Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/qzIpGANjWohlp8cBItp2TlZTLmE.roa
File:                     qzIpGANjWohlp8cBItp2TlZTLmE.roa (raw, json)
Hash identifier:          vO0TOpxNPOH8OxtPiHwc4N4xodKJG3U3UUgUHllDjD8=
Subject key identifier:   AB:32:29:18:03:63:5A:88:65:A7:C7:01:22:DA:76:4E:56:53:2E:61
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       069E
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/qzIpGANjWohlp8cBItp2TlZTLmE.roa
Signing time:             Tue 31 Mar 2026 08:26:14 +0000
ROA not before:           Tue 31 Mar 2026 08:26:14 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:3200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1694 (0x69e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:26:14 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=AB32291803635A8865A7C70122DA764E56532E61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d2:f6:a5:db:3e:5e:95:b5:db:d2:f2:11:80:
                    cb:08:cc:a8:e9:83:77:ac:2c:e2:b1:c5:92:ed:3e:
                    a8:f9:f1:a9:fc:ea:60:74:b6:98:f5:94:5d:6e:48:
                    f0:06:f8:ac:7e:fb:a7:67:3e:25:c9:33:fc:c6:2f:
                    d6:49:a0:99:ef:9a:49:f4:93:9e:00:87:a2:bb:c7:
                    de:65:39:f4:fa:b0:ae:ca:70:ce:d4:7c:f3:80:ca:
                    a9:a6:05:9e:4b:8c:d9:75:c3:18:6e:8b:cb:31:91:
                    d3:ab:9e:2f:72:53:e0:26:13:f4:35:07:97:97:f1:
                    75:11:56:c5:03:44:e8:dc:d5:1b:fc:8e:d3:92:37:
                    9b:72:28:1e:d4:02:ed:2c:41:3c:9a:c1:fd:20:b0:
                    8a:43:c1:6a:13:c2:0b:ef:2f:fe:f3:6e:e6:e7:02:
                    7e:6e:0c:e7:d1:c1:90:42:ed:b4:35:63:c5:ab:6a:
                    8e:f0:00:c2:fa:93:0a:eb:b3:0f:20:79:ee:77:cc:
                    cb:63:33:6e:67:5f:71:99:fb:35:97:bb:4f:4f:27:
                    03:ea:d3:9e:99:99:34:e3:70:af:12:48:d2:d3:36:
                    2a:e0:f6:e8:21:7c:ab:ef:42:2c:67:f8:93:b4:9d:
                    e4:d4:32:83:b2:04:6e:62:07:24:64:38:90:66:02:
                    04:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:32:29:18:03:63:5A:88:65:A7:C7:01:22:DA:76:4E:56:53:2E:61
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/qzIpGANjWohlp8cBItp2TlZTLmE.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:3200::/40

    Signature Algorithm: sha256WithRSAEncryption
         88:f7:99:63:6a:69:b4:0e:4a:b3:5a:67:38:71:a5:2d:04:88:
         12:d4:e9:84:94:6e:f2:93:1b:8c:02:67:14:ea:23:ac:7d:f9:
         e5:d2:fd:6d:3b:9b:d4:f4:fd:60:a8:70:ff:66:07:7e:63:88:
         dc:2e:84:23:c9:dd:e6:2e:27:44:ca:8f:47:f2:98:7a:33:40:
         0c:1c:90:72:8f:6f:67:c6:4d:fb:95:17:c2:8b:45:89:53:3c:
         97:1c:f5:6d:2d:f0:7a:13:c2:d1:1d:1c:54:5f:51:b3:03:43:
         9f:e6:3f:e3:2f:83:e1:60:9e:06:7b:66:3b:90:de:37:9e:3a:
         5d:36:e7:03:39:ff:39:2f:1c:8f:e6:b7:af:cb:76:05:3b:d0:
         d3:81:a5:a0:95:d7:ed:c6:af:29:c2:3e:19:ba:cf:57:74:09:
         89:fd:92:d1:22:79:b2:f3:3d:50:2a:34:04:df:b8:bc:5e:73:
         b5:ec:56:ba:29:ca:5f:0a:f5:f5:69:8e:3f:61:63:85:b3:81:
         05:62:5c:b5:ba:f2:14:53:ad:0a:ac:50:ac:e7:51:02:1c:75:
         09:cb:2f:fc:e6:15:fc:28:3f:7f:23:39:2f:bf:6a:43:46:1f:
         44:2f:3a:23:a0:9e:b5:00:b6:92:4c:18:a1:5a:3d:45:b5:9a:
         86:48:61:06
-----BEGIN CERTIFICATE-----
MIIEwzCCA6ugAwIBAgICBp4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjAzMzEw
ODI2MTRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEFCMzIyOTE4MDM2MzVB
ODg2NUE3QzcwMTIyREE3NjRFNTY1MzJFNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDl0val2z5elbXb0vIRgMsIzKjpg3esLOKxxZLtPqj58an86mB0
tpj1lF1uSPAG+Kx++6dnPiXJM/zGL9ZJoJnvmkn0k54Ah6K7x95lOfT6sK7KcM7U
fPOAyqmmBZ5LjNl1wxhui8sxkdOrni9yU+AmE/Q1B5eX8XURVsUDROjc1Rv8jtOS
N5tyKB7UAu0sQTyawf0gsIpDwWoTwgvvL/7zbubnAn5uDOfRwZBC7bQ1Y8Wrao7w
AML6kwrrsw8gee53zMtjM25nX3GZ+zWXu09PJwPq056ZmTTjcK8SSNLTNirg9ugh
fKvvQixn+JO0neTUMoOyBG5iByRkOJBmAgR1AgMBAAGjggHfMIIB2zAdBgNVHQ4E
FgQUqzIpGANjWohlp8cBItp2TlZTLmEwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDEyOS9xeklwR0FOaldvaGxwOGNCSXRwMlRsWlRMbUUucm9h
MCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJAoAazIwDQYJKoZIhvcNAQEL
BQADggEBAIj3mWNqabQOSrNaZzhxpS0EiBLU6YSUbvKTG4wCZxTqI6x9+eXS/W07
m9T0/WCocP9mB35jiNwuhCPJ3eYuJ0TKj0fymHozQAwckHKPb2fGTfuVF8KLRYlT
PJcc9W0t8HoTwtEdHFRfUbMDQ5/mP+Mvg+FgngZ7ZjuQ3jeeOl025wM5/zkvHI/m
t6/LdgU70NOBpaCV1+3GrynCPhm6z1d0CYn9ktEiebLzPVAqNATfuLxec7XsVrop
yl8K9fVpjj9hY4WzgQViXLW68hRTrQqsUKznUQIcdQnLL/zmFfwoP38jOS+/akNG
H0QvOiOgnrUAtpJMGKFaPUW1moZIYQY=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:50 2026 by rpki-client