Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/93mySwNq3cKqNe20nJMdeYCLf7A.roa
File:                     93mySwNq3cKqNe20nJMdeYCLf7A.roa (raw, json)
Hash identifier:          f+7ckwPYs9hsYvX2Pbc2phtBKw9fU6emp4MxK8th+6I=
Subject key identifier:   F7:79:B2:4B:03:6A:DD:C2:AA:35:ED:B4:9C:93:1D:79:80:8B:7F:B0
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       072B
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/93mySwNq3cKqNe20nJMdeYCLf7A.roa
Signing time:             Tue 31 Mar 2026 08:27:20 +0000
ROA not before:           Tue 31 Mar 2026 08:27:20 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:e300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1835 (0x72b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:27:20 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F779B24B036ADDC2AA35EDB49C931D79808B7FB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:03:e1:2b:54:26:4b:fd:f6:4b:2a:6c:c1:6a:
                    27:45:34:26:c3:4e:db:e5:78:de:60:31:2c:b6:66:
                    4d:1a:d5:f6:ec:1c:3d:d3:00:3c:7a:ec:50:a1:c8:
                    3d:05:eb:c4:6b:d8:2e:2e:58:62:d3:ce:8e:b4:0b:
                    6b:26:8d:37:45:f0:22:aa:bd:cd:de:fa:9c:15:1a:
                    6c:b3:1c:7b:aa:65:07:52:70:1c:d8:48:47:9c:dc:
                    d5:44:c4:50:8f:72:ab:d4:d3:3b:95:b6:0b:7f:b4:
                    a3:34:aa:88:b4:39:34:93:89:8b:e5:97:3b:5a:ca:
                    c4:21:38:d7:e1:ef:ed:eb:34:2b:a8:a1:6c:11:d2:
                    2d:f1:3c:f5:2f:45:4c:c6:10:aa:97:36:b7:fd:86:
                    17:97:d6:d3:92:bf:89:8d:08:12:57:b2:ae:b0:25:
                    a9:ca:e5:c2:46:4e:a0:a9:fe:b9:a2:88:66:59:4d:
                    e1:29:91:c6:a5:f7:d1:80:5d:78:95:24:ab:40:76:
                    d2:15:a3:24:93:a7:b1:37:ca:e3:cb:fc:91:e5:a5:
                    39:ec:d9:f4:f0:f0:91:38:89:18:ce:8d:17:ee:37:
                    71:be:f6:3c:e9:ca:1a:4b:dd:60:29:d5:3d:93:fb:
                    11:a0:5a:ce:a8:f7:f3:64:9a:2a:7d:e9:a4:72:1e:
                    6b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:79:B2:4B:03:6A:DD:C2:AA:35:ED:B4:9C:93:1D:79:80:8B:7F:B0
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/93mySwNq3cKqNe20nJMdeYCLf7A.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:e300::/40

    Signature Algorithm: sha256WithRSAEncryption
         90:26:c6:c3:29:b1:f0:0c:27:0d:5b:60:bb:00:13:a6:fc:63:
         48:1e:28:fc:03:63:45:e6:e3:28:39:bb:9e:aa:a2:22:41:df:
         06:e6:f9:41:df:9a:f0:4a:91:36:dd:6e:15:b5:8a:48:40:79:
         76:ab:8b:2b:2f:73:d3:f0:3e:7a:b5:04:d5:07:8c:a0:ac:be:
         c5:56:23:ec:8b:cc:e2:a8:3c:1a:7a:30:9a:eb:77:f7:6d:bb:
         c7:42:a7:60:30:fc:9b:43:7d:55:90:ed:fd:46:82:68:bd:dc:
         e1:1d:e1:b1:ca:35:e1:1a:a5:7c:e8:b7:26:7f:e9:b6:c6:1a:
         c5:69:f6:43:91:bf:5b:ce:b0:45:68:d8:61:66:e6:0f:1b:b0:
         ca:a2:a3:e2:2c:94:da:9a:49:c3:c9:ed:99:09:9a:ff:27:91:
         38:36:6b:57:b0:d9:63:06:1c:01:cc:b7:e4:e5:04:31:d3:0d:
         c9:10:bc:e1:0b:14:5a:1c:8d:54:9a:b6:dc:04:b1:0c:13:0b:
         dd:13:fd:9d:5f:3e:af:83:f9:c6:3a:f2:72:39:11:b6:43:fe:
         f7:bb:4f:b3:b8:ee:e4:5c:52:d8:61:99:92:f6:3f:0b:f9:4a:
         66:c8:2f:e6:0a:99:12:08:a8:e4:4b:10:3a:a0:a5:62:2c:66:
         8e:ee:7e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:36 2026 by rpki-client