Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/DEvmoclYoy8al3fx1n5oKqrImCs.roa
File:                     DEvmoclYoy8al3fx1n5oKqrImCs.roa (raw, json)
Hash identifier:          uHt0PVL8AgQUsI7TIb/p47mrR5a6vJ6xTfPUH9di6uQ=
Subject key identifier:   0C:4B:E6:A1:C9:58:A3:2F:1A:97:77:F1:D6:7E:68:2A:AA:C8:98:2B
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0798
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/DEvmoclYoy8al3fx1n5oKqrImCs.roa
Signing time:             Fri 26 Jun 2026 05:15:29 +0000
ROA not before:           Fri 26 Jun 2026 05:15:29 +0000
ROA not after:            Tue 15 Jun 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:60:f058::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 09:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1944 (0x798)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Jun 26 05:15:29 2026 GMT
            Not After : Jun 15 01:30:02 2027 GMT
        Subject: CN=0C4BE6A1C958A32F1A9777F1D67E682AAAC8982B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fb:fb:80:4e:66:e2:41:8f:c0:74:46:ff:36:
                    ec:8f:0d:87:2f:f1:6e:d4:d9:1d:1a:6b:5c:cc:ed:
                    de:67:21:b9:e5:86:64:53:bf:eb:3b:ba:55:03:80:
                    38:aa:d9:74:b4:f0:1f:6e:d6:69:08:27:a8:06:3c:
                    11:07:9c:05:b8:e6:a2:d7:3c:92:aa:14:47:7f:ab:
                    90:1b:d2:e2:7e:3b:62:d1:ae:57:91:f4:b6:9c:2b:
                    84:9b:7c:89:94:aa:01:48:20:ff:af:21:10:0e:13:
                    b1:a7:d6:5f:fa:a4:63:50:3b:f3:cd:c4:1b:38:83:
                    11:df:02:53:d8:5a:37:69:57:2f:02:0a:99:17:c7:
                    ac:02:0e:1d:e5:ad:9b:9a:cd:c3:09:de:c3:50:ee:
                    b2:ab:a6:71:19:b6:35:9a:41:26:3d:6e:c9:4d:81:
                    f8:e5:9b:8c:18:04:90:3b:65:87:4d:38:41:45:92:
                    bf:62:5b:bc:99:2c:d0:2e:60:e9:bc:9e:12:0d:8a:
                    cf:09:be:28:50:7c:b3:36:a2:47:a4:c9:76:c1:31:
                    62:13:be:4b:58:8f:5f:3c:eb:5f:67:38:89:b8:ea:
                    b8:37:92:77:64:1f:ab:5e:ed:a9:91:00:f1:54:81:
                    ee:ed:f5:28:58:23:ec:0d:d9:24:29:68:28:6f:f2:
                    cd:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:4B:E6:A1:C9:58:A3:2F:1A:97:77:F1:D6:7E:68:2A:AA:C8:98:2B
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/DEvmoclYoy8al3fx1n5oKqrImCs.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:60:f058::/46

    Signature Algorithm: sha256WithRSAEncryption
         43:1d:c2:34:44:7f:1a:4b:c5:02:fc:57:51:e9:ff:48:2b:53:
         ef:87:6f:e4:5e:e2:0d:40:83:f4:9f:cd:3c:4b:25:e2:d9:b1:
         5f:cc:94:19:2c:f0:bd:8b:10:10:b2:fa:21:8f:eb:7b:11:5a:
         57:3d:a5:6d:84:be:f4:4a:6f:74:5a:a5:4e:34:0c:16:74:16:
         f7:d4:93:bd:98:fc:38:c3:5e:b0:45:7e:08:65:8b:68:5e:d4:
         94:3b:bc:7c:f2:f2:90:06:d9:79:a1:24:f4:2f:d6:81:f3:6d:
         a5:fd:56:77:2a:f9:55:64:4f:3a:08:c0:85:41:32:e0:fd:a2:
         f7:6e:e8:14:98:f0:a6:4c:a3:f1:13:95:b7:81:93:25:25:24:
         c1:95:8a:ae:ea:41:58:dd:8a:91:b0:db:1c:ee:01:c8:d5:01:
         fe:41:f7:89:ee:5d:85:4f:d4:e5:96:0c:70:1c:c2:1d:ce:d9:
         b4:7d:31:9b:18:f6:61:bc:36:47:35:77:b5:2a:87:9e:03:a6:
         fb:2d:85:ae:b9:2a:59:3f:de:27:50:c6:71:25:dd:04:71:e2:
         34:a6:02:70:7e:39:31:c5:2a:2e:72:72:c7:5a:d6:31:c0:e9:
         e3:93:25:8e:de:6e:cc:e6:38:f0:22:2f:a3:f4:ef:cd:74:25:
         71:a7:96:b5
-----BEGIN CERTIFICATE-----
MIIExDCCA6ygAwIBAgICB5gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjA2MjYw
NTE1MjlaFw0yNzA2MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDBDNEJFNkExQzk1OEEz
MkYxQTk3NzdGMUQ2N0U2ODJBQUFDODk4MkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCo+/uATmbiQY/AdEb/NuyPDYcv8W7U2R0aa1zM7d5nIbnlhmRT
v+s7ulUDgDiq2XS08B9u1mkIJ6gGPBEHnAW45qLXPJKqFEd/q5Ab0uJ+O2LRrleR
9LacK4SbfImUqgFIIP+vIRAOE7Gn1l/6pGNQO/PNxBs4gxHfAlPYWjdpVy8CCpkX
x6wCDh3lrZuazcMJ3sNQ7rKrpnEZtjWaQSY9bslNgfjlm4wYBJA7ZYdNOEFFkr9i
W7yZLNAuYOm8nhINis8JvihQfLM2okekyXbBMWITvktYj188619nOIm46rg3kndk
H6te7amRAPFUge7t9ShYI+wN2SQpaChv8s1pAgMBAAGjggHgMIIB3DAdBgNVHQ4E
FgQUDEvmoclYoy8al3fx1n5oKqrImCswHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDEyOS9ERXZtb2NsWW95OGFsM2Z4MW41b0txckltQ3Mucm9h
MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCJAoAYPBYMA0GCSqGSIb3DQEB
CwUAA4IBAQBDHcI0RH8aS8UC/FdR6f9IK1Pvh2/kXuINQIP0n808SyXi2bFfzJQZ
LPC9ixAQsvohj+t7EVpXPaVthL70Sm90WqVONAwWdBb31JO9mPw4w16wRX4IZYto
XtSUO7x88vKQBtl5oST0L9aB822l/VZ3KvlVZE86CMCFQTLg/aL3bugUmPCmTKPx
E5W3gZMlJSTBlYqu6kFY3YqRsNsc7gHI1QH+QfeJ7l2FT9TllgxwHMIdztm0fTGb
GPZhvDZHNXe1KoeeA6b7LYWuuSpZP94nUMZxJd0EceI0pgJwfjkxxSoucnLHWtYx
wOnjkyWO3m7M5jjwIi+j9O/NdCVxp5a1
-----END CERTIFICATE-----
Generated at Tue Jul 7 13:39:20 2026 by rpki-client