Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30236/bp9cHnfvCbfZHGzoX832kvsPt1U.roa
File:                     bp9cHnfvCbfZHGzoX832kvsPt1U.roa (raw, json)
Hash identifier:          iw6j0NvKA3ttyze+Zb7TgFiPdcQOVJAxuO4Pt0qUQII=
Subject key identifier:   6E:9F:5C:1E:77:EF:09:B7:D9:1C:6C:E8:5F:CD:F6:92:FB:0F:B7:55
Certificate issuer:       /CN=9D5A540C122FD0C70CE511170044FF6580D7631B
Certificate serial:       13
Authority key identifier: 9D:5A:54:0C:12:2F:D0:C7:0C:E5:11:17:00:44:FF:65:80:D7:63:1B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nVpUDBIv0McM5REXAET_ZYDXYxs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30236/bp9cHnfvCbfZHGzoX832kvsPt1U.roa
Signing time:             Thu 19 Feb 2026 12:30:47 +0000
ROA not before:           Thu 19 Feb 2026 12:30:47 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     9607
IP address blocks:        2404:c700::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30236/nVpUDBIv0McM5REXAET_ZYDXYxs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30236/nVpUDBIv0McM5REXAET_ZYDXYxs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nVpUDBIv0McM5REXAET_ZYDXYxs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Feb 2026 04:18:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D5A540C122FD0C70CE511170044FF6580D7631B
        Validity
            Not Before: Feb 19 12:30:47 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=6E9F5C1E77EF09B7D91C6CE85FCDF692FB0FB755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c9:59:7c:10:60:da:64:18:98:20:28:32:fc:
                    2d:c1:3c:7e:66:4c:60:b3:f5:e5:a0:3a:28:94:83:
                    2d:93:8c:a0:99:e3:a7:fe:72:3a:4d:d8:3c:34:2a:
                    51:85:36:5a:9d:ad:99:ed:c9:0b:e4:95:b2:ec:e8:
                    6e:ad:bb:c3:55:a9:4f:60:59:dd:54:16:5f:ad:72:
                    27:7c:96:42:45:b0:22:4f:95:dc:a2:00:d0:55:ad:
                    ea:d3:cc:62:4c:a4:14:3b:cb:3c:78:95:47:26:5d:
                    3d:d4:30:e0:31:f6:17:06:e5:22:07:fc:10:4b:c3:
                    31:40:e9:df:65:10:55:ed:41:41:25:57:9c:11:6a:
                    6a:71:47:ef:ba:b8:1e:26:9d:fc:51:32:91:3c:c9:
                    4e:70:31:bf:66:47:d1:15:d8:08:00:4a:81:be:e4:
                    15:58:4e:36:9b:e5:d3:e5:cb:66:1b:56:65:4c:41:
                    c4:36:38:46:c1:1a:34:01:21:65:db:93:81:a3:f3:
                    bf:5b:8c:af:91:0d:33:01:42:fd:46:55:92:a2:35:
                    86:de:40:56:56:48:be:1b:98:35:72:e6:67:49:87:
                    ce:c5:32:9f:58:2f:b2:6e:6b:e8:66:e6:3f:d9:22:
                    d9:7f:a7:a4:06:9e:f7:96:cb:56:2f:62:64:c7:26:
                    14:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:9F:5C:1E:77:EF:09:B7:D9:1C:6C:E8:5F:CD:F6:92:FB:0F:B7:55
            X509v3 Authority Key Identifier:
                keyid:9D:5A:54:0C:12:2F:D0:C7:0C:E5:11:17:00:44:FF:65:80:D7:63:1B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30236/nVpUDBIv0McM5REXAET_ZYDXYxs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nVpUDBIv0McM5REXAET_ZYDXYxs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30236/bp9cHnfvCbfZHGzoX832kvsPt1U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:c700::/32

    Signature Algorithm: sha256WithRSAEncryption
         cd:6e:66:36:81:1e:c7:1d:b5:30:29:62:ec:af:84:ad:ad:80:
         9a:5c:a5:34:55:1a:5a:04:d1:4d:b3:5c:5e:df:b4:83:9f:d7:
         d4:cf:2c:00:1a:0a:a9:1e:67:6e:a3:dc:b8:02:5f:3f:88:28:
         4f:33:8d:49:1b:fa:ed:b0:b9:1d:58:b6:49:73:8d:14:dd:2c:
         5e:d4:82:df:43:26:11:fd:1d:92:1e:6b:67:0d:16:ae:ad:a9:
         7f:43:d7:ab:aa:c5:da:6c:ca:af:6e:19:00:79:04:91:2d:f0:
         38:96:f3:2a:fc:89:a5:6e:c2:b4:5b:63:fc:b6:ca:82:43:de:
         5b:b3:86:3d:d6:05:0a:24:f7:23:5b:ba:37:41:d2:30:ab:d0:
         1c:40:8a:e3:a0:69:7c:e6:fb:f0:4a:2c:26:69:64:09:19:a0:
         b9:5c:24:48:a0:76:08:3b:52:a9:05:27:30:26:a1:43:8c:d4:
         9c:0d:79:11:33:4e:17:b2:74:49:98:12:61:0a:a2:50:d7:52:
         7d:89:b0:49:ea:36:1f:63:9e:80:e9:d1:5b:4d:20:33:b4:69:
         c6:2e:9e:03:f1:83:70:c9:af:b8:09:9f:f3:85:57:8b:4c:b5:
         60:08:09:fa:9d:6d:91:0a:0e:b9:49:00:b4:df:f0:a0:d5:ba:
         5e:87:54:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 09:17:53 2026 by rpki-client