Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/WinQ4JWpsVutuSEHYCGtHPKhwI4.roa
File:                     WinQ4JWpsVutuSEHYCGtHPKhwI4.roa (raw, json)
Hash identifier:          nMAxUGr67an5BhZAeCzXNnwYzFl4qQPU0eAcw6MxMKA=
Subject key identifier:   5A:29:D0:E0:95:A9:B1:5B:AD:B9:21:07:60:21:AD:1C:F2:A1:C0:8E
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       06B4
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/WinQ4JWpsVutuSEHYCGtHPKhwI4.roa
Signing time:             Tue 31 Mar 2026 08:26:24 +0000
ROA not before:           Tue 31 Mar 2026 08:26:24 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:a00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1716 (0x6b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:26:24 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=5A29D0E095A9B15BADB921076021AD1CF2A1C08E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ce:01:1b:00:7a:fc:71:86:d5:3d:26:b7:d7:
                    5d:78:8e:27:5b:50:51:9b:ca:6e:8f:59:dd:6e:b4:
                    bb:07:fa:70:48:d6:9c:15:4e:6b:bb:0b:ad:09:a0:
                    50:94:b5:4c:9b:8b:c6:ff:09:fa:7a:7c:c7:30:c5:
                    a3:30:5e:e2:61:0c:a3:bd:52:8c:ab:a1:65:7b:4e:
                    bf:69:6d:ee:49:64:7d:b6:0e:d4:e6:17:a1:94:1b:
                    37:4c:5d:73:3a:53:ce:5d:aa:05:a2:b3:22:9b:fc:
                    96:6e:77:e2:9e:82:8b:c2:57:20:5a:2d:c8:43:7b:
                    55:d6:a0:18:67:d4:7a:07:64:ea:f1:2e:3d:d7:b3:
                    41:7d:fe:86:7a:8c:ff:78:9a:45:ed:e9:62:47:52:
                    d0:42:61:ce:a9:65:8c:a0:a8:f1:6a:15:7a:d8:f7:
                    27:c0:e1:5f:81:bc:85:5a:2e:bf:5a:d0:fd:2a:55:
                    60:83:10:5f:71:09:e8:f7:da:94:9d:fc:8f:bb:68:
                    83:1d:2b:64:f1:b3:db:91:be:8f:92:fc:c7:3b:e1:
                    63:e4:50:28:db:5f:74:b5:95:3c:09:a7:9e:66:39:
                    91:b5:28:46:47:e7:2e:eb:b9:95:04:d7:29:53:a0:
                    b4:d3:c7:23:50:9f:ba:e5:5f:92:6d:14:a1:ed:5d:
                    11:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:29:D0:E0:95:A9:B1:5B:AD:B9:21:07:60:21:AD:1C:F2:A1:C0:8E
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/WinQ4JWpsVutuSEHYCGtHPKhwI4.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         45:1e:6e:e0:84:9b:26:97:64:e9:ca:d7:44:4c:53:0f:b0:1f:
         18:97:b6:30:98:aa:e1:b7:0f:b0:6d:be:9e:91:d8:59:95:57:
         2d:2c:5a:52:30:a7:36:87:fe:99:e3:ec:d5:69:03:1a:18:5b:
         c8:9e:31:d4:d9:f0:fe:c3:ca:44:4e:c9:9d:01:c4:3d:81:dc:
         3d:a2:f3:a6:01:41:fb:26:05:3e:ea:19:ea:57:5c:91:cc:df:
         f9:2e:af:16:a6:31:65:09:be:a5:1a:41:5d:1a:18:da:96:d5:
         c7:96:a0:76:a5:a6:1b:9b:96:16:5c:23:ee:3d:83:18:69:8d:
         4a:1c:82:af:3a:5a:a0:d3:70:65:7f:9d:83:a1:7a:a4:f6:f2:
         7e:31:51:fc:bd:51:74:c6:b5:e8:1e:44:66:25:6d:1d:ce:5a:
         a8:ad:a7:71:c1:b6:4d:8d:bd:a0:5f:0c:8c:77:c6:e1:90:47:
         14:25:b4:e1:dd:8f:16:47:3e:47:4e:84:32:cd:bd:95:b1:80:
         8f:22:0a:2b:ba:dc:47:c7:b0:d4:c9:3a:9c:d8:63:2c:b5:09:
         44:33:34:bf:2e:6a:3d:6c:16:a9:74:24:22:b5:49:44:9f:8a:
         09:82:d2:21:c2:36:7e:8a:a5:5d:3f:bf:6d:50:dd:2d:8c:de:
         bf:ee:c2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:15 2026 by rpki-client