Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/HslZYC7N-m3rejDl0Q4nT4KTohw.roa
File:                     HslZYC7N-m3rejDl0Q4nT4KTohw.roa (raw, json)
Hash identifier:          C3obR/2uHN2znNXsWkMndbVfsjaR0nLlGZFN++CzIRc=
Subject key identifier:   1E:C9:59:60:2E:CD:FA:6D:EB:7A:30:E5:D1:0E:27:4F:82:93:A2:1C
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0688
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/HslZYC7N-m3rejDl0Q4nT4KTohw.roa
Signing time:             Tue 31 Mar 2026 08:26:04 +0000
ROA not before:           Tue 31 Mar 2026 08:26:04 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:1b00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1672 (0x688)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:26:04 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=1EC959602ECDFA6DEB7A30E5D10E274F8293A21C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:68:d1:50:5e:10:4b:e4:89:2f:b7:80:dc:49:
                    06:d8:b1:7d:06:f3:c5:13:7f:63:b8:34:46:67:ce:
                    bf:90:d4:18:f7:34:fe:bf:1a:83:8b:06:30:83:9f:
                    a1:a5:c8:e3:8f:57:13:4b:ea:17:17:a8:f7:f4:d0:
                    76:cc:ee:fd:3a:4a:ec:8b:15:de:46:e4:f7:72:03:
                    0a:19:6f:d6:b6:9c:13:03:7b:ee:51:5c:90:b2:76:
                    b7:e1:8c:74:86:3d:d3:a0:6a:cb:4f:b8:a7:a1:44:
                    fa:d0:dd:79:a9:3a:c2:1d:76:75:f3:48:56:9b:32:
                    1f:da:ef:c0:24:d8:85:88:f9:14:bd:bd:d5:14:2d:
                    f4:17:ed:0c:f8:e9:a6:31:7e:23:a1:10:68:68:87:
                    04:7a:31:83:cf:df:6e:17:9b:3e:1c:5e:53:61:28:
                    5c:0a:20:62:ae:80:94:dc:f9:7f:98:a1:c7:5a:8a:
                    a8:7b:b2:17:aa:fd:6d:e7:24:64:bf:46:42:27:b2:
                    6c:ab:05:84:71:19:c5:bf:d0:b4:0d:dc:85:68:f5:
                    5b:58:ef:26:d4:11:fb:e0:06:d6:d6:02:68:b1:ad:
                    e5:ec:45:e2:42:09:57:57:8a:5c:70:e0:a2:79:18:
                    a4:df:af:3d:f4:47:ec:cd:32:2f:77:c0:e2:5b:01:
                    bb:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:C9:59:60:2E:CD:FA:6D:EB:7A:30:E5:D1:0E:27:4F:82:93:A2:1C
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/HslZYC7N-m3rejDl0Q4nT4KTohw.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:1b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         c3:f2:02:83:97:2f:15:21:2c:53:9d:66:a5:ae:27:b7:14:98:
         41:39:c7:03:c5:25:27:9b:17:39:88:bb:da:a3:7d:95:72:bb:
         b8:f2:94:a4:30:37:a7:8f:46:8a:51:a7:67:67:05:8c:51:e1:
         bc:d2:58:57:70:1f:95:5e:ab:dd:89:36:f3:64:eb:c1:e7:1e:
         1e:25:a3:8f:a4:74:88:4b:77:ab:de:de:6a:fd:cc:22:33:e1:
         d6:f6:58:37:82:e6:9d:4e:8f:f3:c5:c8:7a:54:dc:ef:78:39:
         4b:24:a3:16:d4:80:84:36:dc:96:cc:41:c5:30:74:57:97:ae:
         49:d3:38:fe:f3:50:70:6f:57:33:d5:b1:19:74:87:e0:96:f3:
         57:a9:34:62:78:58:fe:a1:56:c6:78:7c:0f:0a:0e:1f:46:55:
         d1:46:b3:4b:a7:f8:2e:ca:ac:fe:c5:73:8d:88:ba:d6:cd:eb:
         c2:27:81:61:54:72:3f:e0:19:86:cd:4c:f1:9f:ce:f9:77:a3:
         6d:43:1c:83:3a:6b:e3:dd:d2:10:c6:0c:96:c9:7b:66:69:ef:
         2b:10:53:77:67:a8:95:00:70:78:da:52:1d:c9:1f:7d:d9:f8:
         15:23:27:b9:60:bb:dc:d7:9a:16:96:87:45:7c:37:4f:b4:3d:
         64:c2:b0:34
-----BEGIN CERTIFICATE-----
MIIEwzCCA6ugAwIBAgICBogwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjAzMzEw
ODI2MDRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDFFQzk1OTYwMkVDREZB
NkRFQjdBMzBFNUQxMEUyNzRGODI5M0EyMUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDqaNFQXhBL5Ikvt4DcSQbYsX0G88UTf2O4NEZnzr+Q1Bj3NP6/
GoOLBjCDn6GlyOOPVxNL6hcXqPf00HbM7v06SuyLFd5G5PdyAwoZb9a2nBMDe+5R
XJCydrfhjHSGPdOgastPuKehRPrQ3XmpOsIddnXzSFabMh/a78Ak2IWI+RS9vdUU
LfQX7Qz46aYxfiOhEGhohwR6MYPP324Xmz4cXlNhKFwKIGKugJTc+X+Yocdaiqh7
sheq/W3nJGS/RkInsmyrBYRxGcW/0LQN3IVo9VtY7ybUEfvgBtbWAmixreXsReJC
CVdXilxw4KJ5GKTfrz30R+zNMi93wOJbAbt/AgMBAAGjggHfMIIB2zAdBgNVHQ4E
FgQUHslZYC7N+m3rejDl0Q4nT4KTohwwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDEyOS9Ic2xaWUM3Ti1tM3JlakRsMFE0blQ0S1RvaHcucm9h
MCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJAoAaxswDQYJKoZIhvcNAQEL
BQADggEBAMPyAoOXLxUhLFOdZqWuJ7cUmEE5xwPFJSebFzmIu9qjfZVyu7jylKQw
N6ePRopRp2dnBYxR4bzSWFdwH5Veq92JNvNk68HnHh4lo4+kdIhLd6ve3mr9zCIz
4db2WDeC5p1Oj/PFyHpU3O94OUskoxbUgIQ23JbMQcUwdFeXrknTOP7zUHBvVzPV
sRl0h+CW81epNGJ4WP6hVsZ4fA8KDh9GVdFGs0un+C7KrP7Fc42IutbN68IngWFU
cj/gGYbNTPGfzvl3o21DHIM6a+Pd0hDGDJbJe2Zp7ysQU3dnqJUAcHjaUh3JH33Z
+BUjJ7lgu9zXmhaWh0V8N0+0PWTCsDQ=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:39 2026 by rpki-client