Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/sFejDy8uXMEM_Re_aMs-cAF2NUQ.roa
File:                     sFejDy8uXMEM_Re_aMs-cAF2NUQ.roa (raw, json)
Hash identifier:          XKcTyIwoq6WazMtXF05vT7204oUD1FAGd+LlIKFMXz0=
Subject key identifier:   B0:57:A3:0F:2F:2E:5C:C1:0C:FD:17:BF:68:CB:3E:70:01:76:35:44
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       06B8
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/sFejDy8uXMEM_Re_aMs-cAF2NUQ.roa
Signing time:             Tue 31 Mar 2026 08:26:26 +0000
ROA not before:           Tue 31 Mar 2026 08:26:26 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:70:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1720 (0x6b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:26:26 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B057A30F2F2E5CC10CFD17BF68CB3E7001763544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2c:fd:a4:88:8d:53:ce:33:a3:43:7d:2d:c8:
                    81:89:d4:78:27:71:d5:b8:5e:f6:97:f5:cc:39:61:
                    89:9d:e8:58:97:6f:fd:8a:39:80:d6:69:55:0a:10:
                    78:01:aa:4e:dc:e3:f3:f9:0e:5b:3f:2c:ab:cd:10:
                    fc:f3:72:09:e6:2c:dd:f7:c1:57:84:92:94:ff:23:
                    66:71:35:00:f2:23:d3:7f:d5:44:ea:d6:5c:ba:95:
                    bb:90:c1:54:9d:e1:f9:f1:74:60:8d:1a:dc:89:af:
                    c1:1b:d4:4a:c9:d2:bf:ae:49:81:59:0e:6a:b8:96:
                    8a:b0:d3:b9:4e:de:5f:85:b9:2f:9b:68:b1:22:26:
                    77:0b:05:97:40:c1:7a:8e:c5:24:70:57:4c:ad:51:
                    11:cf:8e:6f:b1:a0:0e:8a:d7:28:8f:8b:fc:b2:34:
                    fa:78:83:5b:bf:ce:69:58:71:4c:66:6d:78:22:6d:
                    29:e3:28:04:cf:60:76:3f:71:fa:96:de:ab:f5:50:
                    13:ef:37:0c:be:a1:4b:a1:3d:0e:77:d8:10:ff:1e:
                    1d:09:6c:48:c2:e3:81:17:8c:22:ae:dd:9b:5e:1f:
                    71:a4:75:7a:7c:57:a3:5a:62:57:ed:55:a1:41:98:
                    c2:eb:97:4f:da:2d:12:13:a5:a7:d4:da:d3:96:20:
                    bf:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:57:A3:0F:2F:2E:5C:C1:0C:FD:17:BF:68:CB:3E:70:01:76:35:44
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/sFejDy8uXMEM_Re_aMs-cAF2NUQ.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:70:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:b1:5b:37:0e:a6:7d:74:18:38:2c:c3:b7:0f:e9:05:c0:b4:
         8a:aa:24:65:51:81:08:f7:5d:40:af:f4:03:33:a0:0f:10:ed:
         9f:13:0a:dc:52:13:1c:06:cc:5a:f4:7b:60:fa:d4:00:e0:61:
         91:01:34:d6:42:8b:ae:56:bd:6c:f2:1b:54:71:ad:b4:74:89:
         23:7d:3e:cf:4f:86:a9:7e:b1:7c:36:82:65:1a:c8:da:e0:e1:
         f2:4c:24:32:65:ff:0d:fb:ce:39:65:12:43:82:fe:d5:95:38:
         d7:4a:b7:31:c1:2b:8d:6f:90:a1:38:5e:6d:33:dc:a2:00:d3:
         c2:c9:dc:6f:dd:fc:44:79:bd:4c:c4:fe:83:3e:25:68:78:91:
         c7:d4:0e:8f:c3:97:49:2c:08:4d:ec:fe:80:55:e0:df:05:6f:
         a5:c6:8b:e5:8b:b8:4e:a5:cd:da:82:51:c7:37:a0:c3:10:2a:
         bb:1c:5b:0e:8e:d4:87:73:22:ff:cb:c7:6e:02:27:de:1c:9a:
         77:63:7f:38:83:d5:f5:c6:3e:6c:cd:84:a7:71:72:e2:17:8e:
         b5:26:27:82:dd:e2:8e:6b:17:28:9d:13:0c:b4:12:8e:ed:46:
         78:4f:a7:ac:ba:31:6c:5d:c5:b1:7c:25:6e:58:5d:51:f0:40:
         a1:e6:6c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:01 2026 by rpki-client