Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/f1lJS-sXsTH8DaC1yUaxo0Zb3aU.roa
File:                     f1lJS-sXsTH8DaC1yUaxo0Zb3aU.roa (raw, json)
Hash identifier:          eE0RAHzF9h9vXJKxvnmVe2d/vaHY5TXQYRkxhIyoGNs=
Subject key identifier:   7F:59:49:4B:EB:17:B1:31:FC:0D:A0:B5:C9:46:B1:A3:46:5B:DD:A5
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       066E
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/f1lJS-sXsTH8DaC1yUaxo0Zb3aU.roa
Signing time:             Tue 31 Mar 2026 08:25:49 +0000
ROA not before:           Tue 31 Mar 2026 08:25:49 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:c500::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1646 (0x66e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:25:49 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7F59494BEB17B131FC0DA0B5C946B1A3465BDDA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c5:66:dd:e7:aa:3b:6e:3e:5b:3a:b7:75:e9:
                    5d:8e:07:f7:23:06:54:66:e7:ed:26:65:c2:f4:39:
                    1e:5f:99:ac:9f:c0:96:7a:32:93:c6:49:7d:49:4a:
                    3a:35:32:88:6a:55:57:01:0e:56:13:24:16:61:5a:
                    c4:07:1d:88:3d:0d:31:ce:75:89:7d:94:41:f7:89:
                    da:e6:ae:bb:58:ad:a7:21:da:bf:bc:bb:c3:5b:b9:
                    a4:92:97:03:4b:67:01:22:c2:de:6e:81:3b:f8:0a:
                    93:6f:88:c2:59:68:fa:ac:81:ac:da:b9:56:5f:5d:
                    0c:e5:fd:05:83:2f:38:85:9a:6c:37:e9:9e:98:5e:
                    de:07:4d:d8:bf:59:de:b1:73:3a:d5:62:d8:ab:9a:
                    3f:11:43:22:9f:29:0c:0b:d5:4e:9e:9d:67:25:a8:
                    1d:ac:45:45:70:49:13:79:57:df:6d:36:c1:b7:e1:
                    4b:5e:0b:ea:93:ce:fe:93:48:09:23:d2:17:ed:21:
                    14:58:49:84:78:e7:6c:a2:55:b4:0c:50:12:dc:4d:
                    89:67:18:2e:9c:63:c1:e9:ef:97:1a:db:9f:41:9b:
                    10:5a:0a:8e:92:48:48:4b:a0:29:14:08:5f:8d:ef:
                    a9:9f:ef:19:3a:ac:43:30:98:11:a4:1a:53:f8:32:
                    0f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:59:49:4B:EB:17:B1:31:FC:0D:A0:B5:C9:46:B1:A3:46:5B:DD:A5
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/f1lJS-sXsTH8DaC1yUaxo0Zb3aU.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:c500::/40

    Signature Algorithm: sha256WithRSAEncryption
         6c:d2:fb:df:f2:a1:f8:62:fd:91:7a:3b:c2:64:c0:a9:ed:1d:
         51:6e:f0:cd:cb:69:04:eb:a1:2b:2c:64:fb:39:19:bb:5a:f9:
         9b:ae:e7:65:e1:aa:e6:d1:0c:49:46:9c:65:d7:5d:2c:2f:fb:
         18:07:73:12:8a:f3:90:76:d5:33:fc:9d:b7:e4:08:6f:a7:4f:
         e5:7b:32:9d:63:06:14:1e:ae:ab:cc:d7:2d:50:aa:b9:cf:f1:
         05:88:fb:5e:b9:05:0a:c8:7f:89:bd:63:19:3a:31:ff:8d:6e:
         56:71:bb:ad:ca:35:0a:a7:64:31:2c:fd:9c:90:27:e4:6d:3d:
         1b:5b:fe:f9:59:2a:d4:42:28:a8:67:3d:b1:45:b6:e8:da:6a:
         a8:08:66:46:66:ca:56:62:16:e0:68:4e:63:d1:46:98:5b:2f:
         e1:a1:99:5d:de:c5:e8:19:a7:70:d7:aa:3b:6a:3a:66:48:4e:
         67:44:b9:18:7c:cb:b5:76:5b:1d:c7:17:e0:ee:74:c9:ce:63:
         c0:e5:34:94:5a:d8:15:89:8e:80:20:2f:d4:3a:9f:90:71:7b:
         cf:70:a4:95:06:b7:55:5e:03:dc:7a:96:63:9c:05:f6:ed:b6:
         b1:38:ac:82:69:8d:be:94:f8:bd:88:bf:80:a8:88:e2:7b:45:
         d8:54:8d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:46 2026 by rpki-client