Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/d7CyZlYbLqjMHu3mc4oRccmtF3Q.roa
File:                     d7CyZlYbLqjMHu3mc4oRccmtF3Q.roa (raw, json)
Hash identifier:          c8BMZMyAhgQNxy5gYfierjjNnajTJUlIg8WdbEz5cAw=
Subject key identifier:   77:B0:B2:66:56:1B:2E:A8:CC:1E:ED:E6:73:8A:11:71:C9:AD:17:74
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       076C
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/d7CyZlYbLqjMHu3mc4oRccmtF3Q.roa
Signing time:             Tue 31 Mar 2026 08:27:50 +0000
ROA not before:           Tue 31 Mar 2026 08:27:50 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:61:c00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1900 (0x76c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:27:50 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=77B0B266561B2EA8CC1EEDE6738A1171C9AD1774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:52:48:f4:f4:20:5c:57:ea:e2:ef:1b:44:93:
                    a2:dd:5b:a5:89:b7:1d:36:4d:31:2d:3c:73:56:f7:
                    6d:cd:26:ea:ad:2f:47:7c:43:4d:43:0c:9e:46:d2:
                    0b:7b:26:94:be:e9:64:f6:b7:d5:62:48:7f:6e:67:
                    b8:ec:0b:a2:ea:45:04:29:18:c1:ac:e5:24:2b:12:
                    38:8d:a5:d8:8f:b2:21:46:2e:91:91:2b:f2:f9:11:
                    34:c4:24:ba:9e:53:26:08:07:3d:c2:1a:15:a1:8a:
                    04:84:df:da:77:fe:ec:40:68:99:00:7d:ea:ff:72:
                    6b:1b:bc:ce:03:4c:32:ed:3c:66:e7:4b:5d:c1:c6:
                    11:80:74:9f:1b:84:5c:e6:3e:23:37:71:96:40:5c:
                    da:0a:d8:7a:67:1a:d6:86:2b:be:0b:4b:bf:06:37:
                    6a:c8:aa:4a:91:34:e0:a8:c6:b7:a6:a3:f9:da:8a:
                    bd:5e:4c:c6:b8:0d:03:8f:fc:77:92:15:87:1a:81:
                    04:bf:05:d3:5d:62:62:1a:fd:9b:f9:f0:36:10:04:
                    32:ec:a2:ee:b7:c6:e3:1a:8c:c4:fa:91:cf:4f:93:
                    dd:0e:44:3d:43:57:e6:3a:5c:c0:da:a2:2d:05:cb:
                    14:e3:5d:a3:44:1a:88:2d:50:30:9c:18:12:03:a5:
                    95:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:B0:B2:66:56:1B:2E:A8:CC:1E:ED:E6:73:8A:11:71:C9:AD:17:74
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/d7CyZlYbLqjMHu3mc4oRccmtF3Q.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         a6:ae:6e:87:12:c4:7a:d6:3b:6d:68:bf:76:c2:83:5d:aa:8f:
         11:21:b3:78:27:88:7d:5e:5f:0b:ca:c3:b2:9d:c6:78:e7:de:
         08:d6:71:ac:d1:79:a9:3d:ec:42:64:86:a6:5d:6a:dc:e9:28:
         e5:e9:92:3c:c3:e7:bd:cb:89:53:d8:64:ba:8a:3d:ed:ac:1e:
         8b:7b:1a:ee:5f:10:af:67:fe:4a:a5:9b:d2:d8:ae:6d:c4:40:
         65:07:74:b8:55:fe:bd:07:40:65:80:2b:3b:f6:2b:60:77:a3:
         88:f8:ad:87:f3:37:6c:72:14:1a:45:ed:17:2b:84:6a:25:17:
         dd:cc:64:66:be:7a:51:06:24:f7:c1:a2:4d:a0:8c:43:ff:9f:
         f8:1e:6a:cf:d0:f0:d6:39:1c:20:c5:83:ff:31:f5:a2:fe:c3:
         19:e8:15:29:d4:7b:f9:b1:63:5f:c0:d3:33:2a:c8:4b:09:98:
         16:c8:9f:1a:b1:b0:f1:d1:83:98:39:c5:04:53:3b:cf:1c:5f:
         1c:14:de:2a:32:e7:b3:42:32:c8:03:39:b0:11:2d:a9:2a:09:
         cb:97:d5:f2:f4:1b:b4:6d:97:a3:4a:73:fb:06:b4:11:cc:b4:
         b4:b5:6e:dd:78:f9:ea:b3:e6:d8:45:fb:e0:f8:68:8e:15:aa:
         0b:13:86:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:36 2026 by rpki-client