Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/fK2_LFghOxIurX3dRAvZkmuQ7l8.roa
File:                     fK2_LFghOxIurX3dRAvZkmuQ7l8.roa (raw, json)
Hash identifier:          cflm892dl0Bghuqce66X/Y+kVC8Dc/+PkjM7hv95NGE=
Subject key identifier:   7C:AD:BF:2C:58:21:3B:12:2E:AD:7D:DD:44:0B:D9:92:6B:90:EE:5F
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0673
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/fK2_LFghOxIurX3dRAvZkmuQ7l8.roa
Signing time:             Tue 31 Mar 2026 08:25:52 +0000
ROA not before:           Tue 31 Mar 2026 08:25:52 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:1300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1651 (0x673)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:25:52 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7CADBF2C58213B122EAD7DDD440BD9926B90EE5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e7:23:63:3f:cf:b9:ec:05:76:9f:0a:b2:82:
                    c6:f0:0c:31:2f:03:fd:2f:fb:c4:98:08:b6:9f:35:
                    18:d1:ef:37:36:8a:15:85:23:1f:8f:ff:08:ff:5d:
                    8f:40:61:09:6d:ea:e6:dd:70:61:db:e6:5a:d7:8c:
                    41:bf:a8:c3:48:c2:10:6c:9f:22:01:8f:fd:3a:e3:
                    68:ae:ad:8c:6e:d8:58:a7:c6:4e:fd:6e:a1:dc:b3:
                    d4:b6:89:3e:b1:63:54:c7:f8:95:69:68:e1:bb:2d:
                    0a:21:78:da:d4:66:d8:ef:09:11:14:54:1b:30:07:
                    bb:a8:70:8d:a8:bd:9d:b0:50:83:db:97:08:8b:38:
                    af:9d:62:73:9e:fa:3d:17:19:69:bd:69:42:50:8a:
                    56:d8:25:3b:be:3e:7c:66:41:92:74:07:09:f1:dc:
                    66:0d:01:a0:88:9f:f9:ee:cd:1c:d0:01:34:60:85:
                    0a:57:94:bc:2a:3b:c7:7f:8a:79:e6:25:af:1c:5a:
                    bb:cb:4e:43:07:a0:79:66:55:ef:4b:83:3b:82:08:
                    1d:8a:e8:0c:d5:37:62:7f:3c:ee:30:26:c1:92:4c:
                    c0:d7:ad:43:e3:e1:4c:17:f6:07:8f:c9:9f:1f:45:
                    e0:82:17:c8:ad:b1:8c:2c:b6:f4:0e:76:0a:fb:f7:
                    7c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:AD:BF:2C:58:21:3B:12:2E:AD:7D:DD:44:0B:D9:92:6B:90:EE:5F
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/fK2_LFghOxIurX3dRAvZkmuQ7l8.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:1300::/40

    Signature Algorithm: sha256WithRSAEncryption
         9c:7b:f5:e7:a7:ef:cc:4d:0c:2d:3c:93:2a:10:df:e8:48:ad:
         3b:1b:96:ea:f4:75:11:66:51:86:35:ac:7a:65:30:c6:cf:c6:
         d1:d1:f0:f8:0a:1d:d4:94:58:22:27:6f:76:78:55:3e:0a:61:
         90:b7:68:e4:2f:8b:e4:de:70:b1:6d:c9:d4:0f:5f:22:fa:fc:
         0e:08:d2:09:9a:88:9c:bb:35:fa:7d:fe:59:eb:d5:5a:8f:d0:
         99:79:95:29:89:e9:e4:ef:71:6b:28:f5:5f:40:a8:46:af:fb:
         f8:f6:67:aa:ec:8c:1c:23:a8:b5:c4:14:d6:c8:5b:ff:19:1f:
         92:e2:63:3d:a1:b2:9d:a5:09:89:a9:bd:a5:f9:6a:7d:90:b7:
         e9:24:d3:6d:0e:84:38:3b:06:88:d6:d5:5c:21:35:ef:e1:15:
         c8:fe:22:0e:f8:33:7c:9c:cb:22:0d:03:f1:c1:86:16:9c:dd:
         28:d8:f1:fb:51:95:38:bc:13:4b:f0:19:94:d2:b8:89:dc:e5:
         a3:d5:ed:2b:d9:f7:1e:79:de:96:ea:ad:a6:3a:b3:b5:3f:e9:
         8d:0f:61:f5:b5:48:d1:ec:b1:8d:a6:11:d2:ea:05:3b:dc:b2:
         65:75:a9:70:9b:80:53:4c:d1:08:78:20:05:c3:6b:46:47:30:
         c5:1a:bf:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 21:01:10 2026 by rpki-client