Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Joyfw6hnqaBsySJ6A_J3oFMU18I.roa
File:                     Joyfw6hnqaBsySJ6A_J3oFMU18I.roa (raw, json)
Hash identifier:          /d2ypayBKAlbCV8tXxmQ+b1J0wdfXI9CsosoFcRcH78=
Subject key identifier:   26:8C:9F:C3:A8:67:A9:A0:6C:C9:22:7A:03:F2:77:A0:53:14:D7:C2
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       075D
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Joyfw6hnqaBsySJ6A_J3oFMU18I.roa
Signing time:             Tue 31 Mar 2026 08:27:44 +0000
ROA not before:           Tue 31 Mar 2026 08:27:44 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:f200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1885 (0x75d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:27:44 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=268C9FC3A867A9A06CC9227A03F277A05314D7C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:da:4b:49:19:96:53:61:b1:7b:37:99:c3:13:
                    99:4b:fa:6a:ee:00:97:d9:43:ba:90:d7:d8:38:32:
                    fc:a1:e7:77:60:1a:30:87:58:41:a8:d2:c6:7a:c4:
                    4d:72:95:08:0c:9d:f0:f3:60:15:9e:3b:28:65:77:
                    68:75:1f:cb:9d:a4:e1:22:fc:23:13:aa:ad:32:9b:
                    b0:d3:67:c0:4a:73:1f:d7:07:0f:37:76:70:2b:8c:
                    24:e9:d7:89:15:59:ed:48:0a:08:ab:eb:06:d7:a3:
                    87:64:07:27:15:19:52:b7:1f:aa:bd:db:0d:a6:de:
                    2d:58:6b:cc:75:25:eb:8c:ea:58:14:02:19:bd:79:
                    c3:22:08:3b:ad:ad:59:11:31:cf:52:b8:54:34:4c:
                    91:35:01:b9:44:77:cb:7b:d0:74:1a:f9:a9:ec:3b:
                    a2:a2:ac:ba:71:46:a6:41:a6:69:f9:d3:47:bf:dc:
                    42:f6:5a:14:38:99:20:f0:da:60:08:2b:f0:31:25:
                    ff:83:1c:8d:2a:27:02:83:ba:c8:55:de:22:c1:e1:
                    b6:4c:cb:d3:6f:e0:f6:75:48:1d:31:78:e3:ee:82:
                    f4:3a:f3:65:c7:c3:7f:58:a9:f3:9a:e5:49:8f:e6:
                    ed:94:4d:0b:11:44:ab:87:44:d3:da:c1:f9:70:64:
                    cf:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:8C:9F:C3:A8:67:A9:A0:6C:C9:22:7A:03:F2:77:A0:53:14:D7:C2
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Joyfw6hnqaBsySJ6A_J3oFMU18I.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:f200::/40

    Signature Algorithm: sha256WithRSAEncryption
         b5:52:1f:7d:97:0f:53:28:11:58:5d:ba:a0:18:60:21:90:0b:
         76:16:3f:dc:2d:1e:8d:d6:07:9f:51:f5:5b:38:f2:ab:be:65:
         75:05:69:87:dd:e5:2b:d4:27:92:9a:f0:cb:9e:3f:72:81:24:
         58:f4:d3:cb:d7:d9:30:5c:da:c8:c4:b5:cc:7d:77:7e:f8:eb:
         ef:6e:d1:b5:2a:38:ba:cc:58:a4:ca:33:cc:2b:bf:7a:73:f8:
         0c:e5:fb:21:6e:35:22:cc:ff:c9:85:9c:f6:8a:49:ac:84:46:
         3b:a4:bf:1f:41:dd:d0:b8:f5:26:82:12:94:b5:1b:53:b4:58:
         5f:5b:c2:15:ef:c6:ff:8c:fb:d3:4b:25:d4:5b:79:fb:af:a4:
         1f:dd:5c:3d:27:37:11:a8:6f:f6:1c:95:26:49:8e:de:bd:fc:
         4e:f1:b9:b7:ac:92:ec:21:6b:f3:51:a7:61:7d:26:ea:27:20:
         ca:d3:30:a0:91:52:5f:00:5e:d0:13:8e:3f:f4:a5:1c:6e:b7:
         ea:b9:17:39:98:55:70:11:ce:2c:3f:67:45:18:00:93:8d:37:
         87:51:60:87:67:b4:9c:e4:9e:2e:2a:7a:40:a3:8f:90:53:32:
         bb:a9:fd:fa:95:e6:f7:9c:f9:1a:91:16:7f:f4:eb:96:96:fd:
         31:c6:1a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 22:24:56 2026 by rpki-client