Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/29mlMmKoZKlXw7BC0OaFOm1oh9U.roa
File:                     29mlMmKoZKlXw7BC0OaFOm1oh9U.roa (raw, json)
Hash identifier:          M7uSN3DxGPxZOp0cjJIw/rIIgic7yfelBsr+lRQEL3s=
Subject key identifier:   DB:D9:A5:32:62:A8:64:A9:57:C3:B0:42:D0:E6:85:3A:6D:68:87:D5
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0726
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/29mlMmKoZKlXw7BC0OaFOm1oh9U.roa
Signing time:             Tue 31 Mar 2026 08:27:17 +0000
ROA not before:           Tue 31 Mar 2026 08:27:17 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:a700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1830 (0x726)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:27:17 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=DBD9A53262A864A957C3B042D0E6853A6D6887D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:63:c7:99:14:f7:2f:cd:64:fa:62:f2:53:b0:
                    d9:72:07:73:77:b2:89:20:ec:13:0c:c7:ac:1c:ca:
                    16:fb:31:ed:75:46:5f:0d:79:31:4a:27:99:06:a1:
                    ac:9a:83:c9:7b:1d:5a:b8:b6:e8:d6:dd:ab:b8:cb:
                    90:60:ef:46:49:b8:57:ff:17:9e:72:fd:b6:1b:ad:
                    b6:a1:2d:e5:3b:02:e1:8c:f7:38:e2:f6:5f:67:29:
                    eb:c0:0b:55:ab:b2:fe:18:de:de:c6:55:69:f2:cb:
                    e6:43:b0:d0:27:87:91:f4:d3:c2:08:23:eb:0d:5f:
                    be:6d:41:af:5e:48:40:ca:c3:f8:12:4a:4f:a2:a4:
                    68:d7:50:b1:36:9c:41:9b:0d:be:c4:eb:c6:bf:3c:
                    49:70:2a:84:fc:eb:60:10:13:51:ae:87:01:2a:85:
                    49:5b:a4:9e:9a:ca:9a:e0:ad:68:99:61:52:84:15:
                    29:62:81:30:72:0e:16:ca:c6:0a:e6:be:78:9a:b4:
                    36:18:ee:dc:00:df:ff:5c:be:49:a2:b4:91:9f:6c:
                    f3:b4:5c:e8:d1:5a:93:e3:e4:4b:5c:8a:69:d5:c1:
                    85:97:b0:a7:af:f3:c0:96:5b:ae:b2:17:21:22:78:
                    d3:66:fd:3d:84:e4:6b:7e:c6:19:e6:99:1f:02:e1:
                    b6:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D9:A5:32:62:A8:64:A9:57:C3:B0:42:D0:E6:85:3A:6D:68:87:D5
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/29mlMmKoZKlXw7BC0OaFOm1oh9U.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:a700::/40

    Signature Algorithm: sha256WithRSAEncryption
         07:5b:94:13:d1:a9:f5:26:06:0c:7d:4e:be:f7:37:0e:2a:5d:
         63:4a:94:aa:74:c4:36:b7:0e:40:43:26:35:30:49:ba:0b:50:
         d6:d5:5f:d3:db:2f:4e:1a:6a:97:da:cf:d9:a5:c8:44:13:2c:
         2f:e0:32:01:d4:67:b6:2b:b2:8b:7b:f1:f0:c6:cd:fc:88:82:
         67:8a:be:31:94:88:6f:5a:06:c0:67:e4:2e:a8:04:f9:10:9a:
         9b:06:02:74:4f:ed:49:99:6a:98:b7:a8:4d:36:ec:fe:06:b6:
         49:ec:3f:e8:c7:18:3d:1a:c3:0d:d8:67:29:6e:49:f0:39:5e:
         74:37:c2:84:e6:ea:8c:e1:e1:3b:14:42:af:7c:9b:94:88:d7:
         80:6a:2c:d3:b8:be:ff:a7:69:f8:0e:99:ab:f1:5e:d6:09:57:
         e4:90:bf:17:84:2e:7a:9c:68:7e:98:6a:b8:5b:c7:4b:75:a1:
         84:ec:8f:2e:9f:57:88:51:b4:a1:78:1e:e8:e1:95:28:f1:45:
         27:d4:4d:bd:83:bf:fb:99:60:cd:fe:00:bb:16:b4:d5:41:8f:
         23:10:e6:54:a8:1d:a4:2c:83:ba:ac:21:4d:a0:43:3a:79:f9:
         53:e3:99:97:58:9c:aa:21:6c:84:f6:4a:05:4e:11:88:77:7c:
         52:db:d8:c1
-----BEGIN CERTIFICATE-----
MIIEwzCCA6ugAwIBAgICByYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjAzMzEw
ODI3MTdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKERCRDlBNTMyNjJBODY0
QTk1N0MzQjA0MkQwRTY4NTNBNkQ2ODg3RDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDXY8eZFPcvzWT6YvJTsNlyB3N3sokg7BMMx6wcyhb7Me11Rl8N
eTFKJ5kGoayag8l7HVq4tujW3au4y5Bg70ZJuFf/F55y/bYbrbahLeU7AuGM9zji
9l9nKevAC1Wrsv4Y3t7GVWnyy+ZDsNAnh5H008III+sNX75tQa9eSEDKw/gSSk+i
pGjXULE2nEGbDb7E68a/PElwKoT862AQE1GuhwEqhUlbpJ6ayprgrWiZYVKEFSli
gTByDhbKxgrmvniatDYY7twA3/9cvkmitJGfbPO0XOjRWpPj5EtcimnVwYWXsKev
88CWW66yFyEieNNm/T2E5Gt+xhnmmR8C4bb1AgMBAAGjggHfMIIB2zAdBgNVHQ4E
FgQU29mlMmKoZKlXw7BC0OaFOm1oh9UwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDEyOS8yOW1sTW1Lb1pLbFh3N0JDME9hRk9tMW9oOVUucm9h
MCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJAoAa6cwDQYJKoZIhvcNAQEL
BQADggEBAAdblBPRqfUmBgx9Tr73Nw4qXWNKlKp0xDa3DkBDJjUwSboLUNbVX9Pb
L04aapfaz9mlyEQTLC/gMgHUZ7Yrsot78fDGzfyIgmeKvjGUiG9aBsBn5C6oBPkQ
mpsGAnRP7UmZapi3qE027P4GtknsP+jHGD0aww3YZyluSfA5XnQ3woTm6ozh4TsU
Qq98m5SI14BqLNO4vv+nafgOmavxXtYJV+SQvxeELnqcaH6Yarhbx0t1oYTsjy6f
V4hRtKF4HujhlSjxRSfUTb2Dv/uZYM3+ALsWtNVBjyMQ5lSoHaQsg7qsIU2gQzp5
+VPjmZdYnKohbIT2SgVOEYh3fFLb2ME=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:35 2026 by rpki-client