Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/v_BZsQFDc7ZN8E7gAMYyAUYXc2U.roa
File:                     v_BZsQFDc7ZN8E7gAMYyAUYXc2U.roa (raw, json)
Hash identifier:          y1R5xEU4MCi99VbFAUyIjyOBO45Su3G6sIi7MPu1Xe0=
Subject key identifier:   BF:F0:59:B1:01:43:73:B6:4D:F0:4E:E0:00:C6:32:01:46:17:73:65
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       071D
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/v_BZsQFDc7ZN8E7gAMYyAUYXc2U.roa
Signing time:             Tue 31 Mar 2026 08:27:13 +0000
ROA not before:           Tue 31 Mar 2026 08:27:13 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:da00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1821 (0x71d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:27:13 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=BFF059B1014373B64DF04EE000C6320146177365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:95:a4:1c:77:27:19:41:d4:fc:6c:87:89:64:
                    0b:43:60:08:28:69:3b:2c:90:8b:26:61:4f:d8:00:
                    29:fa:18:9d:5d:74:e6:95:76:6f:fd:87:93:57:be:
                    ba:b0:86:9d:3f:77:8a:5f:5f:aa:e4:39:29:7a:55:
                    d3:1d:18:fd:d7:a3:41:bc:e6:d6:e5:a8:cb:e5:a7:
                    c8:fd:fc:93:68:76:1d:d9:e7:f2:03:a5:2c:f4:4f:
                    97:50:2f:cc:e8:16:0d:75:1e:08:c3:f0:62:d4:c0:
                    f6:3f:e5:c7:42:e2:03:d8:1c:59:41:2e:39:31:86:
                    e5:4d:69:d7:17:b1:f3:8a:52:b8:92:85:91:de:d6:
                    6c:5e:fc:93:e0:4c:9d:0c:d6:f8:d6:6e:13:d9:e0:
                    8c:78:0d:6e:18:2e:ad:27:5e:cd:41:1d:a9:b3:bb:
                    9c:fc:6c:57:e6:ed:aa:63:e4:fa:79:74:8b:41:c6:
                    f4:06:66:34:a1:3e:be:2e:78:65:4a:93:7e:d0:32:
                    33:9c:40:f4:04:63:81:3b:c6:78:d2:a7:99:88:92:
                    ce:8e:4b:fe:2f:c5:6c:3a:11:73:8d:da:78:62:e6:
                    ab:94:c0:38:fa:e3:43:02:ba:af:4c:8c:94:c8:df:
                    62:7a:b3:1e:98:37:80:78:06:48:88:2f:bf:71:69:
                    2e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:F0:59:B1:01:43:73:B6:4D:F0:4E:E0:00:C6:32:01:46:17:73:65
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/v_BZsQFDc7ZN8E7gAMYyAUYXc2U.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:da00::/40

    Signature Algorithm: sha256WithRSAEncryption
         3e:2e:4a:32:c4:72:6e:3b:24:2b:f5:6a:ec:68:d7:f5:6c:a2:
         2c:71:62:38:21:fd:43:c7:7b:09:aa:de:21:66:8f:81:75:56:
         e0:d0:1b:e0:d8:aa:6f:cc:2b:d3:39:bc:02:cd:3a:c9:c8:a5:
         49:d3:14:7d:6b:8c:65:58:4a:a0:bc:83:62:3b:42:37:a4:5a:
         01:ea:a4:7a:d5:38:8b:df:e0:1d:f3:a7:e1:91:c3:4a:ea:73:
         0f:f3:33:c8:ba:94:c5:97:cf:fa:70:34:c4:ca:f6:99:92:20:
         eb:4b:f0:fd:b8:1e:ff:49:a7:6a:2b:48:fd:50:14:a5:03:c1:
         ca:a2:54:c0:9d:cb:31:ab:ba:f3:36:9b:af:c4:99:3b:c3:7f:
         38:64:31:60:b2:18:f6:77:36:2c:e8:b4:72:5c:ba:90:88:87:
         fe:61:32:bb:24:d7:a3:52:48:e6:de:39:f6:ec:9b:f9:7c:4f:
         67:25:73:7e:ae:ef:32:32:b6:52:53:d2:e3:ef:b0:2f:9b:2a:
         e5:84:d8:df:12:8a:64:ea:3b:00:54:ac:37:ef:11:48:80:f4:
         3b:17:02:04:d2:55:ad:ed:1b:2b:b6:07:97:40:cb:f5:83:19:
         5b:f4:b5:c5:8e:da:c4:3c:05:e9:0b:51:04:7e:1a:4b:86:03:
         e0:2e:f7:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 21:07:02 2026 by rpki-client