Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/4WRUY2LYicRAHO3QOZN6BhcAbuw.roa
File:                     4WRUY2LYicRAHO3QOZN6BhcAbuw.roa (raw, json)
Hash identifier:          m/qu67tYNEk6lv49Ir5j7x/E84ynTKN69RsujDghkfc=
Subject key identifier:   E1:64:54:63:62:D8:89:C4:40:1C:ED:D0:39:93:7A:06:17:00:6E:EC
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       06D2
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/4WRUY2LYicRAHO3QOZN6BhcAbuw.roa
Signing time:             Tue 31 Mar 2026 08:26:38 +0000
ROA not before:           Tue 31 Mar 2026 08:26:38 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:bb00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1746 (0x6d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:26:38 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=E164546362D889C4401CEDD039937A0617006EEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9d:29:f1:47:44:13:ae:5c:bd:5e:7e:24:a4:
                    ff:1f:ac:97:55:28:03:bc:a9:d0:b6:3b:d9:44:b6:
                    46:f1:88:fd:40:d3:55:47:15:c9:4d:8a:63:8f:81:
                    7c:c0:e5:98:4e:13:42:f8:99:b7:eb:32:4c:ae:9f:
                    f0:57:95:10:84:98:bd:ca:2c:c7:9e:da:73:6c:bf:
                    f5:cc:3e:68:b0:bc:de:f0:fe:65:24:8e:8e:a8:39:
                    57:7d:09:55:b6:e3:07:b6:90:81:98:9b:71:77:b4:
                    e6:e7:0e:f3:a6:8f:43:49:8e:1e:51:09:66:2e:cd:
                    06:8c:0c:4e:42:8c:48:d0:66:81:45:99:b7:c3:17:
                    28:11:5a:75:1f:aa:d5:62:76:15:54:f6:4f:ab:19:
                    13:50:25:b8:fd:a1:ae:91:9d:df:00:87:aa:32:8f:
                    ea:d0:c9:74:50:df:2f:04:a0:62:bc:f6:47:7e:8a:
                    20:43:71:20:56:28:34:34:cf:7b:f1:c8:ee:1c:04:
                    7d:39:e6:5b:2b:e2:81:07:4f:af:81:3c:6f:8b:bd:
                    dd:c1:28:53:96:82:ef:2f:29:f4:c0:dc:8f:ee:cc:
                    a0:1f:23:b5:ba:15:f7:ad:b2:30:35:c2:1e:94:f1:
                    4e:34:7c:b7:c9:54:54:97:78:73:14:c6:e6:a7:d1:
                    f1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:64:54:63:62:D8:89:C4:40:1C:ED:D0:39:93:7A:06:17:00:6E:EC
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/4WRUY2LYicRAHO3QOZN6BhcAbuw.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:bb00::/40

    Signature Algorithm: sha256WithRSAEncryption
         2a:87:b4:5a:1f:52:e9:76:51:60:01:fa:c0:d4:fc:cf:b1:5e:
         db:06:a8:c5:f1:1b:77:c9:77:9e:e4:ea:82:ba:c6:66:b5:37:
         ed:8c:c0:45:4c:bc:3e:4e:96:c7:4a:b1:24:5b:e8:82:e9:84:
         49:5d:e1:47:e5:cd:74:ab:23:fa:ff:14:78:fd:52:e5:3c:0d:
         45:57:65:18:52:72:3f:ec:7e:90:6d:58:4a:17:fb:54:fc:16:
         7c:85:06:8b:43:31:68:33:a1:e7:7e:39:ae:66:60:35:e7:38:
         91:5f:6f:13:fb:0e:36:ed:d8:ab:a1:31:11:61:4c:e1:5c:12:
         75:60:9e:04:7e:6b:68:6c:02:96:d2:5b:0c:dc:8e:39:78:8b:
         8a:ca:12:d5:67:d6:13:99:ef:86:9c:8f:1b:2b:e0:cf:fa:d2:
         1c:4b:bc:59:96:29:03:01:45:cf:5f:87:cf:aa:82:ce:ba:c9:
         ee:f6:6c:82:02:2a:d0:d2:25:8e:8b:60:38:e3:07:50:78:cf:
         57:d0:09:83:97:e0:b3:d9:36:28:bb:27:14:49:c3:a2:63:b8:
         86:23:50:43:6f:d4:bb:d9:2f:6c:c2:b5:33:cc:e3:84:0f:12:
         56:92:0f:f7:3b:56:09:c1:96:17:c1:bc:6e:0b:0a:e3:49:49:
         6d:da:8d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:04 2026 by rpki-client