Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/m-fgbLhY6j8J0Y2vOGX6HKlaTfA.roa
File:                     m-fgbLhY6j8J0Y2vOGX6HKlaTfA.roa (raw, json)
Hash identifier:          50bK+HxQVNDzVOVUF3RlV//S87sWVu67Gd/G3QW2eX8=
Subject key identifier:   9B:E7:E0:6C:B8:58:EA:3F:09:D1:8D:AF:38:65:FA:1C:A9:5A:4D:F0
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0684
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/m-fgbLhY6j8J0Y2vOGX6HKlaTfA.roa
Signing time:             Tue 31 Mar 2026 08:26:00 +0000
ROA not before:           Tue 31 Mar 2026 08:26:00 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:e500::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1668 (0x684)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:26:00 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=9BE7E06CB858EA3F09D18DAF3865FA1CA95A4DF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e7:90:a3:87:9d:84:0b:fa:18:3e:cb:df:74:
                    71:c5:1a:97:32:19:96:9e:69:7b:70:a6:f1:2f:01:
                    30:94:3d:fa:e0:2e:99:ba:f3:dd:f0:e3:0a:7f:96:
                    87:ab:9d:cd:b4:89:55:7f:8b:11:7b:e6:0f:1c:bc:
                    92:42:65:fa:46:05:c4:69:4e:22:fd:58:3b:67:dc:
                    c4:7f:ca:bd:72:34:ca:ce:4f:9c:34:c9:29:e5:81:
                    a3:77:fe:ec:c6:b9:04:ba:00:cf:0a:65:54:bf:9f:
                    fa:6b:f6:6d:e7:a9:53:9f:81:5a:a4:fd:36:22:1b:
                    11:5b:f2:74:9c:b4:45:4b:86:d9:1b:d3:88:0c:61:
                    72:5f:ac:29:9e:40:53:b8:1c:1e:d7:80:7c:11:8f:
                    e3:c7:4c:31:b4:f8:bc:e7:0e:36:db:e2:5a:85:aa:
                    31:23:43:a5:61:9e:cd:14:7c:ba:fd:ce:f6:a8:7d:
                    87:a3:c4:e6:7c:6e:6a:2b:86:6f:bf:7e:79:c4:ef:
                    7c:4a:72:21:a8:0d:fd:1a:44:c1:d7:b2:b9:a8:8a:
                    6c:1b:e4:07:78:63:e3:45:d8:f6:ef:b2:50:6c:86:
                    07:37:9f:ed:4b:a8:00:e8:30:ee:a4:3b:71:aa:bf:
                    f0:6b:ee:00:cf:a5:cd:53:4c:5e:b4:f9:41:74:88:
                    00:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:E7:E0:6C:B8:58:EA:3F:09:D1:8D:AF:38:65:FA:1C:A9:5A:4D:F0
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/m-fgbLhY6j8J0Y2vOGX6HKlaTfA.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:e500::/40

    Signature Algorithm: sha256WithRSAEncryption
         a3:74:ce:5f:a0:6a:d3:3c:ac:b5:66:94:c0:e2:09:68:b5:03:
         89:69:20:dd:67:ac:4d:e6:a5:97:d9:72:ef:4c:6e:11:a0:13:
         1b:29:05:7b:56:da:89:f0:15:8d:23:77:02:59:5d:a0:e3:75:
         e5:8b:ef:f2:e7:fe:f6:f2:7b:1b:b5:fc:32:53:48:51:8c:ab:
         00:87:47:e0:57:b0:49:1d:8f:e9:6d:ec:46:d1:8c:fe:21:cb:
         cf:34:27:f4:bf:4d:7c:60:63:0b:21:c2:8d:fd:5a:97:2d:e0:
         f3:46:a7:0d:a4:dd:1d:83:3d:fe:49:48:7a:b3:48:59:fa:05:
         1f:d4:1d:ff:84:92:6f:01:e2:c8:45:77:62:1c:03:de:c0:bd:
         6f:8e:b1:33:2a:34:b0:51:72:00:81:9d:a6:75:fc:fc:4a:0f:
         d8:3c:2b:97:ad:a8:2a:3e:d2:9a:75:67:69:a0:91:29:50:03:
         53:54:24:44:09:23:a2:fa:7d:87:b1:06:ed:8e:40:8f:dd:10:
         77:2d:1a:33:ac:81:4a:81:8e:de:1b:57:86:a9:76:6a:6e:e7:
         d8:41:94:4f:4f:68:ea:1f:a2:4a:21:4f:bb:92:7a:5c:c4:9e:
         c1:30:71:68:e3:44:cd:28:bd:61:14:9c:8c:69:d2:32:b8:f8:
         48:a4:91:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:48:07 2026 by rpki-client