Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/cpuWM9PkhT_-wL8GKm84ncMS47o.roa
File:                     cpuWM9PkhT_-wL8GKm84ncMS47o.roa (raw, json)
Hash identifier:          pQR8pf5bNnr6MZE632sCfcA7zfxr0+Wz1dkYqdfAmIU=
Subject key identifier:   72:9B:96:33:D3:E4:85:3F:FE:C0:BF:06:2A:6F:38:9D:C3:12:E3:BA
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0783
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/cpuWM9PkhT_-wL8GKm84ncMS47o.roa
Signing time:             Tue 31 Mar 2026 08:28:04 +0000
ROA not before:           Tue 31 Mar 2026 08:28:04 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:61:6800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1923 (0x783)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:28:04 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=729B9633D3E4853FFEC0BF062A6F389DC312E3BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bd:94:2f:33:00:b4:3c:a2:af:ba:20:ef:60:
                    81:d1:bf:82:5f:71:93:04:9a:03:ac:4a:be:0d:ab:
                    88:7e:3e:9d:7f:b8:fa:23:82:b2:c7:42:1f:99:cb:
                    13:fb:29:a4:db:69:49:1c:aa:40:53:27:bd:d9:e4:
                    64:0d:a5:98:44:3e:8f:26:93:d6:2f:02:db:cc:cb:
                    88:c0:22:5f:42:61:a3:af:58:1e:69:21:c1:4a:5e:
                    c0:17:e7:99:68:e1:17:90:b5:9b:19:b4:7a:42:75:
                    7d:01:a8:63:1d:b3:5a:83:d0:c4:3c:bc:38:a6:1d:
                    4d:b2:08:39:a8:2e:8d:cd:cb:be:d2:6d:2f:f3:1f:
                    5c:77:6e:0b:92:bf:bd:0c:38:85:d3:fd:34:02:6d:
                    92:18:6c:93:93:e8:16:78:ad:ba:66:ef:ec:a5:58:
                    ea:a1:0a:1d:50:77:9e:61:7e:4f:c7:0b:99:32:28:
                    cc:ca:45:7d:a2:f5:7d:0a:9b:ba:15:f2:fc:b8:dd:
                    e7:e4:66:3a:72:b2:19:7c:e3:68:5a:fa:8c:4a:25:
                    d4:7b:f8:23:37:34:7f:ed:f5:d4:fa:08:42:4c:8f:
                    c5:6c:76:5e:c5:bb:c9:d8:cb:77:66:a3:37:0b:2a:
                    e9:cc:6f:a9:25:bc:9d:be:c7:ef:ed:58:63:b1:1f:
                    21:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:9B:96:33:D3:E4:85:3F:FE:C0:BF:06:2A:6F:38:9D:C3:12:E3:BA
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/cpuWM9PkhT_-wL8GKm84ncMS47o.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:6800::/38

    Signature Algorithm: sha256WithRSAEncryption
         43:27:ac:33:ff:a1:98:dc:32:01:39:c4:a2:c7:67:34:56:9e:
         d7:86:be:87:72:ab:e5:c3:e7:9b:25:e3:9d:b0:72:5e:18:b7:
         93:76:3a:55:6b:70:a1:a0:99:26:ef:a3:83:bd:17:c8:9f:e9:
         2e:c0:0d:c5:05:57:ec:17:cb:05:52:71:38:90:8c:3f:33:55:
         5e:f4:f9:e7:fc:2e:af:33:20:76:a8:5b:e8:67:d0:ad:f2:2d:
         a8:54:45:89:2b:e1:17:45:94:06:66:b5:9a:5f:6c:d3:23:c9:
         7f:b2:74:b6:37:5f:8d:ff:4c:f0:4c:ce:d8:58:a7:7b:03:88:
         11:33:3e:4a:e9:14:f9:f1:e9:d2:2e:fe:c4:7a:f8:6e:25:2b:
         8f:b9:1b:08:65:48:14:9a:4e:27:81:1f:6f:c0:1b:2c:84:a9:
         ca:d6:cd:72:26:c4:27:8d:6e:54:8f:9b:a6:4f:38:00:85:b8:
         99:96:b9:21:55:f1:d3:4e:7f:bd:ca:0e:d6:a5:f1:c0:b6:22:
         e7:d0:56:26:09:4e:67:63:d7:c2:7a:96:df:4d:db:26:26:0d:
         3c:54:1e:c5:c0:ec:03:95:4d:d9:aa:a4:85:7d:96:9d:55:b8:
         4b:a5:7f:29:b2:eb:56:72:51:28:ad:fa:6f:d2:e3:2d:b6:1b:
         86:a3:bb:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:44 2026 by rpki-client