Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/xRYcT0KwArQ89RNBuqmUvAAMMt8.roa
File:                     xRYcT0KwArQ89RNBuqmUvAAMMt8.roa (raw, json)
Hash identifier:          q428uX5pd3N90qp7RdoV4IFGhxjtce4BG+2KZ8/IyWQ=
Subject key identifier:   C5:16:1C:4F:42:B0:02:B4:3C:F5:13:41:BA:A9:94:BC:00:0C:32:DF
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0702
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/xRYcT0KwArQ89RNBuqmUvAAMMt8.roa
Signing time:             Tue 31 Mar 2026 08:26:58 +0000
ROA not before:           Tue 31 Mar 2026 08:26:58 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:dd00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1794 (0x702)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:26:58 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C5161C4F42B002B43CF51341BAA994BC000C32DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:71:34:b7:9a:7a:e5:a0:96:3b:91:0d:e5:58:
                    4d:d1:10:2d:bd:79:04:d8:1f:6a:f3:07:88:39:66:
                    06:4e:cf:90:cd:55:11:20:c0:71:16:e0:7d:b3:4c:
                    04:5b:c2:3d:6c:0e:31:06:e1:f4:43:68:53:9a:af:
                    9e:fa:84:38:6f:5f:32:d3:28:fe:0b:7e:25:dc:19:
                    42:99:2c:d4:31:b4:e0:81:ba:6a:c2:5a:16:ec:58:
                    b6:09:f1:1d:fc:bf:f4:5e:a6:fe:89:35:72:0b:63:
                    96:30:cc:86:c0:aa:99:02:ae:1f:20:0a:b1:92:7a:
                    c5:0a:77:bb:1e:52:95:11:b2:95:bc:c7:3c:b8:29:
                    f5:2c:2d:8a:d3:eb:be:ab:b3:ce:99:db:19:a7:a8:
                    b4:6a:df:09:3e:d4:2b:e3:5e:20:58:00:a2:1e:62:
                    8a:3d:f0:d8:33:74:fd:4c:df:4b:a6:4f:c6:9e:49:
                    a7:5b:a3:08:04:de:85:a1:98:14:50:d9:f4:cb:95:
                    a7:5b:5c:cf:ff:20:9b:0d:ed:62:76:a8:6c:80:ea:
                    15:23:90:5c:80:0c:68:eb:c2:42:19:40:ae:e6:10:
                    43:f8:61:e9:69:88:a9:ca:3c:35:09:fd:30:93:e1:
                    4e:c2:a9:8b:e3:f6:7e:d1:b1:9a:64:28:b8:0c:30:
                    8a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:16:1C:4F:42:B0:02:B4:3C:F5:13:41:BA:A9:94:BC:00:0C:32:DF
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/xRYcT0KwArQ89RNBuqmUvAAMMt8.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:dd00::/40

    Signature Algorithm: sha256WithRSAEncryption
         ab:2a:2b:de:71:2f:31:4d:a0:41:c6:90:06:27:54:8e:fd:e7:
         88:03:94:35:ee:f7:1c:78:35:90:d2:14:f2:60:92:af:68:9a:
         f4:ae:48:57:c2:1b:0b:1a:92:f0:10:51:0e:cf:c7:6d:69:96:
         b5:b4:fd:a2:9c:e6:19:eb:c2:1a:dc:df:9a:39:04:5a:59:13:
         fc:81:bb:36:c9:14:38:f3:ac:b7:01:b2:65:c5:ea:fa:2e:86:
         0c:a7:e6:1a:1e:05:26:ea:71:65:d8:68:bd:23:a2:b4:4b:4f:
         93:eb:72:f0:25:7d:2a:ee:35:4e:9a:2c:d1:ab:e7:69:32:10:
         6b:4d:82:fc:68:f6:db:f7:60:48:02:6b:a1:90:9f:b0:c8:2b:
         72:94:e1:77:0b:98:fb:80:3d:3d:ac:ea:06:8c:d9:5e:4d:9c:
         8f:47:fc:19:9a:f4:08:2d:ec:a4:ce:b0:8e:40:d0:7e:c2:2d:
         93:bd:5d:b1:04:fc:e1:31:96:d4:3c:22:49:fe:6a:44:83:62:
         87:12:08:95:e3:37:e3:33:ab:1d:3b:15:70:95:90:51:af:d5:
         05:15:ee:21:12:5a:da:c6:85:54:3e:10:34:53:e3:90:50:0d:
         6a:48:0f:23:7b:60:92:6e:10:b0:a7:e7:e9:74:d0:5f:11:d0:
         fa:fe:dd:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:48 2026 by rpki-client