Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/YmY88oIhkHNsbi69Yz_YcFkwvXs.roa
File:                     YmY88oIhkHNsbi69Yz_YcFkwvXs.roa (raw, json)
Hash identifier:          nyK/3jeazZ/XllEWt5gfEHi84tSzSu3n+/pxqX65nmU=
Subject key identifier:   62:66:3C:F2:82:21:90:73:6C:6E:2E:BD:63:3F:D8:70:59:30:BD:7B
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0786
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/YmY88oIhkHNsbi69Yz_YcFkwvXs.roa
Signing time:             Tue 31 Mar 2026 08:28:06 +0000
ROA not before:           Tue 31 Mar 2026 08:28:06 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:61:7000::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1926 (0x786)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:28:06 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=62663CF2822190736C6E2EBD633FD8705930BD7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a7:71:ba:8a:7e:7f:e6:dc:9a:a9:25:5b:73:
                    e5:e3:3b:ca:33:dd:50:53:a7:34:91:f0:7b:eb:b8:
                    aa:16:86:0d:af:16:f4:a2:1c:00:ba:03:a2:1d:61:
                    92:cc:7b:d6:2c:4c:47:ab:00:09:94:1c:b9:ac:8e:
                    f2:88:d6:84:cb:aa:37:0e:29:3b:c9:75:e7:65:70:
                    22:82:13:68:4d:21:39:88:96:38:b1:08:80:f6:2f:
                    fb:6c:60:06:86:83:f1:b0:e8:ea:d3:15:44:01:19:
                    5d:ee:a8:da:6f:b7:f7:3f:03:38:dd:59:e7:6b:a7:
                    4b:f7:be:8d:d8:c5:2f:36:9f:cd:8c:b4:fe:72:38:
                    fc:ae:65:60:07:b9:df:bf:64:66:c7:10:80:d4:40:
                    ea:4b:2a:5a:96:ac:6b:07:97:5f:00:c2:a9:26:91:
                    80:7e:e2:36:ba:7e:54:5b:91:94:8a:77:e4:10:a1:
                    b1:8c:e7:01:5d:bf:7d:b2:97:a6:e8:f0:18:35:43:
                    5a:7d:30:3b:e6:9a:da:74:00:27:89:25:e7:9a:41:
                    44:ad:d0:c9:1c:9b:5e:6d:28:f0:36:75:e3:d1:87:
                    81:67:32:34:4e:b2:af:dc:65:bc:4b:05:25:83:cc:
                    b7:a7:56:a6:e9:77:d8:ed:a5:30:dc:e6:dc:22:d4:
                    7f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:66:3C:F2:82:21:90:73:6C:6E:2E:BD:63:3F:D8:70:59:30:BD:7B
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/YmY88oIhkHNsbi69Yz_YcFkwvXs.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:7000::/37

    Signature Algorithm: sha256WithRSAEncryption
         44:c6:3d:95:40:14:cb:f0:26:90:80:b4:98:b8:5b:bd:b1:fc:
         d9:7c:4d:25:81:5f:44:67:e1:2a:d0:6c:f3:de:d0:9c:05:d3:
         60:f4:16:9a:c7:29:be:73:b1:8f:72:b3:ec:7c:e3:8c:3f:7a:
         ec:79:fe:ef:27:83:80:7d:32:00:34:a5:30:e7:6f:0c:9a:c5:
         7e:e8:ca:1a:32:2f:ed:0f:b5:f4:c1:e1:70:be:a4:dd:98:60:
         8f:b0:f6:eb:df:92:19:34:02:e6:dd:a3:77:ee:13:b6:7a:75:
         bc:0e:e9:8e:62:c3:e8:e1:87:d6:4c:1d:be:1b:80:09:30:e4:
         28:ed:61:0d:52:ec:5a:cf:9d:f5:4e:40:07:64:af:df:09:fb:
         09:e6:ac:97:73:43:a0:2b:ee:e2:7a:41:55:50:34:02:87:7f:
         ef:d6:75:b4:f6:06:a6:29:90:cd:5e:b7:3e:54:c4:fd:90:bc:
         3f:79:de:13:22:fb:3b:7d:40:74:ff:ba:e2:9f:71:00:84:c4:
         2e:b0:68:d3:33:86:3b:7a:02:fe:59:b4:fc:4d:11:3c:7c:92:
         cc:30:7c:e7:09:3c:dc:97:48:16:0b:f6:67:8b:a2:3c:f8:2f:
         99:e2:9e:be:b1:bb:35:f3:e4:32:bb:6c:7e:df:cd:3d:bf:0a:
         64:1c:7a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:27 2026 by rpki-client