Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/mI2yFAJ5LF39JFFZ_Hlo1L_s-Ug.roa
File:                     mI2yFAJ5LF39JFFZ_Hlo1L_s-Ug.roa (raw, json)
Hash identifier:          AEXp6AtoAIzPt1GU9mOxKKsLJTkuqA/S/B8Vn+uQLt4=
Subject key identifier:   98:8D:B2:14:02:79:2C:5D:FD:24:51:59:FC:79:68:D4:BF:EC:F9:48
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0781
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/mI2yFAJ5LF39JFFZ_Hlo1L_s-Ug.roa
Signing time:             Tue 31 Mar 2026 08:28:02 +0000
ROA not before:           Tue 31 Mar 2026 08:28:02 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:61:5e00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1921 (0x781)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:28:02 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=988DB21402792C5DFD245159FC7968D4BFECF948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:be:83:06:50:e2:f4:1e:8a:aa:a0:31:41:e6:
                    39:b2:5f:de:05:26:44:61:74:12:00:d9:c5:0a:70:
                    08:8d:54:9c:18:07:ed:5a:99:50:68:cb:f7:63:dd:
                    97:b8:f5:a6:a5:c1:e0:30:be:76:aa:62:4f:3f:f3:
                    db:f5:4a:11:90:18:0d:e0:e6:6f:bb:6f:3e:77:8e:
                    7e:b1:ac:c3:96:75:b1:25:89:5c:f2:1f:cd:1f:04:
                    80:3b:58:1b:d8:a9:cf:80:fd:62:8e:7d:52:61:bb:
                    37:a6:7d:0d:8b:48:31:0f:c3:19:8d:6e:ef:c8:ed:
                    b2:75:51:77:c3:75:f9:5c:a9:45:9a:a9:c6:c9:e7:
                    3c:ff:3d:ac:d1:ee:a5:d0:3e:76:7c:5d:aa:31:ac:
                    fb:94:49:7a:7c:3c:3c:af:90:3d:74:1c:a1:69:a9:
                    3f:e7:87:86:dc:6f:fa:fc:05:d3:d8:2d:cb:66:cb:
                    bb:c5:27:30:5c:47:24:79:fa:67:39:e0:c4:38:13:
                    ca:14:4c:78:68:c4:d4:fb:3b:42:4b:81:6c:32:ed:
                    38:14:d6:da:2d:da:01:e3:31:d1:5d:04:8b:5d:8e:
                    78:ec:74:5a:54:bf:21:3a:51:dc:8e:60:3e:7f:ad:
                    e1:f8:a6:fb:08:f4:35:63:9a:2b:c2:8f:6c:9b:fc:
                    ed:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:8D:B2:14:02:79:2C:5D:FD:24:51:59:FC:79:68:D4:BF:EC:F9:48
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/mI2yFAJ5LF39JFFZ_Hlo1L_s-Ug.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:5e00::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:ff:dc:5e:4f:f8:07:ff:38:77:ee:b9:0f:e7:7a:b1:dd:b3:
         7b:f3:63:79:94:8f:47:21:51:d4:86:32:cc:f8:b4:5c:96:08:
         42:f9:7b:7d:c3:2c:0e:99:3c:ec:ba:24:81:82:7e:30:a5:ec:
         10:5f:22:2e:df:b6:61:d8:2a:c6:75:2e:a2:38:24:6f:69:d0:
         77:ff:b6:bf:62:b4:b7:ac:fc:ea:89:cc:6a:13:5b:73:77:b3:
         4e:32:72:85:3d:56:17:3f:3d:5f:f2:c8:b4:5f:05:f4:fa:78:
         43:e1:be:96:6d:2c:6d:7f:e9:8f:bb:21:96:26:ed:42:0c:07:
         94:70:28:b4:a5:74:8c:20:46:24:cf:1d:ff:a7:9a:a2:3d:5f:
         de:f5:1b:5b:8a:a0:58:67:72:49:92:db:9e:dd:2d:4a:4b:7e:
         5e:6b:d3:6f:00:52:b2:ca:1d:71:53:61:e3:e3:b1:cb:d4:31:
         76:78:9c:6c:0f:9f:ad:f1:9d:b4:58:3a:30:04:db:53:66:55:
         89:33:67:22:51:a9:e6:d4:76:d6:40:d1:26:b6:69:5d:61:44:
         2a:c2:da:0a:3b:36:2d:f9:f3:c0:55:69:a7:be:b7:3f:8e:c2:
         f8:4a:b9:b3:c7:6f:73:db:7d:1b:44:ba:ef:3d:53:37:cb:9f:
         90:b6:97:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:46 2026 by rpki-client