Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/f-YeWbU2NEuIAiXYQ6Buz5IythI.roa
File:                     f-YeWbU2NEuIAiXYQ6Buz5IythI.roa (raw, json)
Hash identifier:          OdBkbDcauao89RERWgIZFh2PZBiqgmMjudZXkeqTtdo=
Subject key identifier:   7F:E6:1E:59:B5:36:34:4B:88:02:25:D8:43:A0:6E:CF:92:32:B6:12
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0772
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/f-YeWbU2NEuIAiXYQ6Buz5IythI.roa
Signing time:             Tue 31 Mar 2026 08:27:54 +0000
ROA not before:           Tue 31 Mar 2026 08:27:54 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:3:bcc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1906 (0x772)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:27:54 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7FE61E59B536344B880225D843A06ECF9232B612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:fb:10:f0:bb:d1:3b:73:cf:18:03:41:f3:25:
                    7d:68:2d:11:33:d4:d2:37:f7:bd:a1:0f:86:d1:b6:
                    fc:15:56:15:af:41:e6:bd:c3:24:16:0d:f4:f4:13:
                    40:83:86:55:ec:03:66:22:78:72:97:92:3a:9a:5f:
                    dd:5a:4a:71:e7:66:86:4c:a8:02:aa:6d:e2:13:f4:
                    db:74:15:d0:d3:87:08:d5:36:f1:bf:0b:20:b3:90:
                    0e:df:48:4a:b7:02:a1:41:07:b2:7c:3c:18:44:30:
                    e3:18:c1:82:b0:3e:c2:05:9b:02:27:18:d9:32:8f:
                    6c:49:4d:7e:86:2f:cd:d1:18:06:c9:0c:45:9f:25:
                    00:94:e5:c9:21:d1:47:a4:4d:46:07:b7:ff:c7:be:
                    05:59:40:92:da:be:b1:ac:15:a6:7b:f9:1d:5d:e9:
                    9a:0d:1a:4a:ac:0c:b3:5e:55:96:b7:a4:bb:05:fd:
                    0a:65:3c:37:f5:d8:43:1f:0c:58:b5:10:fc:af:41:
                    ce:d1:55:ee:ae:af:fe:a2:fe:53:57:ec:fa:94:07:
                    2f:8f:66:7f:16:59:ae:7a:af:54:1c:32:aa:c9:da:
                    70:1a:f8:a7:f9:a4:29:37:43:ba:bb:e9:52:31:b4:
                    90:4e:88:a7:b6:35:1f:a5:cb:cd:c8:de:74:f4:fc:
                    d6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:E6:1E:59:B5:36:34:4B:88:02:25:D8:43:A0:6E:CF:92:32:B6:12
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/f-YeWbU2NEuIAiXYQ6Buz5IythI.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:3:bcc::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:79:4a:ba:27:07:c3:a1:84:1b:6d:92:d7:01:26:e0:89:fc:
         90:78:51:6a:90:71:ae:85:4d:5f:fa:bb:2d:fb:57:93:85:57:
         52:7d:66:e8:aa:4b:74:e1:cb:3f:63:0b:c3:4b:4e:51:24:09:
         dd:f6:67:6b:ce:08:28:6d:3d:4d:71:80:6e:ba:48:4a:bf:e0:
         8b:17:99:53:7a:8e:0e:0b:8a:50:4b:3f:69:11:a1:a6:1f:eb:
         a5:dd:f8:9e:b6:42:ea:1d:ca:50:30:55:ac:94:d0:3d:3f:62:
         09:73:1d:ba:2d:d4:dd:21:cc:21:7c:6a:4b:fc:35:72:1f:c5:
         71:a8:10:02:27:2a:9b:3e:5f:de:c6:aa:d7:ca:ce:de:a2:e1:
         cd:eb:8a:63:c7:8b:8a:ec:63:3a:6b:c8:50:bd:fb:90:be:a6:
         6b:d1:df:b2:91:81:47:64:01:b8:c6:1f:1c:39:85:06:0d:2f:
         5e:40:1e:32:8b:be:91:25:85:0e:a7:67:a0:7c:6c:ac:ba:42:
         d1:5f:9a:b7:37:e3:20:81:38:38:4f:28:53:97:24:da:89:2f:
         62:bc:93:97:d2:48:53:70:f3:13:e4:97:c1:bf:03:cd:27:a6:
         2f:b8:57:31:55:79:21:85:2b:6c:2e:32:16:20:26:98:bb:3e:
         20:7c:88:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:07 2026 by rpki-client