Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/vN52aBDbTbpTm_8EsGK77UGSLQ4.roa
File:                     vN52aBDbTbpTm_8EsGK77UGSLQ4.roa (raw, json)
Hash identifier:          iVtuxDpIbd2vele5992MvVBprGLHW4prQkqk7hN8b3Y=
Subject key identifier:   BC:DE:76:68:10:DB:4D:BA:53:9B:FF:04:B0:62:BB:ED:41:92:2D:0E
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       06A9
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/vN52aBDbTbpTm_8EsGK77UGSLQ4.roa
Signing time:             Tue 31 Mar 2026 08:26:18 +0000
ROA not before:           Tue 31 Mar 2026 08:26:18 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:f400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1705 (0x6a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:26:18 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=BCDE766810DB4DBA539BFF04B062BBED41922D0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:6f:12:eb:3d:eb:20:75:89:2e:c6:d6:43:ed:
                    e2:92:74:b9:93:ee:da:5b:19:2d:4b:64:85:1f:5b:
                    b6:46:68:c1:33:c5:aa:d9:36:01:0a:43:0f:6b:8d:
                    6a:d0:c7:32:29:f4:a3:0d:fd:b4:1d:78:e4:08:7f:
                    d3:83:81:7c:31:40:f6:29:08:e7:64:b9:3f:11:c9:
                    ca:3b:71:81:b3:f7:a2:de:4b:c9:4c:04:aa:98:12:
                    7a:b2:36:85:07:a7:d0:b4:98:f6:3e:cc:d3:3d:7e:
                    81:73:ce:63:fd:ab:91:50:a2:5d:29:a9:85:cf:2c:
                    5b:cf:3a:43:ba:dc:e4:c9:b9:70:dc:5b:1b:18:19:
                    ce:0e:fa:a5:d3:b1:97:a6:fb:b5:f4:a7:c4:5f:1b:
                    05:60:d3:92:e7:16:59:55:51:2d:b4:5f:94:68:f6:
                    29:60:a3:f8:1a:31:8e:0d:f2:ae:ea:e9:81:d6:60:
                    d0:58:00:37:30:37:7d:b5:63:a0:3c:da:15:da:d3:
                    66:12:18:a6:b8:0c:c1:47:af:c8:b5:c8:0a:01:b3:
                    b5:1a:e5:54:fd:f4:59:3a:2a:6c:31:74:32:89:1c:
                    71:73:a6:93:1f:d0:b9:60:54:cf:c6:35:b2:58:fd:
                    ee:99:e6:ab:fb:8e:c7:5e:2d:5b:17:83:3d:f2:7b:
                    58:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:DE:76:68:10:DB:4D:BA:53:9B:FF:04:B0:62:BB:ED:41:92:2D:0E
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/vN52aBDbTbpTm_8EsGK77UGSLQ4.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:f400::/40

    Signature Algorithm: sha256WithRSAEncryption
         c3:28:5e:e2:0b:de:83:d8:2f:6e:40:42:b2:5c:19:fc:2f:0d:
         77:8d:2a:a2:31:07:df:ea:fa:b1:98:6c:83:2e:14:49:d5:30:
         9f:20:93:15:3c:4d:53:b7:4b:1d:f3:6d:99:b4:9d:76:ab:e9:
         72:66:08:37:ae:e0:01:ee:f7:f5:1d:23:09:2b:70:00:9f:d1:
         be:b2:15:b5:13:5d:39:a9:35:c7:ac:80:e7:7c:f3:c5:62:65:
         98:ab:41:93:8f:63:66:38:a0:0f:34:6d:54:0a:57:c3:bc:80:
         55:aa:b0:40:ef:be:b9:4d:c8:3a:49:be:c0:52:29:10:9b:e1:
         e2:06:1d:1e:95:0d:d0:d7:c9:9c:98:93:64:04:09:be:6e:be:
         d6:59:85:ee:b6:32:40:39:cd:e9:72:89:fe:87:45:ea:16:08:
         dc:e3:02:86:6d:4c:93:56:6e:8c:e6:d3:6f:7c:6a:5d:09:1d:
         5b:3f:38:c2:cc:f7:61:e2:9d:e7:44:89:4d:86:b8:88:20:f4:
         72:bc:c0:e6:85:99:69:77:d6:98:14:0a:ea:18:aa:8f:be:7e:
         87:b2:e8:b2:e4:9a:4e:28:11:5f:22:a9:1b:13:95:7a:03:61:
         be:68:16:ad:3e:09:aa:7c:c9:b9:aa:a6:5d:88:5c:7e:2b:d8:
         a1:4b:d4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:30 2026 by rpki-client