Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/smz31fKmQ7yNhCJX48KDMbBYnnE.roa
File:                     smz31fKmQ7yNhCJX48KDMbBYnnE.roa (raw, json)
Hash identifier:          p+qnsmfO6PLkbQMcIPg9uV20MQNas2ZgTee33ejtnD0=
Subject key identifier:   B2:6C:F7:D5:F2:A6:43:BC:8D:84:22:57:E3:C2:83:31:B0:58:9E:71
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       06DD
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/smz31fKmQ7yNhCJX48KDMbBYnnE.roa
Signing time:             Tue 31 Mar 2026 08:26:42 +0000
ROA not before:           Tue 31 Mar 2026 08:26:42 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:8700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1757 (0x6dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:26:42 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B26CF7D5F2A643BC8D842257E3C28331B0589E71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3f:e2:65:71:83:5e:ef:14:6e:50:8a:f7:0c:
                    b6:ff:c8:4f:f1:0e:7d:ac:72:3b:4d:ed:32:48:bc:
                    22:da:54:39:c3:e2:23:47:37:a4:c8:79:41:99:a5:
                    0f:da:a8:7b:48:c5:87:b8:68:ef:f7:37:65:b5:4a:
                    10:2a:2c:5a:2b:36:f4:36:88:e4:2c:97:d2:81:86:
                    b6:e2:b2:53:58:37:1c:3c:6c:46:85:35:f7:0f:6d:
                    7b:c0:f1:96:ef:0e:49:61:3f:28:9c:f3:33:ad:21:
                    ad:6c:5e:96:10:a3:95:cb:db:d3:c8:c9:30:08:47:
                    68:d1:94:e2:89:13:11:48:0d:cc:77:d2:db:25:2c:
                    38:95:5f:9a:3e:c2:7e:ec:40:fc:f3:f1:7f:f8:49:
                    60:09:f1:6d:26:97:04:5b:c2:fe:0c:ae:89:6e:75:
                    ce:e9:ec:ce:dd:53:fc:51:b1:39:6c:0c:8f:17:f9:
                    0f:17:ac:ee:16:fc:cc:c2:16:14:10:ea:01:a6:06:
                    23:43:af:52:01:65:b3:09:55:1d:8a:d7:93:78:21:
                    05:3d:c5:01:d9:86:9b:1a:b2:ac:e6:e4:3a:8e:77:
                    7b:43:c5:e4:1c:63:dd:e6:14:df:5b:3b:e7:de:b4:
                    85:29:3e:23:8a:14:90:64:8b:04:96:12:9b:57:7d:
                    1a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:6C:F7:D5:F2:A6:43:BC:8D:84:22:57:E3:C2:83:31:B0:58:9E:71
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/smz31fKmQ7yNhCJX48KDMbBYnnE.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:8700::/40

    Signature Algorithm: sha256WithRSAEncryption
         19:c3:2e:a4:b2:cc:ab:35:c6:23:2a:15:b8:01:a5:84:b2:45:
         cc:87:dd:2a:07:e6:6d:c1:25:ac:69:a4:5c:14:99:48:16:80:
         ff:7b:38:1a:5c:46:36:91:21:dd:47:e5:96:04:38:ea:c2:fb:
         b3:94:9d:64:dd:c7:53:07:f6:05:83:62:51:25:69:d3:e0:11:
         4e:ac:a9:2d:cc:20:aa:7a:3a:40:b7:81:0d:c4:26:18:ea:a9:
         91:31:07:46:a9:6f:b4:c9:c3:53:60:29:85:da:19:24:83:ff:
         c4:7e:0c:62:5a:f2:d2:4b:f6:b5:fb:4f:a3:45:3b:33:26:55:
         c4:c0:80:7f:fa:c1:3e:dc:31:75:b9:96:87:96:68:6a:43:cf:
         66:65:18:df:65:ad:cb:a9:8b:73:6e:61:bf:89:97:0a:19:9c:
         35:58:34:9e:ea:09:c9:43:a0:d9:6e:ec:d8:0f:19:f2:51:e6:
         4d:13:19:a3:b6:22:83:36:46:8f:75:b4:d8:6f:29:1e:c8:fc:
         e2:00:9b:d2:3e:06:90:de:3f:88:29:f9:af:49:f3:7a:66:d4:
         0a:7d:39:31:6d:70:25:1b:25:3a:5a:21:7e:5c:3c:b3:36:f9:
         97:bc:f5:5f:9d:c7:a4:69:a1:15:ee:7f:f0:88:8d:aa:8b:3a:
         57:6f:4e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:25 2026 by rpki-client