Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ZIy29wPD_wgGydUX7Lf44WM48C4.roa
File:                     ZIy29wPD_wgGydUX7Lf44WM48C4.roa (raw, json)
Hash identifier:          2njOIhBp+8BwzKGCIF3H+GzHcfp/evgUuvim4joVsFM=
Subject key identifier:   64:8C:B6:F7:03:C3:FF:08:06:C9:D5:17:EC:B7:F8:E1:63:38:F0:2E
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       06DB
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ZIy29wPD_wgGydUX7Lf44WM48C4.roa
Signing time:             Tue 31 Mar 2026 08:26:41 +0000
ROA not before:           Tue 31 Mar 2026 08:26:41 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:9000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1755 (0x6db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:26:41 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=648CB6F703C3FF0806C9D517ECB7F8E16338F02E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:60:4f:c5:40:08:fc:2b:4a:21:c1:44:a3:8c:
                    5c:8d:2e:ed:87:3e:6d:8d:84:6d:02:4a:b3:3e:cf:
                    76:ab:a8:e2:d4:ee:77:d3:d8:71:99:85:15:d5:17:
                    df:1f:98:34:80:e5:13:95:09:af:3e:b2:ba:94:a9:
                    11:1d:e0:c9:36:fa:c5:91:ac:20:be:8b:84:73:b2:
                    64:8a:45:c2:16:6a:9e:4b:c0:e9:e1:4f:83:6f:bf:
                    8f:83:f8:75:79:7b:7f:89:66:d0:6c:89:03:32:05:
                    bd:47:b8:e5:87:c2:37:4e:69:50:e0:e8:c6:f5:08:
                    d0:e4:ef:11:b3:22:b8:a0:cd:9e:b9:ea:c1:44:5a:
                    14:32:fc:79:d7:8a:94:a9:15:96:42:0d:9a:28:aa:
                    5b:f1:6f:ad:91:6f:82:3d:43:5a:5c:48:6b:eb:6b:
                    b9:11:87:1b:10:ba:cc:b9:93:55:6e:cb:06:87:09:
                    4c:f7:e3:08:5e:9e:ad:3d:25:57:09:4b:03:f3:67:
                    fb:ed:46:d7:1d:da:09:5d:6f:f1:ad:30:09:c3:1f:
                    9c:19:a4:a6:f4:98:eb:80:66:c8:7f:6b:61:f4:69:
                    e8:99:7e:9a:dc:7c:a9:3f:a8:92:3d:49:46:37:09:
                    24:07:fe:c1:d9:f4:1a:52:04:87:6e:57:88:5a:9c:
                    c1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:8C:B6:F7:03:C3:FF:08:06:C9:D5:17:EC:B7:F8:E1:63:38:F0:2E
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ZIy29wPD_wgGydUX7Lf44WM48C4.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:9000::/40

    Signature Algorithm: sha256WithRSAEncryption
         39:8f:5b:cf:aa:df:b1:23:97:69:bc:e2:cc:5a:0b:b0:52:90:
         f3:ce:37:b6:43:a6:9f:30:44:46:ad:bc:a1:cd:df:8d:dd:51:
         b7:f5:ca:d9:4d:b0:da:e7:7b:e0:81:89:c3:c8:0f:15:18:33:
         e8:5e:ae:ad:94:b7:15:d3:f4:d4:41:5f:85:4d:ef:29:ef:4f:
         25:b3:2a:f3:51:01:d3:aa:47:99:22:66:e1:2e:28:a1:da:09:
         71:30:ff:31:90:84:a4:27:2b:18:28:25:28:b1:ad:a8:37:f2:
         66:e6:9c:f9:b5:f5:bf:70:59:64:49:ca:1e:c0:4a:1d:0b:94:
         54:6d:f1:05:07:3d:e5:03:20:ac:97:f4:5f:0c:7a:57:5e:39:
         9f:f7:e8:c1:4f:05:87:f0:83:c0:9f:f2:8f:b8:b1:fd:60:2d:
         07:aa:47:dc:a8:30:1f:6d:db:dd:65:8c:bf:3a:99:f6:51:49:
         83:06:9d:1b:e3:22:6d:48:f7:8f:16:e5:3c:ee:cf:f0:f5:8d:
         71:97:a5:b9:2c:fc:5e:0b:22:5e:83:a0:c8:d8:a1:d4:7b:7b:
         11:ab:27:8f:81:68:1d:73:e7:37:69:91:9c:10:84:88:54:bb:
         f7:db:8d:07:0b:5a:9f:ef:44:4b:df:68:3e:cf:5a:ee:99:07:
         3e:ca:cb:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:32 2026 by rpki-client