Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/t2HY6XiV09t6HsHfBOiMjv0SzEs.roa
File:                     t2HY6XiV09t6HsHfBOiMjv0SzEs.roa (raw, json)
Hash identifier:          /ukA/qMC4Ch38VNWNo0BCNcujM9w06IpfvI1ufzZph8=
Subject key identifier:   B7:61:D8:E9:78:95:D3:DB:7A:1E:C1:DF:04:E8:8C:8E:FD:12:CC:4B
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       06B7
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/t2HY6XiV09t6HsHfBOiMjv0SzEs.roa
Signing time:             Tue 31 Mar 2026 08:26:25 +0000
ROA not before:           Tue 31 Mar 2026 08:26:25 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:5800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1719 (0x6b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:26:25 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B761D8E97895D3DB7A1EC1DF04E88C8EFD12CC4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0b:8c:e8:38:2a:5f:bb:ba:03:82:75:b4:aa:
                    6c:ce:c4:52:f5:c1:f7:3b:e6:97:c8:f3:62:eb:99:
                    d3:67:fd:98:5f:93:c5:53:97:21:3d:4d:a3:30:7e:
                    f7:8c:05:7a:aa:5c:2d:2f:e7:3c:8a:a8:ec:51:f8:
                    da:de:48:b5:58:91:5d:0c:6b:2e:e7:42:31:81:22:
                    4d:37:3f:ea:da:27:cf:32:8f:cd:c6:e2:d4:5d:33:
                    14:89:94:ff:0e:3c:df:ee:78:e3:99:96:81:1e:b9:
                    fc:15:88:38:4f:0e:a5:2a:a6:1b:73:d8:d3:4c:75:
                    03:ae:3b:a8:b2:37:4c:fd:ea:e5:3f:20:77:26:f3:
                    ac:29:c9:7f:0e:bd:15:90:ba:f3:8f:21:7b:08:7d:
                    ad:23:55:c4:50:b0:bc:de:ae:6e:3f:ec:ee:bb:d6:
                    62:64:1e:a1:ef:f2:ce:00:b4:31:6e:03:50:84:fd:
                    66:cf:3a:d4:d6:51:bc:d6:77:b5:cc:c5:8e:fb:a2:
                    3f:7a:44:28:16:37:62:2e:63:b4:5c:b3:52:24:6d:
                    29:9a:d0:3d:17:89:4c:71:f4:ec:40:d2:d4:9a:16:
                    cd:12:3b:e1:64:70:25:f2:a7:bf:f2:96:f9:d8:c6:
                    a5:70:64:ba:3e:6b:f5:9f:23:07:4c:cc:ee:71:1d:
                    3e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:61:D8:E9:78:95:D3:DB:7A:1E:C1:DF:04:E8:8C:8E:FD:12:CC:4B
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/t2HY6XiV09t6HsHfBOiMjv0SzEs.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:5800::/40

    Signature Algorithm: sha256WithRSAEncryption
         9f:14:12:f6:24:a4:5c:48:57:50:68:75:d4:b7:3a:1c:29:b7:
         0e:ab:17:52:b3:b9:fd:54:50:59:f0:da:11:1b:c5:fc:09:75:
         55:a0:5f:6c:5d:75:18:68:79:14:63:99:7a:90:d5:21:74:e7:
         a8:46:ea:2f:f6:a4:ac:a8:28:9b:77:9c:dc:85:03:91:12:9c:
         5e:c8:ec:8a:98:d4:84:b3:4f:8f:dc:eb:a9:14:49:a7:64:be:
         58:97:c2:47:b2:8c:ba:2e:ab:af:0f:93:d8:b2:fb:f8:a5:0c:
         73:46:c5:8e:e6:a4:76:2d:3f:db:bc:e2:fe:03:b6:ed:b2:43:
         15:74:b0:91:84:93:d5:06:d7:d9:88:88:4d:1a:ba:2d:10:78:
         49:46:5c:4c:ac:86:13:66:9e:30:39:30:cb:94:47:75:03:d1:
         60:fa:86:b1:0c:12:43:e6:ae:10:da:4c:f7:4f:1c:92:bc:ff:
         f6:e4:ea:3f:b4:dc:5c:95:39:42:08:d1:c9:93:20:d9:5c:4a:
         cc:36:91:be:4e:c4:0a:95:92:81:c2:1b:db:18:fd:19:bc:da:
         6a:19:c6:ef:a2:fa:e8:d4:a3:83:a1:ce:5b:b8:a7:2b:43:46:
         15:76:99:46:3b:f3:bd:57:9c:eb:5e:79:b9:c8:e4:09:0f:44:
         cd:91:26:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:28 2026 by rpki-client