Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/qi4zYJtpsRWt7TVHYyc_-XBGJfA.roa
File:                     qi4zYJtpsRWt7TVHYyc_-XBGJfA.roa (raw, json)
Hash identifier:          SXtJAAgbph57toiYr8j5ntHOuL97qwu/ih5fxUp4GvI=
Subject key identifier:   AA:2E:33:60:9B:69:B1:15:AD:ED:35:47:63:27:3F:F9:70:46:25:F0
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       06E9
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/qi4zYJtpsRWt7TVHYyc_-XBGJfA.roa
Signing time:             Tue 31 Mar 2026 08:26:47 +0000
ROA not before:           Tue 31 Mar 2026 08:26:47 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:7900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1769 (0x6e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:26:47 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=AA2E33609B69B115ADED354763273FF9704625F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:62:c3:39:41:d7:f0:54:82:cd:58:95:0f:d1:
                    ce:f7:10:25:3f:e7:18:4f:3a:e0:04:e5:67:85:29:
                    96:57:7b:c4:24:ee:c5:30:df:64:66:96:f4:d2:aa:
                    28:98:f9:14:cb:75:ff:5d:d3:d1:6d:c9:2a:59:23:
                    dc:c6:4f:73:d8:a4:82:fb:6b:d1:62:4f:c4:fc:44:
                    e5:85:3e:6b:c5:f1:a2:89:7d:e3:03:b2:f6:72:4e:
                    42:99:ac:39:88:f2:d5:a5:01:f2:72:48:5d:11:81:
                    cd:9f:03:9f:1e:3f:54:1e:46:e5:e3:a4:d6:62:1f:
                    42:35:01:b3:a3:40:66:0f:75:39:e4:64:77:23:f6:
                    1d:9e:35:71:6f:8f:3d:c9:f0:2a:73:c1:23:95:70:
                    61:98:a7:ae:c9:e8:9b:0e:26:bd:78:c3:50:85:38:
                    9e:98:0e:60:f0:30:af:89:38:1f:c4:dc:25:61:50:
                    e5:41:10:90:46:7e:c5:00:16:6b:62:4e:21:b1:87:
                    7a:77:22:a5:d6:3d:5a:db:3f:16:88:7c:fb:8e:8c:
                    a7:4d:02:e0:5f:3b:2f:49:cc:ed:98:50:1c:20:5b:
                    12:cb:ea:79:b3:9c:03:13:52:dd:e4:84:b9:ca:77:
                    57:3a:6a:92:46:de:ea:95:4d:fe:25:4c:8f:88:ff:
                    de:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:2E:33:60:9B:69:B1:15:AD:ED:35:47:63:27:3F:F9:70:46:25:F0
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/qi4zYJtpsRWt7TVHYyc_-XBGJfA.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:7900::/40

    Signature Algorithm: sha256WithRSAEncryption
         89:dc:e2:1a:98:54:27:2a:17:4f:2f:0d:74:fe:34:71:df:4a:
         a2:62:e2:e9:e3:18:7e:66:24:d5:33:84:be:f4:64:6b:dc:a8:
         d7:69:93:70:39:91:c2:22:00:9d:3b:1a:aa:69:ea:e8:a6:fa:
         74:af:6b:ef:cb:24:0a:aa:b7:b1:90:6b:71:ad:9b:a4:0f:e8:
         58:08:25:b9:63:62:1b:ea:a1:3c:e2:e8:2d:d1:80:cd:19:c1:
         9a:e8:f9:11:19:c4:6f:84:f7:d7:76:2e:92:15:f1:77:c3:6b:
         11:c9:7d:1d:dc:e0:5b:6f:5e:49:d5:50:1f:77:df:0c:23:c6:
         83:99:da:4e:af:7c:5d:d9:fa:b2:bc:90:c7:ff:7d:9b:d4:87:
         23:20:6b:82:c0:7f:a6:54:cb:ca:1e:08:3c:44:ab:0a:94:5a:
         25:14:79:3b:3a:6c:ab:85:cd:47:f1:32:7a:22:83:ab:65:f6:
         1e:89:37:59:31:5b:49:aa:b8:4a:34:da:ac:ff:e1:c9:b6:82:
         01:d1:04:5d:38:53:88:ed:bc:1d:3e:5b:eb:1c:a2:87:66:3b:
         87:1a:d2:10:32:3f:2b:37:72:87:25:3a:93:aa:ff:23:aa:45:
         c0:0e:81:e8:87:be:4b:b9:eb:8b:d2:b0:e3:5a:3b:bb:d7:5e:
         70:ca:4a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:48:06 2026 by rpki-client