Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/XqJicGhW2BoQzvvOnP9rbM55lD0.roa
File:                     XqJicGhW2BoQzvvOnP9rbM55lD0.roa (raw, json)
Hash identifier:          5vyhV55NOxjsYmsZkzJFBdhNxw58lMseCuM0lm2ihIE=
Subject key identifier:   5E:A2:62:70:68:56:D8:1A:10:CE:FB:CE:9C:FF:6B:6C:CE:79:94:3D
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       06EE
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/XqJicGhW2BoQzvvOnP9rbM55lD0.roa
Signing time:             Tue 31 Mar 2026 08:26:50 +0000
ROA not before:           Tue 31 Mar 2026 08:26:50 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:7000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1774 (0x6ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:26:50 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=5EA262706856D81A10CEFBCE9CFF6B6CCE79943D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:60:b9:df:90:21:a1:60:36:81:cd:2e:e3:76:
                    f9:c3:bf:80:e7:f5:65:29:c6:83:9d:1d:8d:bd:36:
                    c9:3c:d9:e2:c3:5c:e3:78:5f:db:81:c3:f9:10:94:
                    47:d3:33:5f:5b:34:e2:ac:1a:b2:21:66:ac:92:11:
                    2e:dc:97:20:eb:05:a7:66:58:65:9a:cb:85:b1:d0:
                    11:c6:55:3e:5c:32:f5:00:c2:65:75:4f:27:57:91:
                    20:5b:ba:3c:f8:93:5d:a1:9c:61:7f:86:ae:e8:ad:
                    77:1a:8f:32:62:97:18:32:91:9b:ba:ab:18:bd:03:
                    db:e0:a4:81:30:9b:61:2e:e3:4e:d1:95:f6:27:b1:
                    a2:6c:7f:44:fd:6b:03:8b:fd:ea:cf:29:1a:12:39:
                    7f:d0:ec:e8:25:a9:55:6b:15:83:ed:32:f8:97:e2:
                    16:f6:b3:f9:6b:8a:20:48:a3:18:84:2e:8f:94:ca:
                    5f:f2:ce:4d:04:ff:ef:00:b0:27:0b:c7:33:e1:cc:
                    45:c3:7b:01:c0:43:76:7b:32:da:bf:96:54:9d:d9:
                    66:b2:db:7a:01:8c:d1:3b:6a:d1:90:13:45:93:0f:
                    15:c4:b9:3e:07:3d:07:5e:60:b7:40:66:b7:1d:c2:
                    e1:c8:5a:31:74:e3:af:e6:b1:22:81:b3:39:90:ac:
                    70:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:A2:62:70:68:56:D8:1A:10:CE:FB:CE:9C:FF:6B:6C:CE:79:94:3D
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/XqJicGhW2BoQzvvOnP9rbM55lD0.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:7000::/40

    Signature Algorithm: sha256WithRSAEncryption
         34:68:95:42:88:84:d4:29:25:ed:76:2c:f4:d3:cc:73:bf:64:
         c9:fb:d8:48:d4:a2:cd:a0:88:c1:72:b6:1d:a5:63:c5:3a:98:
         df:a2:01:14:73:c6:6f:1b:95:cb:8a:c0:b5:10:a0:d6:cf:8e:
         d2:aa:87:01:2a:40:9d:5d:93:47:ed:2b:ad:11:11:31:18:9f:
         6b:b0:3e:ff:43:fa:fc:db:81:94:c2:e4:3f:29:16:a1:88:47:
         1c:4a:8f:44:71:d4:2b:62:4c:2c:13:83:da:ed:42:90:44:0e:
         a6:5e:b1:c0:bf:3d:40:2b:aa:09:27:9e:d9:ba:46:e5:1b:d2:
         06:48:50:cf:6a:cc:fe:7f:f1:50:72:19:da:98:ab:bf:76:a3:
         88:69:a5:dd:dd:24:de:7e:b0:dc:39:81:50:b9:58:0b:79:3b:
         be:ca:f6:cc:59:a2:5b:74:54:e4:4e:5c:1e:8d:66:e2:95:35:
         8c:ea:94:e4:8c:01:39:dc:38:95:09:f7:9b:d2:51:09:54:52:
         cb:98:20:f2:25:b2:24:c5:55:25:ec:0b:ba:78:3f:9c:8c:ff:
         5e:79:f3:a0:0f:45:18:56:34:19:47:1f:9f:df:7a:b2:51:96:
         fe:7c:70:43:d1:41:28:3c:f3:45:08:17:c6:4a:53:6d:52:e0:
         da:72:8c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:54 2026 by rpki-client