Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/lF_RQL0jggLHs04cHBvkOuv9_V4.roa
File:                     lF_RQL0jggLHs04cHBvkOuv9_V4.roa (raw, json)
Hash identifier:          wfEdGWi1Sd6ZlKYXUrALvinkTUEN7FKGakUs0um3m24=
Subject key identifier:   94:5F:D1:40:BD:23:82:02:C7:B3:4E:1C:1C:1B:E4:3A:EB:FD:FD:5E
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       073D
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/lF_RQL0jggLHs04cHBvkOuv9_V4.roa
Signing time:             Tue 31 Mar 2026 08:27:29 +0000
ROA not before:           Tue 31 Mar 2026 08:27:29 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:60:f018::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1853 (0x73d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:27:29 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=945FD140BD238202C7B34E1C1C1BE43AEBFDFD5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:e6:f5:df:66:bf:0e:87:db:7b:b6:a1:30:2a:
                    45:df:31:e9:3a:92:ff:3f:1e:b8:ee:ea:15:89:2c:
                    5b:e8:fc:8b:cb:33:bd:84:4a:89:be:76:17:5c:32:
                    e4:8b:d0:6b:9b:7d:9a:6a:8f:e8:ff:90:ab:69:a7:
                    6e:da:ce:91:d5:26:78:e7:54:21:3e:50:ef:9a:d1:
                    5f:f0:c9:75:20:52:89:46:66:04:69:6d:29:7c:89:
                    dd:dd:e8:e7:a1:b0:fe:fe:2d:36:b1:33:11:4a:f4:
                    6a:ff:2f:df:f1:90:32:a6:4f:a0:18:63:d9:de:a3:
                    52:50:29:4a:09:58:7d:4d:ec:2a:20:d8:17:d3:32:
                    9f:ca:c1:54:db:89:c9:d3:ea:a2:e7:d8:8c:b8:e4:
                    6f:ce:d0:b8:ea:a2:41:d9:d7:3a:34:8d:94:db:72:
                    5d:1a:10:85:6c:c0:97:7e:14:6d:a0:6e:01:9d:9e:
                    d0:3b:a6:fa:d4:bd:e0:aa:ab:db:b2:a3:07:76:77:
                    ef:b9:e9:0a:20:73:05:9c:0f:56:cd:cb:46:8e:a5:
                    ae:f8:bb:90:34:cb:23:06:43:57:72:3e:71:36:c4:
                    38:f3:b4:e2:ed:74:a5:a4:ab:37:67:af:ac:47:83:
                    68:e2:86:8f:9b:86:8d:25:b6:8b:e2:d6:aa:e6:af:
                    aa:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:5F:D1:40:BD:23:82:02:C7:B3:4E:1C:1C:1B:E4:3A:EB:FD:FD:5E
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/lF_RQL0jggLHs04cHBvkOuv9_V4.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:60:f018::/46

    Signature Algorithm: sha256WithRSAEncryption
         b7:3e:f6:bc:2f:b2:75:1f:c5:3d:9b:45:c6:13:a8:10:14:ba:
         e9:ce:fc:f3:f4:21:64:f0:f4:61:db:a6:02:a4:2d:8b:7f:bc:
         af:ec:6a:27:3e:de:57:1d:47:35:ce:1e:fa:cf:ab:a0:aa:69:
         72:f3:70:54:e3:a7:b3:d7:60:0c:f6:18:47:76:c4:98:07:3d:
         6d:91:ba:71:2d:5d:2b:db:7f:51:aa:2a:54:c7:09:fa:fc:a7:
         e2:4b:a6:6c:eb:63:40:e7:c1:9e:e3:69:6f:29:8c:a8:73:17:
         46:db:9d:bc:e0:b9:fd:50:97:f0:a3:43:e5:4f:51:51:43:35:
         c4:cf:c2:11:00:87:f9:9d:ba:e4:34:2c:6c:8f:4c:1c:5a:82:
         de:a4:dd:a4:9f:5f:09:5e:69:ee:b4:2d:7b:9b:c4:0d:05:6e:
         8f:bc:da:6b:bc:c7:17:f4:d1:33:b5:89:09:b0:34:50:f3:7d:
         cd:74:64:ec:4b:b0:40:08:28:ea:5d:62:ac:7e:ed:cb:f9:9e:
         ea:60:38:64:45:ee:4b:8d:e2:c5:9b:e4:6b:5d:e1:6f:5a:cb:
         16:8d:e8:62:f1:17:27:cb:76:06:43:c4:57:4a:ca:1a:25:f3:
         5b:21:22:3d:0a:ee:e9:c6:9a:d1:e3:c2:39:3d:df:cf:bb:18:
         22:16:ed:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 22:24:15 2026 by rpki-client