Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/i6cy1eHnn31WefqIbc2rWqHhYYw.roa
File:                     i6cy1eHnn31WefqIbc2rWqHhYYw.roa (raw, json)
Hash identifier:          ujl3vJhfeWcaoKRviNkpgmH4cEk0AOw8dlxmHjpKre0=
Subject key identifier:   8B:A7:32:D5:E1:E7:9F:7D:56:79:FA:88:6D:CD:AB:5A:A1:E1:61:8C
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0766
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/i6cy1eHnn31WefqIbc2rWqHhYYw.roa
Signing time:             Tue 31 Mar 2026 08:27:48 +0000
ROA not before:           Tue 31 Mar 2026 08:27:48 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:61:2e00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1894 (0x766)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:27:48 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=8BA732D5E1E79F7D5679FA886DCDAB5AA1E1618C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:dd:7b:d0:96:92:08:83:45:4d:4c:eb:6e:8e:
                    1b:81:d0:38:32:80:74:06:e8:80:b2:85:c9:fd:65:
                    02:49:f8:8c:e3:ed:28:cf:10:b7:da:7f:8f:78:ea:
                    1b:60:f8:b5:10:0e:4a:32:0e:08:9e:af:38:cf:0b:
                    7f:6f:05:ff:ff:b1:cc:9a:70:48:3d:7c:95:08:de:
                    38:15:96:2c:e5:4e:ff:8a:b1:b8:a8:93:07:f2:cb:
                    ad:74:d1:fb:b5:ff:65:a7:33:fe:8b:a9:e7:73:c6:
                    3f:52:8f:62:3b:cb:83:18:6a:a9:61:73:c5:c9:ba:
                    1a:aa:10:62:40:15:96:37:65:c6:0f:bf:d8:83:91:
                    cf:cb:df:02:28:a6:f5:d9:38:15:19:ef:38:d5:d3:
                    da:fd:54:e4:ef:d2:e3:05:ca:e3:3b:c3:ed:95:4c:
                    a8:2f:4c:4f:7f:5f:9d:40:7a:69:27:a4:dd:03:34:
                    dc:44:10:39:48:09:54:09:05:80:0a:d8:34:15:ab:
                    2d:b3:43:2d:3b:d0:74:9e:4d:51:de:80:d9:2d:0a:
                    15:a6:75:f3:d5:8b:3e:ea:0e:06:1b:c3:d6:b3:bc:
                    95:43:c1:10:d4:db:3a:7d:97:42:87:b2:92:4a:fd:
                    8a:98:03:78:67:46:af:21:f2:72:d4:39:a1:ca:08:
                    50:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:A7:32:D5:E1:E7:9F:7D:56:79:FA:88:6D:CD:AB:5A:A1:E1:61:8C
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/i6cy1eHnn31WefqIbc2rWqHhYYw.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:2e00::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:54:a1:35:b0:3c:b3:f1:f8:d4:72:38:9e:eb:3e:65:dd:4f:
         34:1d:ab:6f:92:4c:4a:c2:4f:7b:32:74:d5:cf:d2:8a:8f:39:
         5c:4b:be:6e:54:5a:8b:b9:fb:8e:a3:c5:d5:87:f6:81:91:a5:
         d7:b0:96:f4:9e:07:73:8f:52:6b:53:d4:7f:0a:3b:66:a4:41:
         1d:a5:ea:38:d9:9a:b8:2d:5f:dd:bc:25:e4:0e:c5:87:c9:22:
         5e:ef:36:3f:aa:9c:f4:09:b1:70:f8:55:e3:5b:8e:a3:37:f1:
         0c:d4:98:b6:0e:52:fc:2e:e5:30:b7:61:83:f9:57:b0:3c:0f:
         c6:1b:33:49:50:f4:50:fb:85:45:37:17:e4:fd:10:8b:da:d1:
         58:11:46:4a:05:4d:df:bd:71:81:7a:2e:f1:c4:9f:e3:fc:4c:
         e7:80:56:07:78:52:c8:e5:11:85:aa:e3:d9:2f:b6:13:cc:0e:
         e6:4e:7e:20:ce:50:ac:db:d0:dc:f5:d9:28:3a:1f:62:04:dc:
         f6:d1:4c:f4:c4:32:76:9a:d1:6b:e4:4c:e5:99:61:c3:d4:bb:
         f2:94:d5:d3:36:e5:e2:bc:f4:22:e0:09:83:1e:ed:71:13:ee:
         e5:18:b2:ac:7a:04:84:3b:47:1d:74:f1:0b:29:ee:ed:75:31:
         4f:14:b1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:52 2026 by rpki-client