Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/egZNR67AsbW7Ho4b7OTcUhCiyUE.roa
File:                     egZNR67AsbW7Ho4b7OTcUhCiyUE.roa (raw, json)
Hash identifier:          ym65Rl2CuUJ3sQC0nnKc+TR+Sh3kCkRNAeFyLWV87ZA=
Subject key identifier:   7A:06:4D:47:AE:C0:B1:B5:BB:1E:8E:1B:EC:E4:DC:52:10:A2:C9:41
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0661
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/egZNR67AsbW7Ho4b7OTcUhCiyUE.roa
Signing time:             Tue 31 Mar 2026 08:25:42 +0000
ROA not before:           Tue 31 Mar 2026 08:25:42 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:ec00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1633 (0x661)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:25:42 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7A064D47AEC0B1B5BB1E8E1BECE4DC5210A2C941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:84:f7:17:42:8b:61:2d:fe:91:99:d3:a3:b4:
                    f7:ab:5f:d2:78:ff:01:16:a4:19:f4:ce:6b:9f:85:
                    1e:a0:c8:9e:6a:b1:a7:32:b5:a4:c0:20:e2:2a:f6:
                    0e:e1:2f:56:4d:ca:c4:05:03:48:7b:3f:8a:87:2a:
                    9e:1e:10:ba:6b:3e:40:e3:e6:ac:98:f3:cc:45:c5:
                    d6:8d:4f:73:21:5d:0b:e5:8a:2a:ac:9d:1b:a3:d6:
                    6d:8f:12:7c:06:af:e8:f6:a5:2a:81:70:94:5c:c6:
                    0e:b1:f0:bf:ea:62:b1:95:64:0e:3e:4f:3b:07:30:
                    54:b7:63:b3:3a:68:07:cf:b7:9f:f2:1d:2a:5d:2f:
                    9c:0b:59:47:56:97:9a:08:dc:92:2f:2e:25:48:94:
                    10:87:ed:a0:90:83:1a:37:8e:9c:5b:0d:0b:d1:20:
                    b8:28:bc:59:61:51:31:7c:f0:a6:75:f3:92:12:d1:
                    29:b0:ab:8a:ac:7b:53:48:2e:4e:88:9e:fa:9f:24:
                    9b:44:f3:e2:a3:81:42:ee:6e:bb:aa:b7:92:32:07:
                    ba:61:22:5e:ba:32:79:81:de:45:96:2a:26:98:7f:
                    51:e3:ea:7f:51:86:4f:36:e1:1e:8e:66:98:d9:6c:
                    6d:62:1c:fd:8c:2c:70:54:50:9e:1c:37:2e:a2:c5:
                    f5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:06:4D:47:AE:C0:B1:B5:BB:1E:8E:1B:EC:E4:DC:52:10:A2:C9:41
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/egZNR67AsbW7Ho4b7OTcUhCiyUE.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:ec00::/40

    Signature Algorithm: sha256WithRSAEncryption
         41:cd:14:59:67:53:61:56:ae:27:c6:49:de:7d:30:76:33:90:
         8d:3c:9f:19:e7:5c:81:2d:b4:e5:a5:7b:93:98:b9:d1:6d:36:
         c3:a5:c9:8a:c8:65:60:5b:50:b3:77:05:d8:5f:73:53:f8:49:
         51:06:80:5f:ca:de:41:93:77:fd:6e:30:f1:2a:1f:dc:e5:55:
         ff:4a:5b:41:6e:25:3e:0c:8c:f4:4f:e7:a2:fa:46:33:3b:90:
         85:c9:ab:8f:43:48:87:dc:f4:a5:d1:58:7f:a7:f2:a0:ed:fe:
         40:0a:96:9b:cd:85:4f:af:31:48:05:ad:7a:53:65:f9:47:ba:
         79:d0:ff:a1:30:0c:37:dc:d8:9e:51:1a:34:dd:ed:77:1e:d0:
         de:cd:6d:4c:ef:8a:8f:58:18:04:46:8f:12:de:c6:95:c9:30:
         8e:cf:ed:a8:d8:90:a6:36:65:6d:15:a4:ca:da:bb:52:c6:8b:
         18:fd:05:d6:c3:b2:35:04:21:34:96:44:0d:42:1b:d7:47:57:
         ef:eb:c2:9a:c3:bc:5d:1a:e7:f6:5e:20:ca:4e:1b:6c:67:d0:
         6c:51:3d:a0:67:79:92:66:b2:98:82:17:a2:33:c9:5d:68:e1:
         90:12:ac:a2:cb:a1:27:bf:49:79:5d:6c:89:34:b9:30:b8:26:
         dc:e2:d1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:44 2026 by rpki-client