Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/bbb8xZmYQnfu_JEUnp6BZCSrwlQ.roa
File:                     bbb8xZmYQnfu_JEUnp6BZCSrwlQ.roa (raw, json)
Hash identifier:          iBYlDTNx2/lCDntLhR/8OA+U9OjX7H/MBi89cwzkRy8=
Subject key identifier:   6D:B6:FC:C5:99:98:42:77:EE:FC:91:14:9E:9E:81:64:24:AB:C2:54
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       06D3
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/bbb8xZmYQnfu_JEUnp6BZCSrwlQ.roa
Signing time:             Tue 31 Mar 2026 08:26:38 +0000
ROA not before:           Tue 31 Mar 2026 08:26:38 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:7e00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1747 (0x6d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:26:38 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=6DB6FCC599984277EEFC91149E9E816424ABC254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b6:88:5a:fd:91:0e:2e:4d:81:b1:d6:1c:49:
                    0c:c4:e9:2c:3d:d8:1e:a2:c5:6d:5e:b7:55:56:2b:
                    1b:0d:f3:4d:dd:de:8e:9e:af:86:a8:92:6a:33:ac:
                    c2:c9:76:4b:ec:a3:40:f4:b4:0f:0a:41:ff:a3:7d:
                    81:ab:2e:59:4d:62:7d:79:6b:da:f4:a5:c0:d7:e2:
                    c9:28:43:5c:ea:ef:ea:47:66:3b:28:64:34:90:92:
                    a4:b8:84:57:3e:2b:b4:14:12:76:78:2e:43:ad:6f:
                    51:d9:0b:ff:c3:3d:f8:c9:93:7b:8c:8c:f3:fa:a9:
                    1d:ed:8d:df:7d:3a:4b:75:ee:7f:b1:dc:67:ba:73:
                    77:2a:bc:ec:2a:3d:fc:95:0c:0d:f6:62:b6:5b:39:
                    d2:05:49:eb:49:3f:78:97:74:b2:39:2c:05:d1:63:
                    2d:2c:bc:a2:ab:4f:c6:7e:0f:74:ec:c5:5b:5b:7e:
                    cf:b9:25:95:f4:2c:af:20:d6:19:05:83:68:54:44:
                    52:c0:a3:72:24:74:a8:71:7d:5c:b7:08:23:d4:64:
                    95:c5:2f:d6:cc:bf:c6:20:7b:12:68:5d:97:f3:78:
                    e9:28:c0:0c:31:ef:d7:20:0c:03:30:93:03:0a:41:
                    15:1f:b7:68:4c:97:40:9f:42:5a:7f:c7:f9:a5:6f:
                    38:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:B6:FC:C5:99:98:42:77:EE:FC:91:14:9E:9E:81:64:24:AB:C2:54
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/bbb8xZmYQnfu_JEUnp6BZCSrwlQ.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:7e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         4c:1a:9a:93:e8:77:44:2b:0d:7b:28:1a:81:5c:27:a4:a4:b8:
         e6:9b:02:9c:ff:d4:da:f1:49:3b:18:dc:ad:24:7b:00:11:43:
         90:5c:ff:2d:25:2b:05:f7:fb:55:70:e6:54:40:e0:1c:8f:53:
         fa:27:e4:a1:5b:55:97:ca:42:f3:6e:af:df:16:fe:e2:2b:95:
         e8:b1:45:aa:6e:0b:db:3a:a8:4a:6c:c3:46:9c:79:41:92:40:
         8c:8e:d2:e5:c5:41:4b:48:a4:9a:e1:18:1f:46:f3:01:ce:5c:
         5e:59:0c:45:ae:f6:00:da:50:99:95:e2:a3:2d:8f:54:0c:75:
         a5:4f:dc:16:5a:eb:b7:6d:1b:d6:fc:60:d0:c6:73:b7:b6:62:
         d8:24:c6:e0:08:0a:7f:cc:f0:ac:58:5c:12:a4:5c:16:97:a9:
         2f:44:9a:aa:da:da:e4:35:ae:21:eb:01:1b:34:b3:3b:89:66:
         81:1a:4f:75:f3:4b:0e:0c:3b:86:43:44:db:eb:12:5e:4b:e2:
         ce:0c:4f:8c:d7:d0:c9:82:7f:c6:dd:02:4c:0f:7a:9a:1f:05:
         7d:b2:74:d8:c0:ee:db:e4:e4:dc:3e:e9:fe:a0:5f:cb:08:03:
         d6:ea:ac:c5:da:f1:f9:f5:50:42:ae:77:6b:77:95:c8:82:e2:
         cc:c8:1e:03
-----BEGIN CERTIFICATE-----
MIIEwzCCA6ugAwIBAgICBtMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjAzMzEw
ODI2MzhaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDZEQjZGQ0M1OTk5ODQy
NzdFRUZDOTExNDlFOUU4MTY0MjRBQkMyNTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCWtoha/ZEOLk2BsdYcSQzE6Sw92B6ixW1et1VWKxsN803d3o6e
r4aokmozrMLJdkvso0D0tA8KQf+jfYGrLllNYn15a9r0pcDX4skoQ1zq7+pHZjso
ZDSQkqS4hFc+K7QUEnZ4LkOtb1HZC//DPfjJk3uMjPP6qR3tjd99Okt17n+x3Ge6
c3cqvOwqPfyVDA32YrZbOdIFSetJP3iXdLI5LAXRYy0svKKrT8Z+D3TsxVtbfs+5
JZX0LK8g1hkFg2hURFLAo3IkdKhxfVy3CCPUZJXFL9bMv8YgexJoXZfzeOkowAwx
79cgDAMwkwMKQRUft2hMl0CfQlp/x/mlbzjlAgMBAAGjggHfMIIB2zAdBgNVHQ4E
FgQUbbb8xZmYQnfu/JEUnp6BZCSrwlQwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDEyOS9iYmI4eFptWVFuZnVfSkVVbnA2QlpDU3J3bFEucm9h
MCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJAoAa34wDQYJKoZIhvcNAQEL
BQADggEBAEwampPod0QrDXsoGoFcJ6SkuOabApz/1NrxSTsY3K0kewARQ5Bc/y0l
KwX3+1Vw5lRA4ByPU/on5KFbVZfKQvNur98W/uIrleixRapuC9s6qEpsw0aceUGS
QIyO0uXFQUtIpJrhGB9G8wHOXF5ZDEWu9gDaUJmV4qMtj1QMdaVP3BZa67dtG9b8
YNDGc7e2YtgkxuAICn/M8KxYXBKkXBaXqS9Emqra2uQ1riHrARs0szuJZoEaT3Xz
Sw4MO4ZDRNvrEl5L4s4MT4zX0MmCf8bdAkwPepofBX2ydNjA7tvk5Nw+6f6gX8sI
A9bqrMXa8fn1UEKud2t3lciC4szIHgM=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:00 2026 by rpki-client