Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Z5vaEm-9_AV5EfRbv6kpPwLELQ8.roa
File:                     Z5vaEm-9_AV5EfRbv6kpPwLELQ8.roa (raw, json)
Hash identifier:          KbuJsdpRy4K00buWw8swuO9oNwhR8bNzb3dwV+RVL8g=
Subject key identifier:   67:9B:DA:12:6F:BD:FC:05:79:11:F4:5B:BF:A9:29:3F:02:C4:2D:0F
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       079D
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Z5vaEm-9_AV5EfRbv6kpPwLELQ8.roa
Signing time:             Fri 26 Jun 2026 05:26:33 +0000
ROA not before:           Fri 26 Jun 2026 05:26:33 +0000
ROA not after:            Tue 15 Jun 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:60:f03c::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 09:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1949 (0x79d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Jun 26 05:26:33 2026 GMT
            Not After : Jun 15 01:30:02 2027 GMT
        Subject: CN=679BDA126FBDFC057911F45BBFA9293F02C42D0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a0:5a:ee:70:87:1b:40:f0:d7:9c:35:6a:ec:
                    42:e6:de:90:a3:34:ad:2f:3c:a6:ec:2d:5f:1d:e5:
                    d9:34:10:85:3c:ca:bd:e8:3e:03:de:3f:1c:75:0d:
                    d2:3a:53:73:d2:2e:cc:ba:95:86:d6:b0:e1:65:e1:
                    c8:0e:d4:b3:77:79:16:ef:d7:88:c5:f9:d8:c7:fa:
                    ca:05:62:5a:85:2a:f1:4e:ca:64:48:65:e3:58:2f:
                    f6:f3:58:4d:18:02:e5:54:a0:fc:40:e4:a7:fa:50:
                    56:61:2c:b6:e9:b8:89:c2:ea:a4:d4:06:8e:59:c1:
                    8d:45:e2:3c:16:74:d5:b5:e6:5d:45:05:77:19:95:
                    04:78:25:2d:df:61:5c:f2:02:25:2a:8a:46:d4:a6:
                    96:a7:1e:7f:db:2e:41:5d:63:41:dd:39:8c:5d:f4:
                    eb:b3:77:08:83:ca:15:dc:04:1d:6e:54:de:b3:a0:
                    4c:98:95:c1:34:d4:9a:20:a3:77:59:1d:94:9a:ac:
                    12:c2:18:41:95:5b:c8:6d:a6:07:c9:c6:dd:d2:b6:
                    3c:b4:de:df:d4:95:a8:a4:78:de:ba:37:23:8e:6f:
                    bf:c7:72:e6:d4:df:8c:ea:ed:51:ad:40:84:35:2c:
                    a1:94:63:c2:f2:a0:1b:e2:8a:70:d3:1d:e1:a2:49:
                    fa:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:9B:DA:12:6F:BD:FC:05:79:11:F4:5B:BF:A9:29:3F:02:C4:2D:0F
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Z5vaEm-9_AV5EfRbv6kpPwLELQ8.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:60:f03c::/47

    Signature Algorithm: sha256WithRSAEncryption
         09:46:99:34:d2:38:38:2c:a4:d4:22:1e:3b:e2:8d:b7:2f:a6:
         d2:72:da:0e:eb:8b:e8:dc:43:74:b7:f7:1e:ad:f4:cd:d9:c6:
         1c:3a:86:02:a6:ba:71:78:53:08:7d:3f:5a:92:dd:8e:6e:fd:
         1a:e1:54:93:09:fa:f2:05:36:f3:d3:24:8c:3d:ca:46:1a:a2:
         af:d3:e2:08:ff:d0:01:12:8c:ab:df:53:56:19:fc:1d:87:93:
         c3:05:7c:a3:04:d7:35:c5:e7:c6:1f:8c:a4:03:24:64:f6:c6:
         04:4c:f0:dd:d2:4c:e0:a0:12:70:f2:db:3c:59:38:ce:8f:98:
         c6:ac:8b:d7:c1:f4:98:3c:c7:cc:bb:f7:62:d4:94:74:87:b7:
         3b:c3:10:04:ae:0e:55:b3:54:72:e7:6d:54:0c:21:18:c7:ba:
         fe:c6:1c:2d:67:8e:fa:e8:c3:18:f4:66:53:ac:bc:e1:0a:75:
         ef:25:4c:74:66:a1:bc:08:fc:20:df:e4:1a:1c:66:50:f7:7b:
         5b:af:63:2a:5a:80:a1:61:6c:3a:7e:ad:77:e7:a5:f8:bd:6a:
         b0:73:82:3b:ec:3c:15:6c:a8:93:d0:85:77:12:5f:7d:77:9e:
         a5:b4:91:91:fb:11:53:3b:38:1f:7c:47:c4:40:f9:ea:1c:5b:
         30:27:18:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 13:39:26 2026 by rpki-client