Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/qzPb1PZASIpQzs9f4_3RXpXQtzg.roa
File:                     qzPb1PZASIpQzs9f4_3RXpXQtzg.roa (raw, json)
Hash identifier:          PnRSq33goRz7rrWP928AMiUisEoUWLAXJ8/Q4exDPro=
Subject key identifier:   AB:33:DB:D4:F6:40:48:8A:50:CE:CF:5F:E3:FD:D1:5E:95:D0:B7:38
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0696
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/qzPb1PZASIpQzs9f4_3RXpXQtzg.roa
Signing time:             Tue 31 Mar 2026 08:26:10 +0000
ROA not before:           Tue 31 Mar 2026 08:26:10 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:7700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1686 (0x696)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:26:10 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=AB33DBD4F640488A50CECF5FE3FDD15E95D0B738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:93:ba:26:34:33:9d:18:22:3e:ca:5f:52:1e:
                    2f:dc:71:45:f5:a7:8e:31:53:7f:67:b9:f5:2d:8e:
                    53:9f:33:ca:3d:14:25:2f:7d:63:f6:c9:9d:73:07:
                    92:34:19:11:22:d2:04:c6:3b:cb:be:c8:0a:93:b8:
                    47:de:29:98:c6:66:61:cf:3b:7c:4b:c8:22:46:79:
                    52:14:db:6f:40:14:4d:0e:26:4c:f4:2d:66:95:c3:
                    ed:a6:7a:17:d4:c3:33:87:0c:66:55:a9:62:3a:d4:
                    ab:40:65:72:02:2b:87:8c:8a:66:b0:1b:02:63:93:
                    62:a2:d9:94:19:c2:63:bd:3a:12:ce:57:73:5b:a1:
                    28:29:f4:a5:31:8e:a3:82:77:2d:7a:12:e9:28:cc:
                    82:4b:6e:2e:44:4e:0b:76:54:52:1f:5f:78:00:73:
                    7e:6c:31:ee:a5:eb:59:c4:35:d9:a8:b4:c5:d5:b5:
                    a0:19:d6:9c:e7:d9:41:6f:e8:4b:09:c6:25:06:b4:
                    9f:cd:4e:09:2e:72:79:7d:b9:22:e7:50:38:cf:bb:
                    8a:d1:b1:05:30:05:02:15:88:df:0a:22:6e:7b:87:
                    fa:18:f7:e1:b5:a6:02:a5:c3:f0:a1:a4:8e:41:6a:
                    c2:d0:08:da:46:da:65:09:d9:4e:94:13:70:49:f1:
                    d8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:33:DB:D4:F6:40:48:8A:50:CE:CF:5F:E3:FD:D1:5E:95:D0:B7:38
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/qzPb1PZASIpQzs9f4_3RXpXQtzg.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:7700::/40

    Signature Algorithm: sha256WithRSAEncryption
         a0:43:e0:35:91:ec:c0:df:21:a9:d6:eb:62:d3:18:bf:28:4b:
         b4:6d:8d:6a:ea:7f:55:af:5f:37:40:1a:82:c8:c8:93:cd:b6:
         df:08:0b:ad:78:2a:14:09:25:97:a0:23:58:44:b6:a2:b6:4c:
         c5:dd:4b:97:6d:6b:ca:16:6f:01:2d:64:ca:5d:b9:48:2d:44:
         09:32:c3:1a:52:7d:19:b8:2e:d1:9b:7a:2e:aa:a8:f0:b8:b4:
         2e:11:b9:d7:8f:c2:4c:dc:de:f9:b0:bc:a3:e9:8c:ff:3c:66:
         d3:c1:4b:2d:7a:3c:c2:ce:b5:1b:38:6d:20:f3:6c:2e:69:82:
         36:a8:80:5b:76:a8:30:3d:47:47:b4:09:fb:1c:62:cc:e6:2d:
         25:ef:47:31:82:17:ba:db:bd:84:18:82:2c:cb:38:a6:b7:4c:
         5d:3d:fc:1c:f8:33:9c:cd:70:cd:af:85:b6:2b:bd:10:92:da:
         23:53:3f:1b:10:18:06:cc:43:3e:c5:e0:f8:99:20:e6:32:fb:
         80:66:a1:33:49:b6:15:57:34:d5:96:9a:34:3c:02:a7:dd:81:
         d8:c5:0f:7a:d6:6a:23:b7:a8:8b:1d:25:72:62:c1:56:a5:de:
         29:ae:48:79:8b:60:d9:16:44:cd:3f:c8:a1:7e:9a:c1:7e:ab:
         f9:dd:3a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:16 2026 by rpki-client