Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/nu6TTiKKY-pQecD0tnrQjmIcLGU.roa
File:                     nu6TTiKKY-pQecD0tnrQjmIcLGU.roa (raw, json)
Hash identifier:          Ep75CaEsWuGvnd7bz7N+1yy079FxC2duQty2ff+dLmQ=
Subject key identifier:   9E:EE:93:4E:22:8A:63:EA:50:79:C0:F4:B6:7A:D0:8E:62:1C:2C:65
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0666
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/nu6TTiKKY-pQecD0tnrQjmIcLGU.roa
Signing time:             Tue 31 Mar 2026 08:25:46 +0000
ROA not before:           Tue 31 Mar 2026 08:25:46 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:4200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1638 (0x666)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:25:46 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=9EEE934E228A63EA5079C0F4B67AD08E621C2C65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d8:55:24:f9:6a:ad:60:d7:19:9e:7e:55:b3:
                    bf:75:34:9b:8c:12:69:8f:f0:44:06:0d:b2:37:cd:
                    20:7c:4c:f4:21:be:a0:bb:b9:a6:0d:17:df:71:7c:
                    46:84:df:d9:79:dd:9b:fe:f6:35:d9:7e:22:57:fb:
                    a8:56:cf:b3:d6:fd:e0:9f:7c:bd:5a:07:a6:4f:4a:
                    11:eb:56:e4:d7:f9:2d:a6:ec:ad:a3:cc:56:c9:81:
                    f6:61:7a:1b:85:97:47:f4:5c:54:64:72:cc:61:7d:
                    1c:b7:aa:14:1f:11:3d:61:e8:87:c0:da:47:74:79:
                    f4:7b:ac:9f:83:02:82:3f:2a:65:b3:50:73:af:57:
                    c2:1f:7b:b4:26:e2:e9:20:b0:1c:08:5e:19:ce:83:
                    88:be:ce:2f:a6:ec:59:cb:36:91:69:be:44:3f:ef:
                    7c:b6:03:c8:a1:21:d4:19:15:7d:a0:8f:87:53:ef:
                    9b:fc:86:b0:48:b6:52:4c:6d:3a:b4:c9:55:fe:37:
                    ea:5e:4b:71:24:87:93:45:90:4f:ed:2b:a3:b6:4c:
                    15:e3:c9:f9:0b:2d:1e:66:48:0c:08:52:99:6a:b9:
                    80:d4:f1:8f:35:1e:9c:96:68:48:cd:6c:53:32:ee:
                    79:d3:43:31:44:20:1f:28:d7:17:84:6d:1c:61:5a:
                    ba:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:EE:93:4E:22:8A:63:EA:50:79:C0:F4:B6:7A:D0:8E:62:1C:2C:65
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/nu6TTiKKY-pQecD0tnrQjmIcLGU.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:4200::/40

    Signature Algorithm: sha256WithRSAEncryption
         72:dd:34:e7:e5:56:16:66:17:41:6e:76:cc:b5:71:f0:08:a0:
         c3:cd:49:06:a5:c0:ad:30:4b:00:68:70:ea:cf:ff:f3:a8:09:
         f8:19:e2:4e:a1:ee:67:8e:74:8c:b3:c6:bb:6c:08:9e:d9:fe:
         c9:82:fb:12:35:e3:cc:3d:d4:71:c8:ef:3b:a5:f2:93:a2:50:
         2e:f9:22:5c:1e:19:f8:c7:ea:70:a0:6e:81:12:40:c0:44:9d:
         26:e3:0d:37:fa:e6:b6:04:9d:09:b0:0f:69:05:f9:88:52:3e:
         71:b4:b0:23:70:3d:81:d9:68:4a:80:26:32:e6:36:3e:ee:bf:
         f0:37:c3:41:d3:31:9e:77:d6:a7:65:73:cf:14:cc:86:7c:76:
         7b:b5:d9:9b:ad:d7:c7:74:98:d7:e9:c9:4a:e7:fe:49:4d:f2:
         c8:5d:9e:8b:e5:68:2f:ae:30:07:f5:00:a3:6c:29:84:19:2c:
         5f:c7:20:d8:d7:4d:00:6c:5e:f9:d0:88:9c:db:a6:b5:cf:8e:
         35:dd:07:80:6f:b9:b6:07:2e:58:39:92:d8:32:26:db:4f:44:
         d2:d2:22:4f:1d:06:01:d5:90:28:3e:1c:40:40:b4:54:da:06:
         f3:42:39:df:89:f4:01:1f:d6:90:36:69:0a:85:89:d0:ab:27:
         af:99:f4:79
-----BEGIN CERTIFICATE-----
MIIEwzCCA6ugAwIBAgICBmYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjAzMzEw
ODI1NDZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDlFRUU5MzRFMjI4QTYz
RUE1MDc5QzBGNEI2N0FEMDhFNjIxQzJDNjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCg2FUk+WqtYNcZnn5Vs791NJuMEmmP8EQGDbI3zSB8TPQhvqC7
uaYNF99xfEaE39l53Zv+9jXZfiJX+6hWz7PW/eCffL1aB6ZPShHrVuTX+S2m7K2j
zFbJgfZhehuFl0f0XFRkcsxhfRy3qhQfET1h6IfA2kd0efR7rJ+DAoI/KmWzUHOv
V8Ife7Qm4ukgsBwIXhnOg4i+zi+m7FnLNpFpvkQ/73y2A8ihIdQZFX2gj4dT75v8
hrBItlJMbTq0yVX+N+peS3Ekh5NFkE/tK6O2TBXjyfkLLR5mSAwIUplquYDU8Y81
HpyWaEjNbFMy7nnTQzFEIB8o1xeEbRxhWrqbAgMBAAGjggHfMIIB2zAdBgNVHQ4E
FgQUnu6TTiKKY+pQecD0tnrQjmIcLGUwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDEyOS9udTZUVGlLS1ktcFFlY0QwdG5yUWptSWNMR1Uucm9h
MCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJAoAa0IwDQYJKoZIhvcNAQEL
BQADggEBAHLdNOflVhZmF0Fudsy1cfAIoMPNSQalwK0wSwBocOrP//OoCfgZ4k6h
7meOdIyzxrtsCJ7Z/smC+xI148w91HHI7zul8pOiUC75IlweGfjH6nCgboESQMBE
nSbjDTf65rYEnQmwD2kF+YhSPnG0sCNwPYHZaEqAJjLmNj7uv/A3w0HTMZ531qdl
c88UzIZ8dnu12Zut18d0mNfpyUrn/klN8shdnovlaC+uMAf1AKNsKYQZLF/HINjX
TQBsXvnQiJzbprXPjjXdB4BvubYHLlg5ktgyJttPRNLSIk8dBgHVkCg+HEBAtFTa
BvNCOd+J9AEf1pA2aQqFidCrJ6+Z9Hk=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:04 2026 by rpki-client