Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/5lAbtShXeJkjDGJXLGEq0pOy09E.roa
File:                     5lAbtShXeJkjDGJXLGEq0pOy09E.roa (raw, json)
Hash identifier:          Jl3apVIyyWd8zoBABiek2L8LgfIRJ7p4Wr19WM3O19s=
Subject key identifier:   E6:50:1B:B5:28:57:78:99:23:0C:62:57:2C:61:2A:D2:93:B2:D3:D1
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       075A
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/5lAbtShXeJkjDGJXLGEq0pOy09E.roa
Signing time:             Tue 31 Mar 2026 08:27:43 +0000
ROA not before:           Tue 31 Mar 2026 08:27:43 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:8b00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1882 (0x75a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:27:43 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=E6501BB528577899230C62572C612AD293B2D3D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7a:53:aa:bd:69:5d:1c:e1:75:43:be:29:06:
                    6c:fd:5b:d4:9a:30:26:5f:34:e2:62:2c:7d:c4:79:
                    3b:32:fb:50:4f:90:d8:cc:a0:92:8f:b2:a1:fc:d7:
                    6d:d4:27:4d:dc:bd:f7:e1:50:24:c3:03:d7:88:0a:
                    aa:4a:4b:03:59:6f:cb:67:fa:cd:f2:4e:a6:08:19:
                    a9:a2:01:89:36:8c:35:4f:c8:30:48:9e:c3:eb:b9:
                    10:1a:8b:d4:cc:52:33:68:24:ee:f5:86:29:a1:49:
                    a3:f6:27:d6:77:4d:9c:73:ec:e1:da:cd:8d:d5:66:
                    be:d1:3b:37:7c:16:23:9d:76:00:ce:cb:e0:37:71:
                    f9:e6:03:54:ec:53:19:09:45:ef:1a:fd:3e:6b:68:
                    ee:7a:67:d3:25:52:cc:39:e6:71:3e:89:b1:22:c9:
                    da:c9:53:f6:cf:34:26:4e:65:1a:a5:f8:58:ef:ed:
                    9c:04:fd:1d:56:37:07:18:b6:59:4a:e1:15:0d:dc:
                    8b:fc:5c:fc:fe:ed:22:44:65:ab:a8:96:fe:a1:c9:
                    0b:ef:b3:a1:91:78:93:49:f9:0a:ff:da:39:c3:a1:
                    16:ea:e8:7e:80:80:56:5f:79:4a:94:e8:c6:b3:4d:
                    1b:f4:ed:c3:6a:3b:1b:48:c0:e8:eb:57:5d:4d:66:
                    46:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:50:1B:B5:28:57:78:99:23:0C:62:57:2C:61:2A:D2:93:B2:D3:D1
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/5lAbtShXeJkjDGJXLGEq0pOy09E.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:8b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         6f:df:5c:7f:52:48:27:ca:d7:76:de:86:e9:0d:b4:fe:62:1b:
         35:f6:0f:10:ea:7f:50:f1:b1:5f:e0:2c:67:00:01:4b:78:92:
         e4:e8:58:d9:d8:c8:b9:98:69:aa:77:c3:e6:91:1d:a4:94:a0:
         31:fe:70:03:01:88:b8:1b:15:8a:d0:87:f4:a4:2a:7f:ba:f4:
         45:0e:cf:69:89:3e:e6:ec:c6:8e:8c:37:66:b2:99:8e:04:e7:
         3b:0d:88:b1:92:5e:68:74:0d:cf:6c:d2:69:e5:e4:5d:81:13:
         4b:d9:fe:f8:a8:56:a5:9b:af:7f:bf:c3:84:5e:9e:ed:a2:4b:
         66:f8:b7:b8:51:8a:43:49:ad:c9:24:9f:8d:e2:8e:d7:92:bb:
         2d:8d:8c:d9:d1:14:13:ed:6c:a4:3f:c2:05:81:2a:8b:09:35:
         34:bc:07:03:50:26:73:98:1e:f9:70:2e:37:81:26:0c:83:a6:
         0d:cd:21:a8:f8:fe:32:34:75:c2:43:f3:bf:09:bd:7d:75:ed:
         c9:9c:41:95:b7:ee:21:59:f1:7e:76:c3:f8:d0:00:dd:4d:0f:
         44:33:58:c2:3a:0b:93:b4:b8:b6:af:28:01:37:3d:b7:0c:af:
         24:97:ba:2c:ee:ca:2e:ef:e6:2b:19:28:5c:21:3b:72:8f:fe:
         8c:df:a7:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:28 2026 by rpki-client