Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/u-khTosMk1sU5d6gp4s2lBDj4sw.roa
File:                     u-khTosMk1sU5d6gp4s2lBDj4sw.roa (raw, json)
Hash identifier:          SoKm+RQUhzeNMJF4iFoM8eSowX93N/GG40+bC1Zt1DY=
Subject key identifier:   BB:E9:21:4E:8B:0C:93:5B:14:E5:DE:A0:A7:8B:36:94:10:E3:E2:CC
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0744
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/u-khTosMk1sU5d6gp4s2lBDj4sw.roa
Signing time:             Tue 31 Mar 2026 08:27:32 +0000
ROA not before:           Tue 31 Mar 2026 08:27:32 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:5300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1860 (0x744)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:27:32 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=BBE9214E8B0C935B14E5DEA0A78B369410E3E2CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:36:67:f6:5c:f8:7b:f2:8c:b7:67:50:be:1a:
                    ab:d1:4d:42:51:2f:92:bc:bc:31:b4:ae:97:20:bd:
                    c2:1c:1c:01:a6:8a:44:13:d4:9a:34:a3:42:db:e8:
                    88:44:a3:53:cf:c9:15:18:cb:4e:99:37:4d:5d:54:
                    2f:5f:2b:dd:e1:43:d4:45:dd:f1:5e:d4:53:3b:0e:
                    11:31:14:37:3f:c0:83:1c:91:63:74:1f:3b:af:39:
                    ef:77:50:08:d4:f0:d3:76:19:45:ea:dc:14:b6:96:
                    08:bf:2d:1c:77:be:75:67:76:c9:99:c6:71:d9:e4:
                    de:4f:96:d7:e0:5e:d5:87:c3:a3:21:d7:92:af:59:
                    a5:0b:b5:6e:9d:12:fa:24:d6:7a:a0:56:67:91:4e:
                    c0:85:cd:d2:44:14:26:aa:da:2e:48:c2:88:a9:f6:
                    31:1d:dd:88:0c:e5:5a:86:d4:6a:8c:32:74:b6:a7:
                    cb:e8:83:2d:bf:f8:ef:e3:83:29:07:88:51:3c:bc:
                    db:6f:11:b9:1b:e0:37:db:82:b2:a8:08:ee:32:86:
                    fc:c7:5f:12:c7:7d:18:e5:52:b9:e7:06:66:59:4a:
                    1a:f8:b0:0e:80:07:75:10:a1:43:22:26:a2:68:56:
                    ba:d1:c4:70:5e:86:1b:0b:67:3d:80:6a:41:67:22:
                    a8:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:E9:21:4E:8B:0C:93:5B:14:E5:DE:A0:A7:8B:36:94:10:E3:E2:CC
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/u-khTosMk1sU5d6gp4s2lBDj4sw.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:5300::/40

    Signature Algorithm: sha256WithRSAEncryption
         84:85:42:5c:78:69:8a:e4:f5:dd:42:36:d6:29:27:e4:70:2b:
         d7:94:c6:82:0a:93:90:da:76:e6:ff:6c:24:d7:d9:82:cd:12:
         a3:61:4b:c4:3d:c3:15:cd:94:05:f8:c6:86:b6:47:87:4c:e8:
         6e:21:bb:81:c3:ff:4a:c7:db:d1:8b:d0:ae:71:6f:eb:56:9c:
         00:b0:2f:5b:94:a6:71:9e:1e:9e:08:94:c7:13:93:72:95:9e:
         dd:e1:c4:47:9d:d4:a8:95:38:30:04:61:02:51:b4:3c:01:86:
         22:82:0b:e2:fc:31:3c:cd:d2:fe:e1:7e:91:39:eb:35:7b:3a:
         14:1a:1f:06:63:82:d7:dd:d7:28:78:d9:63:87:26:d4:a7:c6:
         1d:ae:5d:1a:66:e6:88:4b:53:30:c0:3c:ef:2b:87:78:ac:42:
         a4:e6:f6:bc:93:a2:cb:0c:ac:ae:13:c8:0e:0a:49:7c:4e:b4:
         ff:8d:30:e4:82:a5:ba:36:05:5e:98:69:5e:d3:92:4e:64:ca:
         b0:83:b4:4f:12:14:a9:49:11:3c:77:89:20:a7:28:2d:cc:c7:
         40:a2:2d:81:12:de:d8:15:41:65:f2:a6:ef:f0:1d:8c:6e:b0:
         c6:58:f5:17:fc:e1:c1:12:4c:fb:be:99:a2:43:a3:1f:1c:fe:
         61:99:54:e0
-----BEGIN CERTIFICATE-----
MIIEwzCCA6ugAwIBAgICB0QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjAzMzEw
ODI3MzJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEJCRTkyMTRFOEIwQzkz
NUIxNEU1REVBMEE3OEIzNjk0MTBFM0UyQ0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCoNmf2XPh78oy3Z1C+GqvRTUJRL5K8vDG0rpcgvcIcHAGmikQT
1Jo0o0Lb6IhEo1PPyRUYy06ZN01dVC9fK93hQ9RF3fFe1FM7DhExFDc/wIMckWN0
HzuvOe93UAjU8NN2GUXq3BS2lgi/LRx3vnVndsmZxnHZ5N5PltfgXtWHw6Mh15Kv
WaULtW6dEvok1nqgVmeRTsCFzdJEFCaq2i5Iwoip9jEd3YgM5VqG1GqMMnS2p8vo
gy2/+O/jgykHiFE8vNtvEbkb4DfbgrKoCO4yhvzHXxLHfRjlUrnnBmZZShr4sA6A
B3UQoUMiJqJoVrrRxHBehhsLZz2AakFnIqhJAgMBAAGjggHfMIIB2zAdBgNVHQ4E
FgQUu+khTosMk1sU5d6gp4s2lBDj4swwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDEyOS91LWtoVG9zTWsxc1U1ZDZncDRzMmxCRGo0c3cucm9h
MCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJAoAa1MwDQYJKoZIhvcNAQEL
BQADggEBAISFQlx4aYrk9d1CNtYpJ+RwK9eUxoIKk5Dadub/bCTX2YLNEqNhS8Q9
wxXNlAX4xoa2R4dM6G4hu4HD/0rH29GL0K5xb+tWnACwL1uUpnGeHp4IlMcTk3KV
nt3hxEed1KiVODAEYQJRtDwBhiKCC+L8MTzN0v7hfpE56zV7OhQaHwZjgtfd1yh4
2WOHJtSnxh2uXRpm5ohLUzDAPO8rh3isQqTm9ryTossMrK4TyA4KSXxOtP+NMOSC
pbo2BV6YaV7Tkk5kyrCDtE8SFKlJETx3iSCnKC3Mx0CiLYES3tgVQWXypu/wHYxu
sMZY9Rf84cESTPu+maJDox8c/mGZVOA=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:08 2026 by rpki-client