Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/qchEHJLt-e3dOKytBL2z7UijgCI.roa
File:                     qchEHJLt-e3dOKytBL2z7UijgCI.roa (raw, json)
Hash identifier:          9squo2QvkERl72bXMqAPC7HLOOGLuwqAufnG0vocUsI=
Subject key identifier:   A9:C8:44:1C:92:ED:F9:ED:DD:38:AC:AD:04:BD:B3:ED:48:A3:80:22
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0745
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/qchEHJLt-e3dOKytBL2z7UijgCI.roa
Signing time:             Tue 31 Mar 2026 08:27:33 +0000
ROA not before:           Tue 31 Mar 2026 08:27:33 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:60:f000::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1861 (0x745)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:27:33 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A9C8441C92EDF9EDDD38ACAD04BDB3ED48A38022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:24:b2:4e:8b:a6:eb:2c:35:8b:d1:2f:b7:0b:
                    8f:3d:40:44:89:ac:3e:d3:06:c6:ee:c6:df:cf:67:
                    0e:26:20:a7:d6:43:0e:da:3c:11:3c:c5:fa:7b:23:
                    a3:67:0b:73:c2:15:fa:7f:77:7b:77:0f:3d:50:5d:
                    25:56:3f:33:f1:68:6a:4b:78:f8:bd:63:36:21:e2:
                    cf:14:c6:94:e7:1d:3e:d1:c0:54:27:e7:7d:f7:df:
                    3e:89:7f:e0:a9:b1:48:80:8d:60:2e:70:9a:64:7c:
                    d3:df:3d:0a:80:cc:de:bf:66:4e:d0:41:16:d6:91:
                    b5:08:03:bb:5a:0a:69:a8:b6:53:d3:00:3c:1e:7a:
                    c6:06:35:80:9e:07:d5:1f:67:cd:5c:64:80:08:2e:
                    32:30:38:e4:a9:fb:31:a7:e6:9a:21:34:f1:7a:30:
                    23:1a:44:43:6b:76:68:e2:e1:82:97:11:31:c3:93:
                    22:d8:c9:06:4b:6c:9f:3b:cd:ad:af:e1:9c:a2:5a:
                    10:b4:4f:7f:36:b3:b0:88:af:c6:4c:12:27:c7:3c:
                    b7:95:fe:c1:72:29:43:d1:ca:29:40:95:0c:52:82:
                    7f:b3:1a:41:da:ce:34:93:30:3f:71:94:8b:6a:6b:
                    3a:c5:27:53:bc:0a:49:8d:2e:34:19:60:5a:a4:03:
                    6e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:C8:44:1C:92:ED:F9:ED:DD:38:AC:AD:04:BD:B3:ED:48:A3:80:22
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/qchEHJLt-e3dOKytBL2z7UijgCI.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:60:f000::/45

    Signature Algorithm: sha256WithRSAEncryption
         ad:80:1a:59:b0:06:be:19:54:b5:1b:c2:a7:92:fa:37:8f:00:
         81:87:3b:46:4f:5e:67:8e:e3:5a:d7:7f:90:45:fb:70:2d:4d:
         ce:20:34:54:f7:11:73:32:63:a3:49:8c:f2:10:a7:22:92:44:
         41:7d:d4:5f:26:fd:bf:e2:57:97:09:00:cd:b7:a0:99:8f:76:
         f4:e2:d4:16:e7:7f:87:86:77:5a:46:1b:a2:44:7a:24:8e:75:
         92:7c:7b:fe:0e:32:fa:79:7d:cd:4d:79:e3:d0:ce:66:31:af:
         3e:43:0a:cd:37:dc:94:32:49:1b:12:05:7a:43:69:fb:90:63:
         ee:31:3b:65:e1:86:7c:25:4d:54:d6:35:48:d9:b7:5b:27:1e:
         7e:59:d1:d8:08:99:27:89:fb:ad:74:02:9d:59:aa:c1:a2:d9:
         d7:86:c6:ee:41:e9:fc:60:6b:fd:5f:99:89:2c:91:86:20:d7:
         74:c6:5b:97:7e:97:5d:3c:b1:f6:4c:52:3e:64:23:2d:64:9c:
         a7:37:c4:c2:b0:45:47:71:a8:6a:cf:5e:1a:b8:fb:0f:a9:26:
         bd:e8:7b:63:a0:56:af:2a:34:5e:7a:4d:d3:f0:7d:10:9c:eb:
         7a:67:78:21:1a:17:4f:2f:19:6b:12:50:04:89:73:75:e2:45:
         71:6e:40:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:58 2026 by rpki-client