Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/X7VAUtHEgovG8iqP5aBv7E9lOvo.roa
File:                     X7VAUtHEgovG8iqP5aBv7E9lOvo.roa (raw, json)
Hash identifier:          f4IE4jtYwcVRceOZuqtFHW17Kt7ZZg3gEYugJUEhCy4=
Subject key identifier:   5F:B5:40:52:D1:C4:82:8B:C6:F2:2A:8F:E5:A0:6F:EC:4F:65:3A:FA
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0764
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/X7VAUtHEgovG8iqP5aBv7E9lOvo.roa
Signing time:             Tue 31 Mar 2026 08:27:47 +0000
ROA not before:           Tue 31 Mar 2026 08:27:47 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:d200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1892 (0x764)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:27:47 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=5FB54052D1C4828BC6F22A8FE5A06FEC4F653AFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:28:33:59:57:7b:cb:29:8e:4c:25:db:b9:23:
                    57:9f:26:8f:c4:1c:0f:88:37:8c:e4:ae:0a:85:01:
                    a4:f3:92:a6:1a:dd:e3:2d:09:05:ab:1d:f5:f6:bf:
                    ae:23:e5:a3:7c:8e:99:94:09:84:a5:cb:a4:a1:3b:
                    a2:22:17:72:95:a2:62:b5:51:a7:69:dc:3b:7d:f5:
                    1d:4d:76:16:03:4b:69:e0:cb:d3:32:78:5c:96:b7:
                    f0:3c:f5:70:4b:b4:4a:a0:3e:5b:60:24:c6:90:27:
                    f2:d5:ec:3e:32:76:2d:52:40:08:84:20:a9:b8:67:
                    eb:79:e9:77:99:95:4f:e8:55:45:59:e8:14:5a:c6:
                    1e:a9:f3:47:75:e8:fe:c7:44:a3:d5:92:20:f0:6a:
                    7d:22:5f:42:28:c5:91:ea:8e:a7:90:f6:a4:0a:26:
                    1b:f4:06:95:6a:27:4f:87:91:f1:82:06:20:45:29:
                    17:a5:0b:82:4a:ab:00:d2:1f:55:b0:c0:de:d1:3d:
                    ab:25:b7:5e:c8:7d:19:99:23:eb:0b:a1:91:68:94:
                    4d:de:a2:37:41:33:c4:5d:0c:73:9f:2a:89:f8:9d:
                    b0:f6:2a:55:0c:e4:2a:9e:88:92:84:3e:22:b0:3e:
                    24:25:44:26:2d:13:02:67:e6:c3:c5:84:ec:ef:47:
                    30:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:B5:40:52:D1:C4:82:8B:C6:F2:2A:8F:E5:A0:6F:EC:4F:65:3A:FA
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/X7VAUtHEgovG8iqP5aBv7E9lOvo.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:d200::/40

    Signature Algorithm: sha256WithRSAEncryption
         11:ab:b7:e0:fd:41:43:f0:8f:44:b1:e7:ee:39:2c:b1:7b:68:
         45:cd:03:1f:9a:82:40:0c:b8:3c:f5:94:5e:e4:91:51:23:47:
         b9:17:f9:0f:c5:7d:47:e7:7c:27:81:de:9c:85:22:5c:7d:4e:
         0b:9f:fb:2f:98:5c:aa:33:e1:29:d9:35:18:c3:4d:ff:2e:1d:
         e9:61:22:f4:c3:0c:5f:cd:0d:90:0f:e6:fd:a0:26:f0:da:46:
         dc:ab:b4:10:54:fe:0b:8e:88:f5:31:cb:d3:90:83:83:7c:55:
         da:a8:69:51:48:d6:12:4d:f3:7a:85:e1:14:72:d9:95:2e:54:
         e1:7a:01:66:eb:b7:de:1b:1b:51:02:24:58:33:9b:14:f0:cb:
         8c:6d:49:50:2f:c6:f1:5b:a4:14:d7:18:20:d2:81:ee:3b:9c:
         b4:91:ee:41:ba:b3:fc:3b:d6:1d:ae:3b:d4:7e:45:2d:cd:5c:
         90:06:d4:f6:77:26:a9:f8:a1:b2:5d:3d:0d:09:39:dd:36:b9:
         00:35:3a:25:9e:b7:1e:d7:8f:70:79:e4:2f:aa:6f:db:ff:fa:
         e7:59:49:02:7d:07:07:81:19:39:c1:9e:54:a1:45:ed:c7:12:
         92:f8:78:8c:4c:41:4c:85:1d:02:24:f1:2c:9b:43:ba:06:10:
         ab:16:c4:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:17 2026 by rpki-client