Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/j46MXjRXe-vW7b8bobcjhHTTD-8.roa
File:                     j46MXjRXe-vW7b8bobcjhHTTD-8.roa (raw, json)
Hash identifier:          RWtzKLICADZxjKoEareFqojVft1J2FKmpA5MzTmA0F4=
Subject key identifier:   8F:8E:8C:5E:34:57:7B:EB:D6:ED:BF:1B:A1:B7:23:84:74:D3:0F:EF
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       06A4
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/j46MXjRXe-vW7b8bobcjhHTTD-8.roa
Signing time:             Tue 31 Mar 2026 08:26:16 +0000
ROA not before:           Tue 31 Mar 2026 08:26:16 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:6b00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1700 (0x6a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:26:16 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=8F8E8C5E34577BEBD6EDBF1BA1B7238474D30FEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3c:38:88:2c:16:c8:6c:d0:d9:8b:5c:c0:9c:
                    10:14:ed:fb:a0:61:b7:37:79:01:32:5c:7a:75:43:
                    59:fe:d1:e0:46:cf:df:a8:dc:7b:91:7c:76:fe:94:
                    86:a8:98:90:1d:b3:58:72:2f:cb:d0:74:54:20:77:
                    f3:e2:71:32:84:e0:ed:74:29:d3:b7:b1:16:82:f0:
                    e9:9c:b0:75:e4:26:3a:37:95:0f:c8:c5:4e:e5:9f:
                    29:69:62:a1:db:03:1f:31:5e:8d:6b:2b:d1:31:67:
                    e1:a2:b7:70:8c:4e:64:02:cc:06:ce:5f:ac:27:ab:
                    42:ed:c4:69:86:e4:fb:0f:ee:25:27:6a:b1:6a:d4:
                    ce:f5:5d:bc:0c:ce:b5:bf:fb:46:99:00:68:3b:7e:
                    56:84:fd:a9:22:97:a3:e5:e4:c3:43:d2:55:ec:1e:
                    d6:8d:fa:ee:67:30:5d:1a:ea:3a:15:d2:8e:e6:e5:
                    9a:0b:33:b7:de:4e:49:67:a8:c5:7d:68:37:14:12:
                    e0:6d:48:06:82:fd:10:e5:1c:eb:ce:7b:9d:e2:17:
                    6a:3d:cc:05:25:44:4d:9e:5e:59:2f:48:c7:62:b2:
                    b4:c2:5c:8e:45:50:4d:a7:f4:97:a9:bd:78:90:bb:
                    f0:a8:76:6f:cd:6a:fc:b6:73:fb:6c:d5:45:93:6f:
                    10:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:8E:8C:5E:34:57:7B:EB:D6:ED:BF:1B:A1:B7:23:84:74:D3:0F:EF
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/j46MXjRXe-vW7b8bobcjhHTTD-8.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:6b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         43:77:86:8e:b5:7c:96:8e:53:55:cf:4b:af:9c:04:03:a1:58:
         51:8f:98:54:bc:3e:b6:fd:30:5b:ec:50:3b:d7:7b:13:f9:ad:
         09:9e:29:c2:d5:0a:5d:ad:a9:a8:a1:8d:43:52:31:a5:9f:fc:
         a5:c2:76:c9:fa:7f:e1:40:9d:58:df:41:0b:ae:ad:a9:6c:f7:
         63:97:2c:1f:d6:ef:02:58:73:aa:f6:df:4e:54:9b:d9:f4:91:
         ea:2e:fd:c6:b6:3f:76:e4:8b:42:41:46:5d:1f:80:c7:b3:4d:
         ed:5b:8d:5a:38:99:ae:d6:e1:47:46:84:b4:c1:63:9c:1d:8b:
         8d:1b:b4:dd:47:e8:bd:d1:26:79:91:f7:be:29:90:24:d6:40:
         60:bc:46:e3:b6:8f:a3:22:11:c9:f5:0a:bb:0f:59:8a:93:46:
         b0:c7:2c:3f:30:c2:86:13:cb:49:fe:ab:af:ea:e8:d2:53:44:
         1d:b4:7a:ef:6e:8e:32:b7:e2:ad:1a:87:76:1c:ad:d0:29:b5:
         34:ec:87:0c:fb:a9:a5:35:06:ff:f8:9e:d7:1e:4e:30:ac:6f:
         23:79:38:01:bf:9b:e5:f1:c4:c6:b7:97:84:b2:ce:83:8e:64:
         5c:7c:92:fe:2a:d5:3d:ef:15:86:ad:f1:52:de:1e:a7:3b:e8:
         43:8b:a5:b3
-----BEGIN CERTIFICATE-----
MIIEwzCCA6ugAwIBAgICBqQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjAzMzEw
ODI2MTZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDhGOEU4QzVFMzQ1NzdC
RUJENkVEQkYxQkExQjcyMzg0NzREMzBGRUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDOPDiILBbIbNDZi1zAnBAU7fugYbc3eQEyXHp1Q1n+0eBGz9+o
3HuRfHb+lIaomJAds1hyL8vQdFQgd/PicTKE4O10KdO3sRaC8OmcsHXkJjo3lQ/I
xU7lnylpYqHbAx8xXo1rK9ExZ+Git3CMTmQCzAbOX6wnq0LtxGmG5PsP7iUnarFq
1M71XbwMzrW/+0aZAGg7flaE/akil6Pl5MND0lXsHtaN+u5nMF0a6joV0o7m5ZoL
M7feTklnqMV9aDcUEuBtSAaC/RDlHOvOe53iF2o9zAUlRE2eXlkvSMdisrTCXI5F
UE2n9JepvXiQu/Codm/Navy2c/ts1UWTbxA/AgMBAAGjggHfMIIB2zAdBgNVHQ4E
FgQUj46MXjRXe+vW7b8bobcjhHTTD+8wHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDEyOS9qNDZNWGpSWGUtdlc3Yjhib2JjamhIVFRELTgucm9h
MCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJAoAa2swDQYJKoZIhvcNAQEL
BQADggEBAEN3ho61fJaOU1XPS6+cBAOhWFGPmFS8Prb9MFvsUDvXexP5rQmeKcLV
Cl2tqaihjUNSMaWf/KXCdsn6f+FAnVjfQQuurals92OXLB/W7wJYc6r2305Um9n0
keou/ca2P3bki0JBRl0fgMezTe1bjVo4ma7W4UdGhLTBY5wdi40btN1H6L3RJnmR
974pkCTWQGC8RuO2j6MiEcn1CrsPWYqTRrDHLD8wwoYTy0n+q6/q6NJTRB20eu9u
jjK34q0ah3YcrdAptTTshwz7qaU1Bv/4ntceTjCsbyN5OAG/m+XxxMa3l4SyzoOO
ZFx8kv4q1T3vFYat8VLeHqc76EOLpbM=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:35 2026 by rpki-client