Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ZOrELqZcpsXBawTAKxbw8qUQs9c.roa
File:                     ZOrELqZcpsXBawTAKxbw8qUQs9c.roa (raw, json)
Hash identifier:          ac4Kx/kPiRMDbgNKW4fV6bBOtw3J1UU/shrQ6os/WH4=
Subject key identifier:   64:EA:C4:2E:A6:5C:A6:C5:C1:6B:04:C0:2B:16:F0:F2:A5:10:B3:D7
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       067C
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ZOrELqZcpsXBawTAKxbw8qUQs9c.roa
Signing time:             Tue 31 Mar 2026 08:25:56 +0000
ROA not before:           Tue 31 Mar 2026 08:25:56 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:6a00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1660 (0x67c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:25:56 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=64EAC42EA65CA6C5C16B04C02B16F0F2A510B3D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7b:76:fe:33:d7:0f:bb:b3:f5:15:84:74:b6:
                    44:18:3b:31:be:1e:66:ba:48:15:8f:51:25:97:a8:
                    58:27:b8:3a:05:56:19:34:2f:d1:1d:56:d7:48:6b:
                    c6:54:c6:dd:f4:ec:b1:52:e6:fc:9b:c6:57:84:a4:
                    b9:e0:8e:59:9a:11:0f:da:6a:c8:c8:87:8a:7c:74:
                    38:74:79:29:f1:29:b5:04:4e:4b:59:e3:9b:9d:6d:
                    6d:60:23:6e:60:29:43:94:1b:17:ce:16:73:07:b2:
                    73:87:24:b0:8a:98:64:fb:c2:50:37:44:b3:fa:80:
                    d4:87:25:ca:fa:23:09:36:ee:74:03:9d:66:a4:a6:
                    a2:13:f9:f6:32:2e:b7:db:87:cf:19:d0:b1:10:ef:
                    d3:22:53:3f:91:d7:0f:1f:bb:ba:78:6a:4e:23:d1:
                    e3:4b:12:6e:17:23:4e:de:f1:d7:46:e9:32:15:55:
                    89:53:e2:cb:20:88:4f:56:fe:cc:b7:ed:7e:c7:d9:
                    7b:4e:c3:0b:02:73:85:09:64:01:4f:6d:d1:58:52:
                    26:1f:0b:e3:a1:a1:d8:43:12:ca:e2:38:a5:de:0b:
                    b1:95:93:57:3d:e0:6b:b0:33:ad:0f:78:7f:b2:9b:
                    f1:31:0d:7a:43:91:bc:ff:af:b7:f1:a7:4b:39:93:
                    35:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:EA:C4:2E:A6:5C:A6:C5:C1:6B:04:C0:2B:16:F0:F2:A5:10:B3:D7
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ZOrELqZcpsXBawTAKxbw8qUQs9c.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:6a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         45:53:e8:20:92:b0:f1:84:69:2b:0e:20:f6:cf:65:7c:b6:ea:
         ea:1c:c4:6e:cc:b4:7e:2a:78:10:00:da:6f:0e:56:c6:c8:e4:
         2d:c7:aa:5d:00:7e:b4:ea:d9:0a:20:fb:47:c6:62:ff:cb:25:
         95:88:a8:48:30:09:35:86:b2:42:d7:e8:81:70:de:e6:33:44:
         64:2b:ad:10:d9:dc:c7:71:d1:b8:2e:52:52:a1:af:e8:7d:0e:
         c0:0e:07:87:6e:b1:2c:dc:a1:be:b6:fe:b3:ca:2b:95:9e:d7:
         95:43:98:7f:1a:e7:6e:b5:0d:49:77:17:0e:1b:2a:48:74:e8:
         06:63:9b:24:e2:a5:5b:7d:3a:d8:9d:f8:80:4f:7c:77:32:cc:
         08:b2:2b:c0:f0:06:67:a5:ec:6b:78:ef:46:3a:4e:b4:f0:ae:
         10:cc:62:f7:6a:6f:18:4f:86:d2:41:f8:6b:92:7f:d8:9a:f3:
         57:ac:f0:e8:01:37:25:06:17:32:7b:bd:cc:a1:64:c4:87:f8:
         11:40:a2:9e:2f:65:57:dd:bd:02:96:28:1c:43:b4:42:e6:41:
         14:5d:98:47:e3:8e:7f:7d:22:c3:8e:72:e2:bc:e8:85:20:a1:
         74:b2:48:43:fa:8b:51:86:b8:ab:5c:ec:89:4f:a4:e0:1a:33:
         03:03:4e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:32 2026 by rpki-client