Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/d_Zt1uvzFZ854FY4mo3xNIrjQPI.roa
File:                     d_Zt1uvzFZ854FY4mo3xNIrjQPI.roa (raw, json)
Hash identifier:          RNybtRrgZLcvKrL4Yjd6HYTp9FF0JlZALSv1jsEzyhI=
Subject key identifier:   77:F6:6D:D6:EB:F3:15:9F:39:E0:56:38:9A:8D:F1:34:8A:E3:40:F2
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       06F3
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/d_Zt1uvzFZ854FY4mo3xNIrjQPI.roa
Signing time:             Tue 31 Mar 2026 08:26:51 +0000
ROA not before:           Tue 31 Mar 2026 08:26:51 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:3400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1779 (0x6f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:26:51 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=77F66DD6EBF3159F39E056389A8DF1348AE340F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:02:f5:99:52:3b:85:8c:4a:dc:ae:b9:5a:5e:
                    33:39:cc:ed:c9:52:07:8b:4e:96:76:58:01:6d:60:
                    9a:1c:49:cb:95:a8:a5:e3:e6:8f:b9:88:60:70:4d:
                    e8:02:e6:53:d3:e1:fc:b7:35:eb:44:37:6b:ef:2f:
                    2e:dc:f4:32:2b:26:b0:77:07:d1:a9:af:32:94:e2:
                    c6:3b:28:bb:9e:16:46:c9:8b:ce:46:7d:62:ce:dc:
                    2b:c5:46:93:1f:1e:8c:84:21:fb:b3:af:9c:e0:54:
                    c8:1a:65:c8:b2:c9:ec:d4:db:70:55:65:2c:00:63:
                    0c:29:dd:98:c4:3b:e7:65:fb:9a:24:d9:ac:60:e1:
                    ce:28:2f:60:05:49:ca:f2:3b:5f:fd:fe:76:7b:95:
                    46:51:37:9c:f8:69:99:1e:ad:33:2f:89:d8:d2:4e:
                    7b:51:3f:df:33:54:92:b3:ec:15:0c:b6:0d:32:bc:
                    3b:db:66:9c:9a:db:fe:95:b0:5d:3b:43:1b:0b:e4:
                    b9:7c:fb:10:77:1f:73:ec:a8:37:a3:d7:e6:c4:1b:
                    9d:44:7a:81:20:87:47:1b:6e:44:d6:98:b1:00:40:
                    34:1a:c3:5a:e0:9b:a9:eb:7f:76:aa:46:96:ab:cd:
                    e6:9e:86:da:a1:74:a8:04:cd:10:a5:f2:8d:53:7f:
                    f0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:F6:6D:D6:EB:F3:15:9F:39:E0:56:38:9A:8D:F1:34:8A:E3:40:F2
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/d_Zt1uvzFZ854FY4mo3xNIrjQPI.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:3400::/40

    Signature Algorithm: sha256WithRSAEncryption
         ca:37:32:60:cd:10:96:9e:0d:e7:ee:d5:53:19:d7:b2:6d:a0:
         cb:b6:b5:5d:cb:27:ae:6b:ad:b6:dd:36:00:62:03:cf:f3:e8:
         52:96:92:b4:5e:f8:49:d3:12:8e:1a:26:63:e3:94:05:15:14:
         44:e9:4c:ff:0d:e9:19:da:c2:69:9e:ce:f2:ce:c0:b7:46:e4:
         1a:6b:af:62:0f:18:68:dc:bd:13:32:49:41:48:13:62:49:32:
         63:49:2f:10:11:1a:ce:9d:0e:af:dd:e4:c0:7c:61:e1:f0:4f:
         2c:6c:29:46:e5:19:9f:60:54:36:e7:dc:6b:35:05:e8:be:5a:
         ed:8a:9f:4f:8f:95:7f:5d:ae:fa:ef:50:b7:7d:d9:02:01:1e:
         6e:c9:8b:b4:20:b6:f2:80:64:27:a4:d2:45:50:b9:07:59:80:
         72:ff:a0:3e:a8:46:bb:3c:aa:6b:9e:3a:11:9d:47:22:3a:87:
         85:a7:02:4f:64:c0:7b:f2:2b:22:57:d3:50:30:79:b1:52:3c:
         f7:cd:59:78:7b:27:d5:f0:74:ae:92:0f:e2:f8:dc:3f:35:df:
         ef:37:41:9d:05:84:4d:bd:40:41:87:80:da:54:a9:f8:69:b7:
         8d:76:f2:b4:3c:76:51:5a:b4:cf:28:c0:d9:07:e0:fd:53:e1:
         f6:c9:dc:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:07 2026 by rpki-client