Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/XE6q5OL6eavNV3EAmniQBZnbeSw.roa
File:                     XE6q5OL6eavNV3EAmniQBZnbeSw.roa (raw, json)
Hash identifier:          /zMvssNT7Kp8+NV4FVkzyfn0ZQZP57afpsMF6gEsBz0=
Subject key identifier:   5C:4E:AA:E4:E2:FA:79:AB:CD:57:71:00:9A:78:90:05:99:DB:79:2C
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       06A8
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/XE6q5OL6eavNV3EAmniQBZnbeSw.roa
Signing time:             Tue 31 Mar 2026 08:26:18 +0000
ROA not before:           Tue 31 Mar 2026 08:26:18 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:bc00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1704 (0x6a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:26:18 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=5C4EAAE4E2FA79ABCD5771009A78900599DB792C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d5:79:40:60:c5:a7:d8:cb:2d:04:9c:c3:0f:
                    ed:33:38:62:4d:3d:3e:91:a0:9c:3c:f9:88:33:ed:
                    28:6a:d9:c7:21:b9:e6:54:94:39:16:ad:7d:0c:23:
                    a5:98:fb:7a:9e:52:11:39:26:ee:fa:51:bf:99:33:
                    e8:8a:36:37:40:73:f0:45:c8:b3:3f:6f:91:67:81:
                    87:2c:4a:15:a9:ac:43:08:19:85:fd:48:b3:fe:0d:
                    aa:89:54:9f:c8:5d:6f:ac:24:1a:3a:e7:fa:04:8e:
                    2f:37:d4:49:d9:d8:3c:2f:9f:cf:23:f2:e8:e6:fa:
                    6e:36:ee:1d:db:dd:e2:4a:1d:67:d8:19:6c:b3:3b:
                    c5:39:f9:24:8f:4c:7f:02:3b:f7:40:ef:2b:c0:3a:
                    5c:8a:e5:56:3f:2a:28:d3:69:35:3f:2b:4a:f8:64:
                    96:af:6c:5e:3a:b6:de:80:07:88:7c:2f:ea:06:4e:
                    fe:bc:4d:46:aa:44:03:d0:7f:4b:dd:6f:29:18:d4:
                    4a:3b:81:c3:6b:ba:8f:1f:0d:4c:f6:1d:7e:2d:03:
                    40:d8:cb:d8:37:6e:22:de:b0:9e:15:d5:0e:24:d4:
                    01:c2:c0:72:c7:7e:c7:66:f2:b4:16:76:ba:3a:a7:
                    03:84:b7:4a:07:b2:62:6b:c6:0d:e5:3b:25:ad:43:
                    52:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:4E:AA:E4:E2:FA:79:AB:CD:57:71:00:9A:78:90:05:99:DB:79:2C
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/XE6q5OL6eavNV3EAmniQBZnbeSw.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:bc00::/40

    Signature Algorithm: sha256WithRSAEncryption
         71:b3:d1:36:49:9a:78:91:b5:7d:51:1a:6f:69:a0:70:ba:da:
         52:5e:61:6d:54:cc:d7:c5:19:f4:93:7d:60:c4:24:02:fd:90:
         34:63:87:3e:1c:2f:1a:26:88:73:88:fa:8f:99:71:42:2a:90:
         a1:c0:df:eb:08:4b:78:44:49:f5:53:e8:b8:7d:a9:0a:40:f9:
         be:80:44:29:42:d4:18:4b:bb:c7:ce:61:62:9d:ff:1b:d7:dd:
         c2:cc:ac:4e:7a:14:df:d7:46:fa:cd:c5:e9:4a:ad:64:d8:a9:
         66:99:61:76:25:cf:51:02:37:ec:5c:d1:c7:9e:e3:50:ea:65:
         2a:2e:92:b3:1c:3d:68:2b:04:4e:b6:8e:76:ac:29:56:a2:6d:
         64:fb:fd:b1:d8:fe:8e:8e:94:ca:a4:33:27:ad:ed:e1:2b:00:
         cb:ca:0a:e9:9f:46:03:53:32:ac:bf:b4:bc:ab:b6:69:9e:42:
         09:11:3e:d7:ac:c2:8c:b9:9c:fe:98:6d:33:d8:3b:b9:af:15:
         8a:7a:8e:ff:dc:1c:05:12:d2:67:f4:99:78:b1:5e:52:ea:f3:
         de:cd:c2:14:ec:6a:c5:b8:78:56:a8:74:06:8f:87:ed:49:0f:
         81:cd:fe:f6:73:1c:11:b5:3a:c2:0a:26:15:c8:af:57:a4:5e:
         40:a8:00:7b
-----BEGIN CERTIFICATE-----
MIIEwzCCA6ugAwIBAgICBqgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjAzMzEw
ODI2MThaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDVDNEVBQUU0RTJGQTc5
QUJDRDU3NzEwMDlBNzg5MDA1OTlEQjc5MkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCv1XlAYMWn2MstBJzDD+0zOGJNPT6RoJw8+Ygz7Shq2cchueZU
lDkWrX0MI6WY+3qeUhE5Ju76Ub+ZM+iKNjdAc/BFyLM/b5FngYcsShWprEMIGYX9
SLP+DaqJVJ/IXW+sJBo65/oEji831EnZ2Dwvn88j8ujm+m427h3b3eJKHWfYGWyz
O8U5+SSPTH8CO/dA7yvAOlyK5VY/KijTaTU/K0r4ZJavbF46tt6AB4h8L+oGTv68
TUaqRAPQf0vdbykY1Eo7gcNruo8fDUz2HX4tA0DYy9g3biLesJ4V1Q4k1AHCwHLH
fsdm8rQWdro6pwOEt0oHsmJrxg3lOyWtQ1JDAgMBAAGjggHfMIIB2zAdBgNVHQ4E
FgQUXE6q5OL6eavNV3EAmniQBZnbeSwwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDEyOS9YRTZxNU9MNmVhdk5WM0VBbW5pUUJabmJlU3cucm9h
MCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJAoAa7wwDQYJKoZIhvcNAQEL
BQADggEBAHGz0TZJmniRtX1RGm9poHC62lJeYW1UzNfFGfSTfWDEJAL9kDRjhz4c
LxomiHOI+o+ZcUIqkKHA3+sIS3hESfVT6Lh9qQpA+b6ARClC1BhLu8fOYWKd/xvX
3cLMrE56FN/XRvrNxelKrWTYqWaZYXYlz1ECN+xc0cee41DqZSoukrMcPWgrBE62
jnasKVaibWT7/bHY/o6OlMqkMyet7eErAMvKCumfRgNTMqy/tLyrtmmeQgkRPtes
woy5nP6YbTPYO7mvFYp6jv/cHAUS0mf0mXixXlLq897NwhTsasW4eFaodAaPh+1J
D4HN/vZzHBG1OsIKJhXIr1ekXkCoAHs=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:30 2026 by rpki-client