Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/5EOxdDV3CrWErxRU1w1VKQn1vqg.roa
File:                     5EOxdDV3CrWErxRU1w1VKQn1vqg.roa (raw, json)
Hash identifier:          xW6SrJJwNJUu9VSmj9Hn7HuSJlU7ZlNAfi1/L9p1lG0=
Subject key identifier:   E4:43:B1:74:35:77:0A:B5:84:AF:14:54:D7:0D:55:29:09:F5:BE:A8
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0719
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/5EOxdDV3CrWErxRU1w1VKQn1vqg.roa
Signing time:             Tue 31 Mar 2026 08:27:12 +0000
ROA not before:           Tue 31 Mar 2026 08:27:12 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:b800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1817 (0x719)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:27:12 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=E443B17435770AB584AF1454D70D552909F5BEA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:87:f9:10:f3:d2:ae:05:61:6d:24:de:3d:fd:
                    69:bd:89:a8:43:fc:13:71:f3:f3:d0:63:1b:b6:dc:
                    69:b5:eb:51:91:77:b0:67:8c:01:3b:71:45:0f:30:
                    1c:b9:23:ff:c6:38:f8:b7:84:3c:55:53:00:0f:5c:
                    79:48:b4:bb:7b:fc:fd:76:ef:ed:c9:80:89:e3:dc:
                    b7:be:ac:bb:d2:c3:65:aa:51:0f:e5:43:a7:7d:82:
                    ef:d7:a5:7e:f2:5d:20:40:34:27:25:f4:d6:1c:ce:
                    78:d4:06:dd:9b:be:c3:39:cd:bf:0b:e4:ac:00:59:
                    0c:1a:3b:7a:38:de:f3:8f:fc:fc:fe:f3:0a:dc:c7:
                    92:d4:0b:4b:c5:e4:5f:91:d4:e8:29:8e:fc:bc:4c:
                    33:73:cf:2f:75:09:47:63:31:0c:44:0a:f1:5c:94:
                    04:59:c2:e6:ae:3d:1a:30:be:6c:1e:f5:a8:cf:c4:
                    0f:04:f4:ec:4a:95:2e:7c:a4:78:c5:85:05:64:67:
                    f3:57:8c:87:6e:42:8e:95:c9:d2:61:5b:0b:04:1c:
                    39:59:9b:d6:d7:99:81:9b:d4:77:d1:c7:f5:3f:e8:
                    83:d5:60:22:f2:40:b2:51:d1:35:6a:3e:96:4c:69:
                    44:b5:2f:09:48:09:84:c9:95:33:50:7b:ae:25:ee:
                    e7:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:43:B1:74:35:77:0A:B5:84:AF:14:54:D7:0D:55:29:09:F5:BE:A8
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/5EOxdDV3CrWErxRU1w1VKQn1vqg.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:b800::/40

    Signature Algorithm: sha256WithRSAEncryption
         5c:ae:4d:3f:24:20:c0:b4:5a:31:73:89:7e:23:f4:b3:6e:30:
         1c:48:5f:4e:e8:31:de:78:9b:4c:2e:f8:b8:42:b8:37:6f:d7:
         9a:a2:2e:10:01:10:39:3c:29:88:18:5d:bb:b1:74:27:72:b2:
         64:61:ea:2a:f3:fd:a6:eb:3c:2a:2e:f4:bb:0d:09:09:d8:9b:
         97:df:e9:bc:30:46:9c:1b:36:d9:30:74:02:53:e2:6f:e7:43:
         94:28:c2:1e:d7:67:40:bf:6f:b6:6d:83:d6:04:ec:36:91:a8:
         c5:16:da:e5:56:f1:55:51:30:5e:c1:c8:5e:53:97:c7:16:72:
         b4:d3:b6:f5:b3:a4:c3:c5:ec:7b:db:64:64:e7:8f:11:7c:d6:
         20:97:bb:ad:ff:24:b1:d0:37:aa:95:97:da:a4:7c:fd:97:cf:
         4d:ca:cb:1a:65:40:b5:e2:ec:14:f2:96:3b:73:58:88:4b:5d:
         aa:93:95:86:3e:91:19:79:33:58:37:b1:d5:b8:9f:7c:07:25:
         e2:24:8b:df:06:a4:33:90:d3:1d:cc:c8:47:9a:57:75:55:95:
         51:dc:b3:8b:98:93:91:84:ba:38:89:53:97:01:b2:a1:04:27:
         a3:b7:9a:e8:80:94:ba:71:14:f3:21:e4:95:95:97:c8:b9:00:
         88:e8:d8:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:48:08 2026 by rpki-client