Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/FdiXhpK8_F5D82pnh571LsAHwAU.roa
File:                     FdiXhpK8_F5D82pnh571LsAHwAU.roa (raw, json)
Hash identifier:          sXcSOq171UhEl34azfxqf3v9ZH+rWTHrDSdajohRjb8=
Subject key identifier:   15:D8:97:86:92:BC:FC:5E:43:F3:6A:67:87:9E:F5:2E:C0:07:C0:05
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0720
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/FdiXhpK8_F5D82pnh571LsAHwAU.roa
Signing time:             Tue 31 Mar 2026 08:27:14 +0000
ROA not before:           Tue 31 Mar 2026 08:27:14 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:1a00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1824 (0x720)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:27:14 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=15D8978692BCFC5E43F36A67879EF52EC007C005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6a:8d:a9:ba:81:91:5f:61:bd:12:15:e8:55:
                    51:80:d8:5d:a8:25:ac:70:cc:a9:6a:3b:20:64:5c:
                    fa:35:ea:9d:5a:0c:2c:0f:d9:c7:01:ea:a5:85:57:
                    2b:16:7c:a1:c4:0c:43:17:bc:01:d1:a3:b2:95:eb:
                    04:2e:6c:f0:9c:d9:f6:99:0e:65:be:70:40:52:83:
                    08:d1:f5:fd:de:38:06:c5:18:a3:b5:12:02:b6:b0:
                    75:a5:f2:19:73:95:7a:53:4a:40:96:d7:9c:ec:27:
                    d5:84:07:51:d8:6b:94:59:cd:0d:3c:ff:79:af:6a:
                    ec:30:65:a2:d6:af:54:dd:4d:27:2d:58:66:c4:f5:
                    e9:c1:ff:96:28:9b:e9:4f:4d:55:30:d8:67:7f:6a:
                    bc:d4:9d:dc:55:c6:ec:f9:5e:3d:60:24:ae:d1:37:
                    e3:fb:2b:67:d3:0a:67:5d:5c:b3:52:9a:50:5c:bb:
                    55:7c:1c:68:1d:14:00:c8:e5:b1:c6:ea:ab:d9:bf:
                    e9:44:0a:6d:52:7e:16:67:f2:36:a2:01:40:b1:86:
                    02:be:ee:e7:ae:67:e8:2b:5f:11:92:0f:07:e1:23:
                    bb:9a:90:3b:a5:c6:85:b2:16:c1:c8:e1:b3:1d:44:
                    db:09:8d:3e:35:0c:d9:37:55:ed:9d:16:33:44:ca:
                    c7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:D8:97:86:92:BC:FC:5E:43:F3:6A:67:87:9E:F5:2E:C0:07:C0:05
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/FdiXhpK8_F5D82pnh571LsAHwAU.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:1a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         15:99:83:01:8d:d2:15:16:f8:3d:04:ec:94:54:16:2c:73:c4:
         b1:09:45:1d:60:d9:63:83:2a:c3:79:bb:a0:cc:68:58:64:1b:
         13:91:50:db:34:da:64:eb:cf:ec:9d:98:d9:a8:fd:6d:9e:b3:
         64:45:ea:ad:60:76:c9:79:19:4a:68:4e:9d:a4:c8:fb:67:30:
         ba:d2:a0:28:a1:b8:c3:85:3e:50:52:48:fe:34:6b:43:48:59:
         6d:03:af:3b:7a:83:bb:d3:0c:6b:4a:b4:51:f3:7e:2e:9a:40:
         7b:a9:fd:4f:e8:f2:ac:83:0f:51:38:42:01:c2:3d:6f:fd:d4:
         26:90:7c:27:3f:7f:73:20:3a:6b:fd:9e:fa:ee:52:09:3b:9a:
         8a:ae:1d:28:ea:f5:86:25:3f:f2:49:46:b2:4e:f2:57:ae:7a:
         21:1e:18:bd:b7:be:e0:70:ea:f9:2f:27:7b:95:aa:f9:9a:45:
         8e:d8:4a:dd:09:26:f8:df:9f:44:77:ae:5a:0f:6f:50:d1:0e:
         0b:de:74:77:ae:c5:4c:b9:2d:b4:fb:84:83:73:ae:cf:46:66:
         2e:af:cd:61:23:61:71:4f:54:b8:33:f6:ae:9a:ce:03:9a:91:
         be:ba:2d:ec:de:b5:2e:d4:5f:85:60:18:b3:ea:f6:4d:bf:2e:
         37:9f:f7:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:38 2026 by rpki-client