Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/jyJj_o4h79p9K2hnFjk-T365z_4.roa
File:                     jyJj_o4h79p9K2hnFjk-T365z_4.roa (raw, json)
Hash identifier:          TXToA1bXA2iHhyxAsr7tzNjwgnlKxfpFeczUaPALjrU=
Subject key identifier:   8F:22:63:FE:8E:21:EF:DA:7D:2B:68:67:16:39:3E:4F:7E:B9:CF:FE
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       06A5
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/jyJj_o4h79p9K2hnFjk-T365z_4.roa
Signing time:             Tue 31 Mar 2026 08:26:17 +0000
ROA not before:           Tue 31 Mar 2026 08:26:17 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:e000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1701 (0x6a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:26:17 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=8F2263FE8E21EFDA7D2B686716393E4F7EB9CFFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c8:7d:3d:b8:33:7b:34:b5:76:2d:3c:c2:c7:
                    1e:a8:3e:5f:72:7b:cb:dd:b9:01:a0:2d:f5:b1:50:
                    62:eb:f4:ce:3b:7b:3f:b0:a2:ad:97:6b:4c:b4:81:
                    95:ab:37:26:d4:27:77:b3:12:d3:28:9f:fa:ef:9b:
                    cb:e5:df:c5:e4:b4:99:33:cb:9b:06:31:6d:a9:28:
                    fc:05:59:1f:79:85:db:64:25:d8:a5:57:95:5f:09:
                    40:45:dc:1e:33:b7:0d:09:b9:cb:14:e4:48:b3:64:
                    2f:c4:d5:33:dc:bf:a3:58:66:4e:78:0c:4b:a8:80:
                    2b:b7:e0:6f:49:10:61:15:0e:6f:52:f1:24:34:f1:
                    0a:49:d1:d5:55:d5:13:fb:23:93:fc:25:71:7c:4b:
                    eb:c6:b6:f4:1f:da:10:77:39:62:fb:27:56:37:b9:
                    59:9f:08:35:a8:98:c8:1e:3c:ff:16:04:6b:9e:a5:
                    5a:cd:3c:27:b0:06:cc:2b:48:64:52:9d:a5:76:dd:
                    15:92:dd:6d:da:9d:ed:a2:cb:8b:58:ab:5e:99:82:
                    ac:0a:15:f3:35:b2:87:f4:44:42:5c:c3:5d:e5:d8:
                    92:fa:f8:64:5d:6d:53:29:5d:7d:8c:50:df:1c:30:
                    e7:74:75:ef:bb:c1:2c:2b:77:13:82:ff:d3:03:2d:
                    95:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:22:63:FE:8E:21:EF:DA:7D:2B:68:67:16:39:3E:4F:7E:B9:CF:FE
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/jyJj_o4h79p9K2hnFjk-T365z_4.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         53:6c:1c:d7:5d:0e:6d:d9:ce:dd:47:7e:f2:54:66:7b:a5:47:
         dd:c0:b8:13:03:c8:c1:d7:05:d7:6f:9a:3f:21:6d:70:5c:96:
         24:4e:db:80:ef:d4:a8:03:63:c9:fc:10:c1:63:86:f0:f0:80:
         16:7b:b3:24:fd:47:25:30:35:e6:e7:48:ab:ad:3c:a3:e8:fd:
         76:8a:4c:be:67:98:60:36:86:22:b1:09:c1:4d:35:85:ba:1a:
         e4:1d:a1:1f:44:c7:c3:ce:51:de:f8:3e:f3:79:87:a2:c3:57:
         06:0c:1e:ad:91:6a:0b:b0:55:0b:ba:5a:de:7e:28:19:38:57:
         43:27:e2:cb:15:99:9a:49:57:80:4a:ca:b9:df:46:86:95:09:
         88:ae:4d:9a:2f:c9:7b:ae:c7:f2:20:1e:30:d0:3e:2d:48:46:
         f7:d1:b0:62:11:28:a3:52:da:6a:79:99:90:dd:58:45:07:8a:
         89:3a:fe:6f:f4:e6:b8:df:a6:28:b0:d2:06:9d:4f:f4:51:d3:
         1e:0b:cf:d8:ed:d5:a1:f2:e2:3c:20:95:2a:7d:db:17:fd:9c:
         97:4c:83:64:d1:36:6d:31:c4:ea:a4:0f:69:42:cd:4e:c4:38:
         c1:5e:b2:8f:7f:a3:de:46:5e:b5:50:f6:f3:7c:b6:87:1c:65:
         7a:95:4d:37
-----BEGIN CERTIFICATE-----
MIIEwzCCA6ugAwIBAgICBqUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjAzMzEw
ODI2MTdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDhGMjI2M0ZFOEUyMUVG
REE3RDJCNjg2NzE2MzkzRTRGN0VCOUNGRkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCwyH09uDN7NLV2LTzCxx6oPl9ye8vduQGgLfWxUGLr9M47ez+w
oq2Xa0y0gZWrNybUJ3ezEtMon/rvm8vl38XktJkzy5sGMW2pKPwFWR95hdtkJdil
V5VfCUBF3B4ztw0JucsU5EizZC/E1TPcv6NYZk54DEuogCu34G9JEGEVDm9S8SQ0
8QpJ0dVV1RP7I5P8JXF8S+vGtvQf2hB3OWL7J1Y3uVmfCDWomMgePP8WBGuepVrN
PCewBswrSGRSnaV23RWS3W3ane2iy4tYq16ZgqwKFfM1sof0REJcw13l2JL6+GRd
bVMpXX2MUN8cMOd0de+7wSwrdxOC/9MDLZWrAgMBAAGjggHfMIIB2zAdBgNVHQ4E
FgQUjyJj/o4h79p9K2hnFjk+T365z/4wHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDEyOS9qeUpqX280aDc5cDlLMmhuRmprLVQzNjV6XzQucm9h
MCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJAoAa+AwDQYJKoZIhvcNAQEL
BQADggEBAFNsHNddDm3Zzt1HfvJUZnulR93AuBMDyMHXBddvmj8hbXBcliRO24Dv
1KgDY8n8EMFjhvDwgBZ7syT9RyUwNebnSKutPKPo/XaKTL5nmGA2hiKxCcFNNYW6
GuQdoR9Ex8POUd74PvN5h6LDVwYMHq2RaguwVQu6Wt5+KBk4V0Mn4ssVmZpJV4BK
yrnfRoaVCYiuTZovyXuux/IgHjDQPi1IRvfRsGIRKKNS2mp5mZDdWEUHiok6/m/0
5rjfpiiw0gadT/RR0x4Lz9jt1aHy4jwglSp92xf9nJdMg2TRNm0xxOqkD2lCzU7E
OMFeso9/o95GXrVQ9vN8toccZXqVTTc=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:48:11 2026 by rpki-client