Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/0jD39IbXYn97qvJzpZLLDoAFJ_I.roa
File:                     0jD39IbXYn97qvJzpZLLDoAFJ_I.roa (raw, json)
Hash identifier:          lBC80dfOozahc9RcpuyzMRtk4RfhaO8jUGyLXypDtEw=
Subject key identifier:   D2:30:F7:F4:86:D7:62:7F:7B:AA:F2:73:A5:92:CB:0E:80:05:27:F2
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0651
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/0jD39IbXYn97qvJzpZLLDoAFJ_I.roa
Signing time:             Tue 31 Mar 2026 08:25:33 +0000
ROA not before:           Tue 31 Mar 2026 08:25:33 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:f000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1617 (0x651)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:25:33 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=D230F7F486D7627F7BAAF273A592CB0E800527F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3c:7c:7a:a7:fb:32:c7:a6:d1:07:91:fb:de:
                    a2:e6:20:bc:cb:82:1a:9a:7a:d6:2b:55:7c:eb:f9:
                    d3:10:5c:d2:a1:23:6a:01:a2:24:36:25:58:73:5e:
                    b3:c9:7d:94:3e:3c:fe:e6:22:fe:39:50:e0:05:1c:
                    65:f4:b2:d0:04:85:25:d8:d7:87:89:26:66:b0:24:
                    c3:74:cd:f5:45:df:bc:e8:02:12:5e:9f:3c:7d:6d:
                    4d:87:87:e3:4a:75:42:99:56:86:79:cf:a7:a3:bc:
                    0b:58:48:50:4e:be:0d:e2:a2:47:8c:7d:2d:d2:11:
                    7c:c0:9a:76:17:53:2f:fb:af:2f:8f:34:00:f0:78:
                    d5:f7:95:8d:ab:66:c2:44:c1:bc:17:16:93:0f:d8:
                    e7:cd:f8:58:1f:99:5c:5c:3b:e0:f0:59:1c:b5:ff:
                    a8:c4:6c:f2:59:78:2f:88:2a:3e:f6:1b:b0:69:29:
                    44:d7:5e:f2:62:a3:b3:56:63:ae:93:56:1d:e4:33:
                    b8:50:28:7b:fb:27:b3:4c:a9:54:7c:eb:5d:ea:f2:
                    03:6a:94:5f:73:20:e8:d4:ba:86:86:66:54:a0:c9:
                    9e:a6:a6:a3:02:31:0a:8e:61:0d:82:45:dd:79:86:
                    2d:58:d5:a3:f1:5c:33:f8:98:2d:b6:d6:12:79:53:
                    26:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:30:F7:F4:86:D7:62:7F:7B:AA:F2:73:A5:92:CB:0E:80:05:27:F2
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/0jD39IbXYn97qvJzpZLLDoAFJ_I.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:f000::/40

    Signature Algorithm: sha256WithRSAEncryption
         1e:79:4b:3e:e0:5e:73:28:d2:e4:01:9b:69:23:65:d0:69:e0:
         cb:a3:5f:d9:0f:aa:39:cf:df:bb:54:57:1b:2f:d9:b6:77:9b:
         3a:35:15:ef:4c:2f:c2:ca:14:42:11:6d:0a:cc:44:e2:f3:d3:
         62:dc:9a:9a:16:56:c8:c8:7e:24:90:af:38:b4:bc:34:6b:5a:
         3f:8d:ce:3a:ab:cd:a5:4a:cc:64:6f:ca:58:50:a2:af:de:f3:
         6b:9d:c2:48:5e:26:7c:5f:be:92:11:89:52:fa:4f:54:c9:3b:
         c1:04:cd:21:a8:4f:6e:b5:76:b7:6d:f1:be:25:69:38:5e:c2:
         3c:23:e5:95:f7:58:af:76:75:90:29:dc:69:6f:b8:2c:69:ef:
         26:81:22:8f:e9:76:9c:b3:d0:27:9f:ab:f2:44:44:d5:91:3c:
         5e:50:c6:76:3a:35:23:34:a0:63:ff:0d:16:17:a7:d9:55:b6:
         36:81:da:51:12:a9:3b:56:74:86:7f:63:82:66:02:07:f7:d9:
         23:90:e5:e5:b1:cb:c7:1d:ed:bd:d7:30:be:3a:f1:ef:5f:bb:
         d7:a6:81:00:f5:ca:05:15:f1:5f:76:f3:e5:64:6b:82:f3:2f:
         5c:e7:1b:c9:27:44:1d:f4:60:e0:f7:4c:fd:25:cd:e6:6f:a1:
         0a:42:69:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 21:01:44 2026 by rpki-client