Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/m3qiWY9g6Jwjxm5jT0haslEKEDQ.roa
File:                     m3qiWY9g6Jwjxm5jT0haslEKEDQ.roa (raw, json)
Hash identifier:          iUAWGXlCy+WxIkxAbtlKRuWfu4abT0G3B6fFuynaAAk=
Subject key identifier:   9B:7A:A2:59:8F:60:E8:9C:23:C6:6E:63:4F:48:5A:B2:51:0A:10:34
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0732
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/m3qiWY9g6Jwjxm5jT0haslEKEDQ.roa
Signing time:             Tue 31 Mar 2026 08:27:24 +0000
ROA not before:           Tue 31 Mar 2026 08:27:24 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:8f00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1842 (0x732)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:27:24 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=9B7AA2598F60E89C23C66E634F485AB2510A1034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:85:db:ae:d5:61:c9:ac:6b:74:2b:79:81:29:
                    23:e3:8d:06:02:55:85:2e:72:08:c6:d2:b4:52:f3:
                    b5:89:c5:32:fc:a2:20:3d:f0:c4:ed:8a:dd:80:7f:
                    06:7d:97:2f:9a:ef:c7:f8:f4:f1:70:dd:b8:e8:b8:
                    eb:cf:c9:9a:cf:0d:79:df:a7:97:25:0f:1e:49:07:
                    30:5f:df:36:27:76:2d:88:ab:da:6b:9c:75:60:e8:
                    51:fe:bb:66:4b:38:d0:c9:0c:4c:2b:aa:32:99:91:
                    b6:cb:01:f9:6c:ab:b2:9d:93:e7:bb:eb:ea:d7:50:
                    18:11:22:93:ac:7d:de:95:89:6f:6a:4d:f4:61:a0:
                    84:91:15:7f:d5:df:c0:92:20:00:61:54:72:8d:24:
                    ba:27:58:97:cf:b2:7a:b9:ed:33:14:12:cb:4d:d0:
                    2b:ec:6d:2a:d4:e9:1c:64:ed:0e:ff:ab:b2:8f:07:
                    6b:5e:9c:60:7c:dc:52:24:fe:72:bf:5b:4d:ec:9d:
                    de:12:0e:4d:c8:65:aa:8a:93:49:77:d3:fd:cd:33:
                    3a:b0:74:5a:f0:6c:26:eb:c9:ef:77:a6:0c:8d:ee:
                    4c:1c:bd:81:a9:0a:6f:c8:d7:db:17:63:6b:c8:67:
                    7d:76:d1:89:b6:92:94:66:da:f4:7a:be:c1:34:33:
                    04:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:7A:A2:59:8F:60:E8:9C:23:C6:6E:63:4F:48:5A:B2:51:0A:10:34
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/m3qiWY9g6Jwjxm5jT0haslEKEDQ.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:8f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         c6:99:8d:84:a0:80:8c:0d:4b:5f:78:f4:c1:7c:98:22:b5:8c:
         82:aa:0d:45:d0:22:39:3e:5a:1e:58:78:24:29:4f:34:c5:93:
         ae:a9:c7:07:6b:00:46:e9:4f:95:07:c6:e9:23:ee:6f:84:c1:
         74:13:49:07:d0:84:aa:f4:8b:a1:d4:cc:36:f0:54:ce:31:ae:
         9d:33:d6:dc:35:72:63:7c:a2:70:1b:36:e3:c5:20:6a:78:37:
         f4:58:eb:68:90:f2:58:ae:c6:b7:59:0d:19:f8:73:e9:e0:76:
         9a:91:76:96:53:64:c0:c0:75:9f:9f:7f:64:91:0d:c9:7e:f5:
         d2:6c:0e:ca:6a:7d:cb:29:e1:e4:5f:79:1c:5b:70:0d:4e:eb:
         40:0f:de:b5:c0:88:e3:21:d4:2b:91:3e:b2:a1:2c:a2:c2:27:
         ce:ab:97:d6:2c:62:18:73:5a:eb:22:bb:e6:41:b7:f4:04:e3:
         68:95:fe:69:12:23:bb:92:67:e0:9b:7a:f4:49:2f:dd:cf:b3:
         8a:3c:6e:7e:5b:64:e6:ff:54:a4:60:b7:24:fd:99:5f:f3:21:
         3e:ed:c3:8c:d6:6c:08:a2:5f:75:d9:0a:42:4c:4e:09:e7:71:
         11:ce:8a:44:2f:6f:b0:3b:7b:2e:d4:05:57:11:7f:9b:6c:7b:
         76:64:dd:14
-----BEGIN CERTIFICATE-----
MIIEwzCCA6ugAwIBAgICBzIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjAzMzEw
ODI3MjRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDlCN0FBMjU5OEY2MEU4
OUMyM0M2NkU2MzRGNDg1QUIyNTEwQTEwMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDRhduu1WHJrGt0K3mBKSPjjQYCVYUucgjG0rRS87WJxTL8oiA9
8MTtit2AfwZ9ly+a78f49PFw3bjouOvPyZrPDXnfp5clDx5JBzBf3zYndi2Iq9pr
nHVg6FH+u2ZLONDJDEwrqjKZkbbLAflsq7Kdk+e76+rXUBgRIpOsfd6ViW9qTfRh
oISRFX/V38CSIABhVHKNJLonWJfPsnq57TMUEstN0CvsbSrU6Rxk7Q7/q7KPB2te
nGB83FIk/nK/W03snd4SDk3IZaqKk0l30/3NMzqwdFrwbCbrye93pgyN7kwcvYGp
Cm/I19sXY2vIZ3120Ym2kpRm2vR6vsE0MwQ3AgMBAAGjggHfMIIB2zAdBgNVHQ4E
FgQUm3qiWY9g6Jwjxm5jT0haslEKEDQwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDEyOS9tM3FpV1k5ZzZKd2p4bTVqVDBoYXNsRUtFRFEucm9h
MCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJAoAa48wDQYJKoZIhvcNAQEL
BQADggEBAMaZjYSggIwNS1949MF8mCK1jIKqDUXQIjk+Wh5YeCQpTzTFk66pxwdr
AEbpT5UHxukj7m+EwXQTSQfQhKr0i6HUzDbwVM4xrp0z1tw1cmN8onAbNuPFIGp4
N/RY62iQ8liuxrdZDRn4c+ngdpqRdpZTZMDAdZ+ff2SRDcl+9dJsDspqfcsp4eRf
eRxbcA1O60AP3rXAiOMh1CuRPrKhLKLCJ86rl9YsYhhzWusiu+ZBt/QE42iV/mkS
I7uSZ+CbevRJL93Ps4o8bn5bZOb/VKRgtyT9mV/zIT7tw4zWbAiiX3XZCkJMTgnn
cRHOikQvb7A7ey7UBVcRf5tse3Zk3RQ=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:26 2026 by rpki-client