Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/z-zPrn8kSjgELKIqGhOz0gsZ60Y.roa
File:                     z-zPrn8kSjgELKIqGhOz0gsZ60Y.roa (raw, json)
Hash identifier:          RZ4mJ2CwzsuaH3Dmfp2mRx/7UyUxJcm/YTQGF7jvDrI=
Subject key identifier:   CF:EC:CF:AE:7F:24:4A:38:04:2C:A2:2A:1A:13:B3:D2:0B:19:EB:46
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0707
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/z-zPrn8kSjgELKIqGhOz0gsZ60Y.roa
Signing time:             Tue 31 Mar 2026 08:27:01 +0000
ROA not before:           Tue 31 Mar 2026 08:27:01 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:fb00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1799 (0x707)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:27:01 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=CFECCFAE7F244A38042CA22A1A13B3D20B19EB46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:cf:75:cc:f1:3b:ae:87:29:3b:db:41:79:b0:
                    09:2f:72:26:fd:d5:b3:db:43:44:1a:65:b7:80:12:
                    3d:bf:fe:81:f2:ec:1e:63:b6:8d:30:33:01:51:c1:
                    2f:f4:6f:f7:13:91:a7:ec:92:2a:3d:cb:0d:58:0e:
                    7d:26:d3:75:b3:7e:5c:e2:ef:e6:28:68:61:72:2c:
                    7d:d3:e3:9e:d0:7e:a9:aa:d3:2b:f3:c7:21:ca:c3:
                    54:49:91:f8:ac:22:47:12:ac:47:0e:ea:a7:84:a4:
                    b2:18:51:58:4d:9e:34:ec:93:4c:24:0f:e0:2e:fc:
                    4d:e5:0e:d9:c6:a1:1b:3f:57:61:e2:45:15:0f:79:
                    10:85:99:85:b5:b1:84:19:5f:3f:99:48:90:3f:90:
                    60:37:f2:2c:ed:52:6e:12:56:a8:0a:b3:5f:c4:75:
                    4e:b9:e9:cc:de:17:ef:3f:d3:c0:17:84:9d:9f:ff:
                    f8:99:6f:4e:fd:86:7f:3a:96:29:d8:3d:1b:45:e4:
                    f3:c4:e3:1d:54:1f:e8:2a:a7:ab:b8:b4:6a:b9:3b:
                    1d:45:d6:3d:b2:8c:cb:5f:97:bb:ce:22:60:2b:a0:
                    34:f0:ee:d2:9b:a1:cc:6b:31:81:0d:df:b7:dc:e4:
                    d1:ed:b9:bb:f5:1d:ff:7b:15:82:15:cf:66:80:bb:
                    35:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:EC:CF:AE:7F:24:4A:38:04:2C:A2:2A:1A:13:B3:D2:0B:19:EB:46
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/z-zPrn8kSjgELKIqGhOz0gsZ60Y.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:fb00::/40

    Signature Algorithm: sha256WithRSAEncryption
         54:6a:d8:a0:90:6c:07:64:62:d8:83:c2:a8:24:dd:af:80:0d:
         90:5f:ab:fd:d8:81:b8:a9:13:7d:df:5e:2f:9a:26:c1:76:83:
         6e:b0:7d:c9:16:e1:7b:eb:9c:09:c3:83:86:4f:46:d1:80:49:
         84:42:ab:cf:be:ea:2c:53:c8:a0:86:3c:2c:37:b7:86:0f:e7:
         ba:6d:09:16:9f:81:c2:f9:2e:5e:79:56:75:de:f5:63:36:bf:
         4e:dc:57:59:44:af:05:12:a3:18:42:c3:7a:9b:ce:b7:2a:3e:
         4a:9d:66:33:1f:fa:35:e1:5f:61:77:21:7d:5d:1c:f4:66:bb:
         52:88:01:d6:c3:93:2b:7c:27:2e:a6:5f:b3:47:d6:3b:13:62:
         56:53:1a:43:c0:ae:03:26:be:2a:78:cd:c8:de:39:77:9c:59:
         77:fd:f2:3e:56:28:ff:ef:33:82:c3:7c:91:64:6c:bd:7a:d5:
         b7:f3:c1:92:78:fc:90:2e:38:52:0b:18:65:22:6e:a9:88:fb:
         ad:0c:6c:53:78:4b:49:c5:10:30:70:4f:b1:b0:4a:64:4d:62:
         b1:74:64:50:62:10:cb:6d:09:4e:d5:27:1d:27:9a:b6:24:41:
         7b:46:d1:06:d4:75:fd:17:30:fb:b4:d8:ea:39:29:a9:6c:af:
         8b:3f:20:25
-----BEGIN CERTIFICATE-----
MIIEwzCCA6ugAwIBAgICBwcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjAzMzEw
ODI3MDFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKENGRUNDRkFFN0YyNDRB
MzgwNDJDQTIyQTFBMTNCM0QyMEIxOUVCNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDOz3XM8Tuuhyk720F5sAkvcib91bPbQ0QaZbeAEj2//oHy7B5j
to0wMwFRwS/0b/cTkafskio9yw1YDn0m03Wzflzi7+YoaGFyLH3T457Qfqmq0yvz
xyHKw1RJkfisIkcSrEcO6qeEpLIYUVhNnjTsk0wkD+Au/E3lDtnGoRs/V2HiRRUP
eRCFmYW1sYQZXz+ZSJA/kGA38iztUm4SVqgKs1/EdU656czeF+8/08AXhJ2f//iZ
b079hn86linYPRtF5PPE4x1UH+gqp6u4tGq5Ox1F1j2yjMtfl7vOImAroDTw7tKb
ocxrMYEN37fc5NHtubv1Hf97FYIVz2aAuzVzAgMBAAGjggHfMIIB2zAdBgNVHQ4E
FgQUz+zPrn8kSjgELKIqGhOz0gsZ60YwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDEyOS96LXpQcm44a1NqZ0VMS0lxR2hPejBnc1o2MFkucm9h
MCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJAoAa/swDQYJKoZIhvcNAQEL
BQADggEBAFRq2KCQbAdkYtiDwqgk3a+ADZBfq/3YgbipE33fXi+aJsF2g26wfckW
4XvrnAnDg4ZPRtGASYRCq8++6ixTyKCGPCw3t4YP57ptCRafgcL5Ll55VnXe9WM2
v07cV1lErwUSoxhCw3qbzrcqPkqdZjMf+jXhX2F3IX1dHPRmu1KIAdbDkyt8Jy6m
X7NH1jsTYlZTGkPArgMmvip4zcjeOXecWXf98j5WKP/vM4LDfJFkbL161bfzwZJ4
/JAuOFILGGUibqmI+60MbFN4S0nFEDBwT7GwSmRNYrF0ZFBiEMttCU7VJx0nmrYk
QXtG0QbUdf0XMPu02Oo5Kalsr4s/ICU=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:48:11 2026 by rpki-client