Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/r5Y3xjhM4f0jRysG0fZ0dLiLPLY.roa
File:                     r5Y3xjhM4f0jRysG0fZ0dLiLPLY.roa (raw, json)
Hash identifier:          wJgCVYhd3+6QzXqbkydes8RGdrWuRc1fZ5XfQTg4jp8=
Subject key identifier:   AF:96:37:C6:38:4C:E1:FD:23:47:2B:06:D1:F6:74:74:B8:8B:3C:B6
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       065C
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/r5Y3xjhM4f0jRysG0fZ0dLiLPLY.roa
Signing time:             Tue 31 Mar 2026 08:25:40 +0000
ROA not before:           Tue 31 Mar 2026 08:25:40 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1628 (0x65c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:25:40 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=AF9637C6384CE1FD23472B06D1F67474B88B3CB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ab:ee:59:ad:ca:46:d7:bb:3c:55:f9:cd:d2:
                    a0:4c:68:53:c1:eb:a6:10:4e:ac:38:58:39:a1:8f:
                    32:00:08:be:f8:97:cb:5d:d1:3b:b8:22:d5:f8:d7:
                    57:74:0c:7d:10:52:cf:be:6e:23:ea:f8:50:df:f9:
                    73:3f:69:a2:c5:7d:d9:29:86:11:4a:ad:55:44:76:
                    80:03:6b:ac:f1:d8:7c:a5:a2:e6:f0:94:6b:3d:33:
                    c9:25:b9:18:f6:40:eb:6c:0c:bf:45:08:c2:47:99:
                    ef:36:7e:c1:83:07:30:47:5f:e8:c5:bc:2a:20:61:
                    26:89:4b:01:24:d6:5a:5b:99:f5:91:55:88:8d:c5:
                    01:70:c7:72:46:2e:92:3e:b6:88:fc:06:bd:7c:ac:
                    6c:ce:0b:e9:2e:2d:13:ba:77:1d:c7:23:0c:bd:aa:
                    2a:20:1a:eb:c9:82:1b:72:dd:06:23:21:cc:67:a9:
                    80:fd:f7:67:33:5b:62:d9:9a:f0:2a:72:2c:d3:cc:
                    34:a8:e7:0d:a3:ed:e3:db:de:cb:a8:71:15:08:d8:
                    25:ff:54:05:1e:5c:42:74:00:a7:d8:82:2b:fe:6d:
                    02:bc:71:a2:24:98:f0:bb:80:2a:3c:cf:6b:34:aa:
                    01:da:dd:9f:82:b0:e1:c2:66:23:ac:ee:ef:46:9f:
                    73:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:96:37:C6:38:4C:E1:FD:23:47:2B:06:D1:F6:74:74:B8:8B:3C:B6
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/r5Y3xjhM4f0jRysG0fZ0dLiLPLY.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         46:06:98:d5:01:56:50:71:f0:22:a6:c1:cc:2e:db:1f:05:cc:
         59:04:55:db:c5:74:c3:1c:50:1d:f8:da:37:7c:25:75:ec:12:
         1b:ee:4a:d2:5c:fa:e4:f3:eb:68:e0:6e:61:31:99:c5:58:c7:
         3c:fe:83:fa:8a:cb:36:77:96:e8:24:11:71:39:1a:cd:5b:9b:
         e9:7d:ed:80:7d:c6:a9:48:8d:5b:1f:e2:cd:5e:9d:92:e8:31:
         6c:b1:93:57:08:45:30:d9:5a:00:b7:dc:95:e8:01:b5:0f:35:
         79:71:f7:c5:44:49:81:02:56:d6:00:b0:ba:1e:27:ed:e1:7a:
         66:63:35:38:fe:a4:c6:04:00:d9:bb:16:32:59:b9:98:5a:5a:
         51:74:cd:db:36:d2:a2:a6:29:ae:19:db:12:d6:b2:83:66:9b:
         2c:1a:3c:20:bb:e5:d1:13:9a:98:13:78:32:27:0a:7f:34:f2:
         ec:a4:07:9c:b1:20:6c:af:96:58:16:10:75:8e:55:bd:9f:81:
         be:66:f7:03:5b:dc:52:5c:9d:b7:68:d3:9c:66:73:69:2e:bc:
         a3:8d:37:fb:02:98:66:95:24:a0:e6:8d:99:5c:d4:e2:51:ac:
         af:1c:89:bd:e9:86:39:1e:b2:2a:6e:ec:17:d1:3f:58:6a:c8:
         2e:40:b2:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 22:24:07 2026 by rpki-client