Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ZAzBX75INLxFKxD_LjND9BUMeVo.roa
File:                     ZAzBX75INLxFKxD_LjND9BUMeVo.roa (raw, json)
Hash identifier:          dSLRKK2cDtG3/Ju+mvEBSLRetZwbeoHdi/yTvssrgdI=
Subject key identifier:   64:0C:C1:5F:BE:48:34:BC:45:2B:10:FF:2E:33:43:F4:15:0C:79:5A
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       064C
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ZAzBX75INLxFKxD_LjND9BUMeVo.roa
Signing time:             Tue 31 Mar 2026 08:25:31 +0000
ROA not before:           Tue 31 Mar 2026 08:25:31 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:3600::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1612 (0x64c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:25:31 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=640CC15FBE4834BC452B10FF2E3343F4150C795A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c1:c4:1b:39:3c:4b:07:f2:f5:9e:88:f8:8f:
                    55:86:7e:90:a3:bc:c1:76:87:d4:a4:cb:f5:12:c4:
                    fc:6b:0f:88:44:bf:cc:0d:50:fe:8b:e0:73:75:13:
                    c8:82:52:c1:2f:b9:17:6c:71:83:54:ef:41:23:20:
                    ab:bf:b9:c7:93:b3:26:e5:92:03:cf:df:f5:19:03:
                    7d:ff:2a:f6:0d:1f:39:28:60:5a:5d:80:b8:b9:b1:
                    68:3a:49:b6:6c:78:7b:ee:22:73:95:33:53:a8:72:
                    ed:48:95:9e:67:2b:37:09:fd:06:8f:09:90:db:42:
                    50:36:32:ff:ef:09:35:0c:86:5a:00:92:ea:48:cd:
                    30:83:fb:71:ea:30:83:bd:07:e3:d0:96:62:8e:07:
                    a7:9b:47:39:7c:81:37:e1:e6:19:16:31:1c:07:95:
                    f7:cb:d5:85:3e:10:ee:b0:e3:fb:90:fe:cf:32:a4:
                    49:c1:ec:fb:b7:0e:84:d1:5d:82:ad:4d:85:d9:e1:
                    71:aa:cf:98:bf:89:a9:35:d5:11:2d:96:27:32:2c:
                    3f:04:78:25:66:c1:42:89:47:2c:19:cc:6b:0c:0d:
                    29:f5:68:14:58:50:61:6f:5f:72:ef:09:a2:e4:3e:
                    96:0c:0c:fe:6d:63:09:3d:79:34:aa:e1:f6:02:93:
                    37:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:0C:C1:5F:BE:48:34:BC:45:2B:10:FF:2E:33:43:F4:15:0C:79:5A
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ZAzBX75INLxFKxD_LjND9BUMeVo.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:3600::/40

    Signature Algorithm: sha256WithRSAEncryption
         35:d1:d1:b0:2a:1e:6e:d9:38:0c:41:8d:c3:02:f9:b6:f2:1e:
         f2:c4:7e:47:dc:5b:f5:71:13:d7:8e:9d:a2:63:8b:b0:50:00:
         2c:47:5b:36:7f:df:9b:6a:77:77:9a:ce:63:45:8b:95:a1:66:
         19:f5:5c:ed:1b:43:fb:dc:dd:9e:af:74:40:00:3c:58:91:82:
         08:3b:e5:0c:60:49:04:4f:ac:11:45:7b:a5:ee:89:e4:df:76:
         8b:0b:bb:ac:93:22:e8:7f:bc:ee:1e:53:73:5c:07:6f:96:14:
         61:c4:f8:5d:13:46:e2:d2:0c:71:1e:a0:7b:b9:4c:62:28:f7:
         29:41:08:74:b5:de:fd:64:71:94:cc:65:9c:d5:db:f4:71:ac:
         d2:1d:a6:72:eb:1b:0d:d0:1f:81:1f:ff:58:95:ba:af:f6:24:
         c4:9d:27:85:86:f1:9c:cf:d0:cc:d1:3f:fd:fe:f4:97:7b:2b:
         80:81:02:bc:5d:56:10:22:ac:cd:b8:40:ac:e5:da:7c:26:66:
         fc:54:b4:f7:f9:2b:e4:1f:d2:dd:9e:c7:d5:2c:09:3d:0d:a7:
         3f:c3:0c:35:b5:bb:3f:02:33:97:32:4e:d6:41:29:4e:6f:98:
         4a:25:80:0c:77:ed:17:3a:15:f3:3c:2b:d6:45:7d:8c:5c:d9:
         e6:45:30:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:57 2026 by rpki-client