Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/hw6plA4WVkf2q8bVezB4I4JVRSc.roa
File:                     hw6plA4WVkf2q8bVezB4I4JVRSc.roa (raw, json)
Hash identifier:          OBWxq0L97nAPYxQ5PpogbnwL9kD2nAXEGkZXzDTGH7o=
Subject key identifier:   87:0E:A9:94:0E:16:56:47:F6:AB:C6:D5:7B:30:78:23:82:55:45:27
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0777
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/hw6plA4WVkf2q8bVezB4I4JVRSc.roa
Signing time:             Tue 31 Mar 2026 08:27:56 +0000
ROA not before:           Tue 31 Mar 2026 08:27:56 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:0:200::/41 maxlen: 41
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1911 (0x777)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:27:56 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=870EA9940E165647F6ABC6D57B30782382554527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c0:45:86:e3:4c:53:c6:b1:e8:6f:f5:5e:c0:
                    10:88:71:36:7d:26:8b:9d:5a:9d:58:1a:f5:12:52:
                    61:1a:85:64:6b:08:34:91:34:1b:ea:1d:9f:c9:bb:
                    58:74:83:10:19:95:f7:98:1a:95:e3:5a:eb:70:bc:
                    5c:8c:74:ee:42:3f:4b:99:9e:0f:95:83:84:96:1b:
                    96:99:16:a4:81:4e:51:6b:2e:07:76:45:df:7d:12:
                    67:03:f5:16:9b:b1:46:25:ef:34:39:95:a7:f7:fd:
                    ef:1f:45:0f:84:09:e5:fe:4e:ac:bf:23:48:d1:2c:
                    4f:19:d7:99:dc:72:6a:ea:07:6a:69:35:ca:37:8b:
                    40:9a:66:31:3e:2e:28:3b:ef:00:17:e3:da:a5:af:
                    af:9d:02:16:06:59:17:86:b7:9a:4e:5d:21:2e:78:
                    e3:a9:18:79:90:15:56:ec:c5:bb:ae:c7:70:3c:0b:
                    ea:f5:6f:dc:0e:5a:fc:81:49:3d:10:90:3d:ad:ab:
                    5f:03:d1:ce:59:5f:34:9f:c6:af:0c:7e:2d:c4:d3:
                    2b:e3:0d:ef:1e:73:c7:81:13:7c:73:da:b1:73:7a:
                    49:04:c2:90:50:8d:e1:50:8b:6c:87:f7:04:21:24:
                    1f:05:ce:e1:97:e9:fe:b5:e3:fb:d1:d3:f6:39:ce:
                    02:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:0E:A9:94:0E:16:56:47:F6:AB:C6:D5:7B:30:78:23:82:55:45:27
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/hw6plA4WVkf2q8bVezB4I4JVRSc.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:0:200::/41

    Signature Algorithm: sha256WithRSAEncryption
         3e:4c:2b:ce:0d:be:2b:e4:d6:5c:f1:48:20:e0:c0:fe:36:4d:
         b6:39:b3:e0:03:2e:1c:09:fb:df:fc:3d:35:43:6f:68:be:ae:
         ec:48:5a:f2:f6:f0:89:2e:c6:1d:a5:c4:af:1b:c2:d5:7f:8f:
         05:e8:3d:13:dd:2f:aa:7d:a0:72:01:8d:cd:c2:77:e7:60:53:
         4a:59:99:4f:bf:98:61:91:cc:98:00:64:57:77:ec:8c:8c:73:
         97:b2:73:44:16:59:b7:2a:c6:44:7e:72:0c:8c:d6:2a:bb:e0:
         0f:2a:6a:b2:71:2d:ae:bd:e7:0c:8a:7e:19:4b:34:5f:86:94:
         90:b3:0e:93:0a:86:c5:89:f3:a1:22:f4:31:e1:8b:09:65:93:
         3a:c5:ab:13:9f:a9:4f:96:c7:07:fc:8a:60:ff:aa:a3:e5:17:
         f5:ab:2f:7d:3a:f4:ac:98:d6:fe:db:ac:a8:78:d0:3c:f0:10:
         6e:12:7e:82:53:dd:bc:09:7b:75:fe:49:12:38:c6:50:5b:cc:
         f8:a0:d5:ca:41:44:20:04:5e:e8:df:62:41:a0:67:ef:7a:ef:
         92:ba:df:6f:bc:fe:6c:a9:6a:98:58:e7:89:ec:a1:7c:9b:1c:
         82:8e:76:4e:9b:4d:a0:06:d2:cd:79:dc:87:6b:e2:20:25:76:
         7b:e8:bd:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 22:24:58 2026 by rpki-client