Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/sKEWO7Ukib5KOytVWFqRUkVGy9E.roa
File:                     sKEWO7Ukib5KOytVWFqRUkVGy9E.roa (raw, json)
Hash identifier:          KejJr21E+fusUfgcinWJdgT1ahlbemoTGFQkrdWUlhw=
Subject key identifier:   B0:A1:16:3B:B5:24:89:BE:4A:3B:2B:55:58:5A:91:52:45:46:CB:D1
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       06F7
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/sKEWO7Ukib5KOytVWFqRUkVGy9E.roa
Signing time:             Tue 31 Mar 2026 08:26:53 +0000
ROA not before:           Tue 31 Mar 2026 08:26:53 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:6300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1783 (0x6f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:26:53 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B0A1163BB52489BE4A3B2B55585A91524546CBD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:18:f5:c2:2b:ad:fb:eb:3a:d7:eb:85:85:93:
                    25:03:83:d2:37:30:18:2b:dd:4a:7e:d9:b8:6f:b2:
                    a0:9e:96:7c:64:45:29:b6:87:ad:5c:45:68:6a:4a:
                    af:7d:4e:a2:52:b6:99:05:27:76:3a:cb:49:5e:d2:
                    cf:e9:8b:32:4a:41:14:f8:46:72:b9:d9:a0:a4:8a:
                    58:64:d7:92:28:f8:26:21:77:10:c2:3a:50:a4:2e:
                    6c:2a:0e:60:e2:96:86:5e:7d:e3:6a:57:28:51:77:
                    d2:bd:b9:2d:31:00:1f:63:ee:db:ab:8c:9f:d2:58:
                    cb:02:eb:ca:ab:31:23:95:92:24:44:31:03:1d:39:
                    a3:6e:5e:97:31:bc:57:08:0e:9d:ea:89:2e:53:d6:
                    71:37:64:21:75:6b:e3:80:41:76:92:2d:74:e8:a6:
                    3a:51:8f:da:15:e3:47:96:bb:05:10:f0:67:5c:13:
                    83:00:af:6e:0b:ea:33:f6:6d:6f:69:9d:06:21:8c:
                    88:94:40:95:8b:71:ba:33:9e:70:58:8f:05:0a:17:
                    11:53:06:e3:f1:7d:9d:4a:bf:57:15:8f:b4:7e:60:
                    c2:ad:14:a6:7e:4e:fa:f0:52:55:cc:4f:ca:a3:48:
                    d0:c5:42:21:97:1d:5f:48:da:1a:5a:46:94:22:a7:
                    49:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:A1:16:3B:B5:24:89:BE:4A:3B:2B:55:58:5A:91:52:45:46:CB:D1
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/sKEWO7Ukib5KOytVWFqRUkVGy9E.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:6300::/40

    Signature Algorithm: sha256WithRSAEncryption
         74:c4:11:0c:76:ac:8a:85:23:f8:f3:db:ca:bd:59:89:a5:37:
         8f:c9:e3:76:d5:72:d7:76:1b:f6:2e:5e:b8:6b:4b:a1:2f:1b:
         9f:b6:c2:35:e3:a2:ae:85:44:bd:f5:8e:4f:fc:7d:07:e1:68:
         1a:53:bf:b0:1d:06:dc:2d:66:29:1c:f1:b9:5a:54:a6:07:73:
         f8:16:5d:80:0d:bb:bf:63:87:0b:97:8e:8d:10:4e:93:87:2c:
         1c:e7:c6:70:ae:9f:3a:56:71:ef:0a:cf:f9:68:40:a8:46:d5:
         53:e7:9f:da:d7:7b:a9:2f:30:ca:7f:ae:f1:ca:5d:ef:dd:b9:
         9e:c4:4c:7c:d5:c8:34:76:d5:74:7f:a7:04:8e:d3:a1:41:81:
         ad:a9:55:a0:6b:ac:2d:15:9a:70:6c:5b:7e:1f:3f:69:48:d3:
         fa:9f:84:19:15:89:f9:e3:46:40:b7:34:f6:6d:76:e5:1f:ee:
         ea:b7:45:af:1a:7b:d3:62:cb:1c:0f:94:db:86:6e:ba:4b:04:
         e1:de:16:b7:59:4d:e4:e1:8a:ec:b0:95:52:e7:10:26:7a:e4:
         b2:ad:12:d9:ca:57:e1:64:03:a0:37:b9:4c:5f:61:0c:92:ec:
         6f:68:cd:4f:85:13:aa:ef:6f:0f:f1:3c:ad:61:fa:ea:ed:cc:
         41:18:66:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:15 2026 by rpki-client