Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/9lZMhPYX4N59JtsVZt3ua4C9gKQ.roa
File:                     9lZMhPYX4N59JtsVZt3ua4C9gKQ.roa (raw, json)
Hash identifier:          Ql/NXWscVQ2xuz2sCbOwX4gq5/f6XbB07LUb5T8Kn0U=
Subject key identifier:   F6:56:4C:84:F6:17:E0:DE:7D:26:DB:15:66:DD:EE:6B:80:BD:80:A4
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0737
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/9lZMhPYX4N59JtsVZt3ua4C9gKQ.roa
Signing time:             Tue 31 Mar 2026 08:27:26 +0000
ROA not before:           Tue 31 Mar 2026 08:27:26 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:2d00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1847 (0x737)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:27:26 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F6564C84F617E0DE7D26DB1566DDEE6B80BD80A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:8b:ba:f5:a1:01:f2:66:4d:c7:40:80:4b:52:
                    9c:40:9f:dd:e2:8f:87:bf:4a:b8:c9:a7:41:45:96:
                    8b:b4:b8:e7:c6:af:c6:c8:be:20:c1:3d:81:bc:1f:
                    51:63:d5:00:ad:39:ce:25:93:89:ea:4c:17:06:32:
                    b7:36:1e:a6:6e:67:0e:0a:ca:74:b3:7e:07:cc:6d:
                    78:b0:0e:ac:27:c7:63:fd:ea:b4:6c:f1:84:b6:e7:
                    b6:22:3a:33:19:51:39:c3:8a:b3:23:2a:49:41:d8:
                    6e:f7:2e:25:f3:25:f1:37:3d:83:4c:23:6b:6c:a2:
                    7a:f4:44:0b:f8:cd:2c:ec:4b:49:e6:66:d8:20:ad:
                    26:54:f8:3c:f4:8a:63:40:79:2c:5b:21:4c:c3:23:
                    63:0e:8d:94:dd:34:2e:49:d9:b0:53:13:7d:f5:9e:
                    67:ed:5f:b9:b1:71:e2:bb:78:d9:95:78:cf:db:f5:
                    98:44:6f:35:88:48:0a:20:74:4e:64:12:31:ab:2b:
                    71:22:85:0f:89:ce:67:3e:f9:59:b1:7a:0f:7f:20:
                    12:08:8b:1a:52:8d:e9:0e:e9:b1:13:e1:da:e0:fe:
                    13:95:27:f7:ee:e9:2c:f5:20:cf:b0:b0:a5:9f:58:
                    ec:44:89:ab:93:af:d7:f1:9c:03:78:7d:e1:f4:fb:
                    61:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:56:4C:84:F6:17:E0:DE:7D:26:DB:15:66:DD:EE:6B:80:BD:80:A4
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/9lZMhPYX4N59JtsVZt3ua4C9gKQ.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:2d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         40:b2:0b:ca:47:6f:2e:8c:c9:7d:0e:45:19:87:6d:32:45:1a:
         54:ad:10:b7:7f:9f:cb:74:b6:9d:87:a0:f0:ab:1e:f1:f4:35:
         d8:c1:23:c3:81:72:9f:02:4e:7e:45:51:63:25:83:cd:f9:e3:
         a7:27:22:23:52:5f:fd:4b:61:f6:3d:40:e9:52:13:ed:99:62:
         5f:b2:78:99:09:cc:53:08:1b:59:71:ec:a5:42:84:f7:ee:80:
         74:66:72:22:af:5d:b2:1b:8c:8b:ca:70:2f:07:b6:11:6d:ce:
         3e:df:c1:a8:77:91:7c:35:2a:3e:b6:b3:21:cc:82:41:1a:a5:
         56:1a:16:75:3a:dd:6d:1e:1a:eb:9f:4b:e7:e6:c1:3a:5f:43:
         99:7f:88:a0:e7:39:18:b8:12:78:e0:4e:a7:c5:b3:49:eb:dc:
         41:71:00:39:4b:d1:ff:86:e5:a7:b4:83:bb:98:ac:24:15:a2:
         84:ec:25:2d:ce:ae:9d:f2:3b:31:a1:67:69:b7:46:36:01:dd:
         57:09:89:11:6f:a8:12:a2:2d:d1:41:7a:cc:dc:43:8f:79:da:
         ed:74:6b:89:dd:c1:86:7d:b1:b5:e9:7c:a1:68:4f:f9:44:b6:
         5d:89:db:13:f1:f4:77:79:54:84:96:b6:49:c4:cd:93:ed:2e:
         cb:21:ca:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:28 2026 by rpki-client