Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/YyicFPxRgcq9rTI3bhWTjKrV9CE.roa
File:                     YyicFPxRgcq9rTI3bhWTjKrV9CE.roa (raw, json)
Hash identifier:          ws8Sw+CaeCOReX3DBbE+EQ4w6jknpwrV22DRh2orAv8=
Subject key identifier:   63:28:9C:14:FC:51:81:CA:BD:AD:32:37:6E:15:93:8C:AA:D5:F4:21
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0693
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/YyicFPxRgcq9rTI3bhWTjKrV9CE.roa
Signing time:             Tue 31 Mar 2026 08:26:09 +0000
ROA not before:           Tue 31 Mar 2026 08:26:09 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:60:f01c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1683 (0x693)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:26:09 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=63289C14FC5181CABDAD32376E15938CAAD5F421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:80:bc:cc:df:8b:88:30:23:5f:66:34:72:85:
                    d4:ff:17:dd:b9:bf:97:95:e3:24:e4:8f:e7:74:08:
                    c0:a6:02:19:92:98:4c:53:9e:51:10:c5:bd:c7:63:
                    d2:15:5b:42:24:cc:3b:1e:f8:f7:44:6f:b0:b2:48:
                    e2:c9:6f:f5:82:dc:da:bc:ca:d6:95:4e:6c:8e:8f:
                    87:9d:d0:ae:13:68:99:33:d8:5b:a6:f0:1e:ad:b8:
                    78:65:a6:ea:ba:30:08:5f:01:d5:10:89:c7:96:c6:
                    8b:e1:d6:78:92:06:fa:c0:32:27:60:24:a0:3f:e8:
                    80:67:7e:fb:0d:17:b5:68:ac:3d:68:37:8c:ab:5d:
                    13:08:a1:7e:50:9b:ba:83:05:00:81:82:1d:69:d6:
                    01:54:9e:db:23:65:fb:2f:91:35:95:d9:b1:59:97:
                    cc:a5:b5:d4:19:27:a4:e0:2f:32:75:35:3a:1b:e4:
                    f3:cb:d3:bf:a0:df:0d:8b:a3:e8:ea:6f:b4:2a:cf:
                    28:79:5e:f5:9d:56:7c:67:44:a7:35:7c:c3:5f:69:
                    57:aa:69:6f:39:78:7d:e9:ce:94:ef:f2:e1:e4:4c:
                    8a:5c:78:f7:98:08:39:43:9b:39:5f:ad:61:58:f3:
                    65:31:b4:65:c7:e1:8a:04:3a:ca:0b:50:77:4c:2f:
                    ad:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:28:9C:14:FC:51:81:CA:BD:AD:32:37:6E:15:93:8C:AA:D5:F4:21
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/YyicFPxRgcq9rTI3bhWTjKrV9CE.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:60:f01c::/48

    Signature Algorithm: sha256WithRSAEncryption
         b5:a1:97:36:37:19:43:ce:63:0a:2a:2d:7e:f5:1d:01:77:51:
         7e:06:83:9e:45:83:45:95:1b:b6:c1:44:d8:77:9d:b3:41:56:
         e2:1e:3f:a3:41:40:77:51:fe:63:75:10:f7:2e:6c:4e:10:50:
         31:d5:9c:fc:da:6c:a5:46:ca:a0:f2:20:0a:d6:39:08:bc:49:
         08:87:2d:fd:5b:8b:91:4e:8f:e5:57:40:37:0b:32:c1:26:65:
         c6:93:b1:ca:0d:a3:94:65:e9:ca:71:fc:cf:df:35:3d:24:c0:
         f2:bb:c3:4b:5d:f8:13:bd:b6:98:8b:8d:fb:15:cd:bc:91:59:
         b5:d5:20:da:fb:5b:22:2d:5d:71:3b:8e:97:2d:de:21:ac:13:
         6e:10:0e:ee:5c:ad:bf:8f:d3:02:7a:20:f7:91:75:00:03:db:
         c9:81:e0:14:f0:44:ed:f5:86:ce:4f:24:69:56:64:4e:42:9a:
         e5:71:70:a5:46:4d:68:1c:b6:34:43:20:95:33:bc:a3:ca:09:
         03:31:46:0f:c7:83:62:15:2c:bd:51:6d:44:bd:d1:3b:ba:b0:
         30:cc:8d:08:c2:a3:1b:01:a6:40:d0:28:bb:d7:8a:78:9e:19:
         75:80:1c:fd:0e:3e:1f:cb:75:3a:62:66:76:45:0b:57:60:8c:
         60:a1:39:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 22:26:38 2026 by rpki-client