5a:
         76:95:05:bf:fb:ea:65:86:75:b4:b6:18:f0:57:69:09:dd:54:
         e2:ee:38:ff:93:44:71:d0:8c:15:5e:b5:87:b7:5a:8b:29:86:
         b3:25:65:e7:f3:c6:d6:dc:cb:c5:1c:c6:b8:a4:0f:ef:75:39:
         c8:dc:fa:22:08:a5:76:95:b2:99:cd:69:3e:66:50:6f:c5:e9:
         3e:1f:2e:a7:7c:9f:26:6b:0c:05:7e:5d:ef:51:aa:8e:73:c3:
         31:3b:77:5a:a8:cf:e0:dd:80:c5:21:67:98:b5:80:30:3f:48:
         2d:8c:72:cd:91:d1:aa:00:c0:e4:7a:81:aa:b9:10:a8:80:00:
         56:10:74:2d:8a:9a:42:16:f0:88:d1:a0:24:0e:a7:bc:42:c8:
         c5:a1:6e:f6:af:8a:71:84:6c:d6:09:23:b5:6d:be:dc:f4:71:
         3e:68:db:88:8c:3b:0b:83:95:31:c1:fb:e9:cd:1f:69:c3:2e:
         17:07:96:b2:1c:35:e0:7e:99:90:69:62:23:bd:6c:d0:c1:ec:
         99:96:23:7b:95:45:85:ae:fc:02:47:c6:23:4e:b7:43:69:94:
         d3:94:4d:92:90:94:77:25:79:55:45:ba:e0:8a:2c:5c:c3:5f:
         02:9e:f2:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:13 2026 by rpki-client