Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/iDrP2KrxTzQbrtxoQl3p_X3XOe0.roa
File:                     iDrP2KrxTzQbrtxoQl3p_X3XOe0.roa (raw, json)
Hash identifier:          kjSipNGXGoCq4qWbwjPzaFPA+eZ6n63fxVMztp88y9Q=
Subject key identifier:   88:3A:CF:D8:AA:F1:4F:34:1B:AE:DC:68:42:5D:E9:FD:7D:D7:39:ED
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       079A
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/iDrP2KrxTzQbrtxoQl3p_X3XOe0.roa
Signing time:             Fri 26 Jun 2026 05:20:40 +0000
ROA not before:           Fri 26 Jun 2026 05:20:40 +0000
ROA not after:            Tue 15 Jun 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:60:f05e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 09:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1946 (0x79a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Jun 26 05:20:40 2026 GMT
            Not After : Jun 15 01:30:02 2027 GMT
        Subject: CN=883ACFD8AAF14F341BAEDC68425DE9FD7DD739ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9a:e5:ab:1a:0a:14:b9:be:c7:cb:f3:73:31:
                    10:a7:d7:8c:b4:7d:10:f3:04:d1:1c:37:d5:ab:57:
                    c4:fe:e8:f8:8a:4b:26:e6:eb:f8:60:82:14:e6:1e:
                    fc:d8:db:78:5a:b4:9a:aa:5c:65:6f:b2:e9:83:89:
                    ad:e9:02:dd:87:95:ce:ec:96:2c:77:75:4d:98:b3:
                    97:0e:9d:83:d9:b8:ba:6c:58:35:61:98:9d:79:7c:
                    24:20:92:d3:49:b8:83:87:76:61:99:1d:ed:3e:92:
                    4c:7c:a9:96:99:82:84:3c:f5:e4:37:a9:24:e9:9b:
                    8c:79:b6:d9:55:50:4f:26:d2:f7:ed:07:c2:c3:31:
                    49:67:59:e5:cb:dd:d4:0c:c5:32:0a:49:b1:1d:a9:
                    e2:a3:0f:19:ef:df:bd:c8:9e:29:4d:09:60:46:97:
                    7c:b0:8e:e3:ee:5e:44:ff:3f:d0:0a:93:5d:74:28:
                    c8:1c:ab:cd:d4:c7:58:7b:e8:a7:40:a8:8a:09:3e:
                    2c:d6:75:91:b5:dd:02:76:28:fa:b0:17:6f:38:22:
                    58:0b:96:2f:68:de:3d:e7:74:c7:87:c0:70:6a:c8:
                    ef:cc:18:fe:ec:21:09:f7:69:b1:2d:42:d3:82:e1:
                    f8:9e:71:1c:0b:91:2a:8f:51:e9:88:43:7b:fb:24:
                    68:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:3A:CF:D8:AA:F1:4F:34:1B:AE:DC:68:42:5D:E9:FD:7D:D7:39:ED
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/iDrP2KrxTzQbrtxoQl3p_X3XOe0.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:60:f05e::/48

    Signature Algorithm: sha256WithRSAEncryption
         c5:ce:2d:80:bb:2b:c3:27:11:dc:c0:fe:e3:65:29:1e:0b:04:
         e5:05:43:61:77:5b:5b:2c:29:d1:3d:e4:5d:d2:bc:25:b1:0a:
         06:eb:2b:8e:e4:86:10:95:35:b4:59:f4:6e:bc:b4:ce:0e:29:
         8c:30:8b:7b:6d:ba:b3:d4:a5:b7:12:91:c5:c3:ba:88:ab:5a:
         3b:a8:f1:16:b3:23:9a:99:cc:4f:71:e0:18:42:1f:be:ec:44:
         8c:ab:05:c7:a3:ba:1e:bb:c8:fe:98:3a:e4:37:0c:f9:17:9b:
         a3:11:63:6b:6c:b2:fb:52:25:79:79:11:a6:aa:82:99:36:c5:
         8d:47:ca:60:2f:d7:00:ba:cf:58:0d:62:1a:d3:20:43:be:8e:
         dd:5c:56:67:89:dd:9f:8d:5d:f9:be:bf:f5:6d:69:9a:f9:db:
         f7:d1:40:48:85:3e:1e:d4:6b:5a:66:40:70:78:9f:84:01:f9:
         9d:e3:24:07:66:bc:c0:49:e0:1d:6c:b1:51:7f:a4:d6:ad:d1:
         6b:66:47:84:0f:c6:bb:b6:e9:bf:cb:d2:5e:e6:66:9a:41:76:
         9d:ea:c8:3b:d7:65:d4:cc:0f:b7:bc:3e:90:58:af:12:cf:77:
         85:c9:ea:42:bc:27:09:8a:fd:05:93:cf:e2:e1:5f:cc:d2:a5:
         da:c9:f4:40
-----BEGIN CERTIFICATE-----
MIIExDCCA6ygAwIBAgICB5owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjA2MjYw
NTIwNDBaFw0yNzA2MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDg4M0FDRkQ4QUFGMTRG
MzQxQkFFREM2ODQyNURFOUZEN0RENzM5RUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCtmuWrGgoUub7Hy/NzMRCn14y0fRDzBNEcN9WrV8T+6PiKSybm
6/hgghTmHvzY23hatJqqXGVvsumDia3pAt2Hlc7slix3dU2Ys5cOnYPZuLpsWDVh
mJ15fCQgktNJuIOHdmGZHe0+kkx8qZaZgoQ89eQ3qSTpm4x5ttlVUE8m0vftB8LD
MUlnWeXL3dQMxTIKSbEdqeKjDxnv373InilNCWBGl3ywjuPuXkT/P9AKk110KMgc
q83Ux1h76KdAqIoJPizWdZG13QJ2KPqwF284IlgLli9o3j3ndMeHwHBqyO/MGP7s
IQn3abEtQtOC4fiecRwLkSqPUemIQ3v7JGgBAgMBAAGjggHgMIIB3DAdBgNVHQ4E
FgQUiDrP2KrxTzQbrtxoQl3p/X3XOe0wHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDEyOS9pRHJQMktyeFR6UWJydHhvUWwzcF9YM1hPZTAucm9h
MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAoAYPBeMA0GCSqGSIb3DQEB
CwUAA4IBAQDFzi2AuyvDJxHcwP7jZSkeCwTlBUNhd1tbLCnRPeRd0rwlsQoG6yuO
5IYQlTW0WfRuvLTODimMMIt7bbqz1KW3EpHFw7qIq1o7qPEWsyOamcxPceAYQh++
7ESMqwXHo7oeu8j+mDrkNwz5F5ujEWNrbLL7UiV5eRGmqoKZNsWNR8pgL9cAus9Y
DWIa0yBDvo7dXFZnid2fjV35vr/1bWma+dv30UBIhT4e1GtaZkBweJ+EAfmd4yQH
ZrzASeAdbLFRf6TWrdFrZkeED8a7tum/y9Je5maaQXad6sg712XUzA+3vD6QWK8S
z3eFyepCvCcJiv0Fk8/i4V/M0qXayfRA
-----END CERTIFICATE-----
Generated at Tue Jul 7 13:39:19 2026 by rpki-client