Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/sZGBwGIvz2Pul0BS35qDj7pDcU8.roa
File:                     sZGBwGIvz2Pul0BS35qDj7pDcU8.roa (raw, json)
Hash identifier:          jQ9ml3V/HH7KRvZu1MBvqIQR1vcldyeFoq3kK+tlyyI=
Subject key identifier:   B1:91:81:C0:62:2F:CF:63:EE:97:40:52:DF:9A:83:8F:BA:43:71:4F
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0698
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/sZGBwGIvz2Pul0BS35qDj7pDcU8.roa
Signing time:             Tue 31 Mar 2026 08:26:11 +0000
ROA not before:           Tue 31 Mar 2026 08:26:11 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:ba00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1688 (0x698)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:26:11 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B19181C0622FCF63EE974052DF9A838FBA43714F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4f:e5:bd:2a:41:63:95:36:3c:bd:e2:75:d3:
                    aa:6f:4f:56:0f:68:f6:cf:4e:7b:a0:9c:5b:31:cc:
                    18:d8:46:cf:0a:f1:29:fd:dc:de:65:c5:fe:b5:2a:
                    62:0c:3e:02:66:df:53:8a:3b:bd:46:a0:1a:b7:40:
                    b8:56:23:9b:ad:cc:bf:a3:9c:3f:3d:9c:ae:b0:4b:
                    33:73:94:ce:1d:a0:a2:43:09:77:80:ef:4d:cd:63:
                    71:8c:c8:f9:54:80:d9:3e:6b:a9:72:df:34:68:0d:
                    68:ec:99:49:59:3c:b1:e4:31:ee:63:9f:90:cf:44:
                    f4:04:6a:f7:0f:d2:85:f7:24:05:f3:5a:c2:76:9f:
                    66:a7:f3:2d:be:2e:78:4e:9a:ac:e6:dd:a6:4e:d9:
                    46:46:ca:af:5b:b8:f7:62:bb:53:ba:7f:9b:14:9b:
                    0a:12:b0:91:b2:b1:70:1e:a7:c5:67:1d:86:17:4b:
                    ce:b6:83:fe:4c:5f:e6:ce:9a:1a:eb:66:27:1a:25:
                    09:c1:b9:42:c7:5a:3c:74:cd:df:e1:3f:a6:7c:b6:
                    e2:38:75:be:af:c5:8e:11:dc:ae:93:90:e9:aa:65:
                    a4:c1:ce:44:68:81:44:75:80:09:df:02:9d:49:a2:
                    2f:46:c2:e5:c0:a0:b5:12:8c:df:c9:88:75:2f:2c:
                    b1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:91:81:C0:62:2F:CF:63:EE:97:40:52:DF:9A:83:8F:BA:43:71:4F
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/sZGBwGIvz2Pul0BS35qDj7pDcU8.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:ba00::/40

    Signature Algorithm: sha256WithRSAEncryption
         2f:89:41:54:7f:fd:a5:ee:e5:19:99:a4:c8:5e:3c:9e:e8:56:
         56:32:7f:2f:01:4d:be:ac:0a:f3:ae:6a:3c:02:d0:b0:9d:90:
         a4:ad:17:7f:db:29:b7:ea:3a:02:de:2a:f6:ba:86:1f:16:b3:
         32:45:1c:0e:1d:e2:ee:ae:46:54:10:43:f0:b9:23:e0:2a:97:
         7c:81:e1:e0:b2:94:4d:c6:75:56:fb:02:c8:b8:09:21:46:7b:
         95:a8:31:fe:a1:d4:a0:e9:5c:59:e2:07:90:c5:51:ea:2c:19:
         9e:d1:78:fc:29:19:b4:9b:72:06:35:52:6e:4c:d4:fc:e1:01:
         ae:30:55:1e:68:58:72:37:51:9f:ca:d6:cb:0b:f8:6a:40:3d:
         40:a0:d0:ac:2c:53:56:4e:53:ff:09:6a:e7:22:d8:b2:06:1c:
         79:54:a1:fc:ad:76:00:98:e8:62:e0:84:aa:5b:07:55:7b:3b:
         fb:43:b3:ed:5a:1a:4f:2b:3c:50:87:49:7b:0c:4c:65:6e:56:
         9b:7d:12:01:98:03:ce:a1:b5:ed:f4:98:c1:07:77:c2:d3:59:
         82:0d:9d:92:41:94:fa:ab:f7:67:70:a7:2c:78:6a:01:51:b1:
         d1:f0:7b:ea:9a:7c:f4:46:88:ba:ef:53:46:f0:d5:f5:07:e1:
         51:69:9e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:03 2026 by rpki-client