Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/btzFjbj_HAyMHRU2SqvJlqyQMBA.roa
File:                     btzFjbj_HAyMHRU2SqvJlqyQMBA.roa (raw, json)
Hash identifier:          7jkKswLMEodWQLqvJI0cDO4SFKnKwHHSipSTHV97KwE=
Subject key identifier:   6E:DC:C5:8D:B8:FF:1C:0C:8C:1D:15:36:4A:AB:C9:96:AC:90:30:10
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       06C4
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/btzFjbj_HAyMHRU2SqvJlqyQMBA.roa
Signing time:             Tue 31 Mar 2026 08:26:31 +0000
ROA not before:           Tue 31 Mar 2026 08:26:31 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:b900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1732 (0x6c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:26:31 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=6EDCC58DB8FF1C0C8C1D15364AABC996AC903010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:8a:64:6e:43:b5:47:05:0a:31:af:53:45:36:
                    83:2f:16:37:2e:48:10:d4:f9:aa:54:31:d5:9c:eb:
                    55:5c:ec:10:55:b1:ab:b6:f1:70:73:ef:8f:7a:c8:
                    6f:1b:bd:55:c7:6c:c1:10:67:7b:37:64:d2:62:e5:
                    09:d6:7a:ff:47:05:af:12:f6:38:f8:4b:45:ac:88:
                    90:9c:f3:3d:d9:ab:ee:19:9e:70:da:b0:a4:79:08:
                    e1:ed:9c:91:41:97:bd:68:a9:a7:2c:37:a4:88:b0:
                    16:b9:5d:81:1f:ac:89:27:b3:b5:16:fb:c7:9d:5a:
                    47:e6:26:16:c6:98:61:f3:7c:04:19:09:b2:3c:de:
                    bc:6e:04:3d:ed:0d:43:28:54:e6:5a:81:22:ab:86:
                    df:e5:76:52:7f:57:83:8b:02:d9:f3:54:f4:de:48:
                    b5:75:00:be:9b:9e:a4:9c:0e:eb:3e:cb:19:8d:95:
                    ea:92:1f:05:8c:39:47:2a:c5:54:d5:ed:ca:cb:1d:
                    45:ec:e5:4d:4a:88:90:b7:0d:4a:69:b1:9a:d0:46:
                    cd:36:22:26:b9:d1:77:a9:41:4c:34:4f:0f:d3:86:
                    7c:7f:ae:e1:f5:1a:c7:9a:a6:73:2c:5f:08:95:f7:
                    78:34:99:7e:57:eb:9a:b5:35:fc:86:4f:c4:3f:8a:
                    c3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:DC:C5:8D:B8:FF:1C:0C:8C:1D:15:36:4A:AB:C9:96:AC:90:30:10
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/btzFjbj_HAyMHRU2SqvJlqyQMBA.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:b900::/40

    Signature Algorithm: sha256WithRSAEncryption
         54:ea:da:2c:7b:3d:c5:e4:a9:28:9b:d6:87:7c:04:45:e2:d4:
         7a:a1:fe:3a:ae:a1:99:72:00:a6:5f:a8:6d:f4:56:98:1c:a2:
         07:a0:29:03:4e:36:1e:53:e4:78:6a:f2:9c:b6:95:0e:31:2d:
         3e:ce:a3:d7:c2:55:11:35:a7:81:aa:47:ac:e5:6f:41:bc:bb:
         29:a8:20:05:47:06:e0:00:6d:ef:cf:3b:52:d4:fd:6f:79:8f:
         9a:6b:38:f5:75:6c:13:a7:1d:20:1e:f6:ae:60:e0:df:97:b7:
         15:ac:32:96:9c:35:5b:04:e2:27:63:e7:c7:13:89:f3:d7:61:
         47:11:10:61:2c:ea:77:16:e4:c4:36:8b:38:3b:db:65:3d:cc:
         43:94:bf:88:ae:3b:91:6e:ef:ab:50:c8:40:ef:33:17:39:cc:
         80:42:53:66:12:c1:f5:f4:6b:2c:bb:62:64:40:4b:5c:ac:df:
         c9:c0:3d:f4:05:2f:d9:c9:5a:58:9a:94:81:c3:30:03:0c:87:
         9e:50:31:1d:73:a5:90:43:56:bb:6a:0f:87:0b:72:aa:9c:67:
         65:65:a7:40:71:65:db:04:7e:f7:4e:8b:30:56:72:e2:e6:46:
         e0:07:9b:ee:09:24:64:3a:74:07:93:45:39:82:13:91:b7:46:
         e9:4a:52:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:38 2026 by rpki-client