Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/L6yiOr7imBRy03HcFdPdaNyWJAU.roa
File:                     L6yiOr7imBRy03HcFdPdaNyWJAU.roa (raw, json)
Hash identifier:          HYrlFGZm6cT7+txPZ/hGxEn8R/Bh61bCkMWR+9yAvgk=
Subject key identifier:   2F:AC:A2:3A:BE:E2:98:14:72:D3:71:DC:15:D3:DD:68:DC:96:24:05
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       06D4
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/L6yiOr7imBRy03HcFdPdaNyWJAU.roa
Signing time:             Tue 31 Mar 2026 08:26:39 +0000
ROA not before:           Tue 31 Mar 2026 08:26:39 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:db00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1748 (0x6d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:26:39 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=2FACA23ABEE2981472D371DC15D3DD68DC962405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:52:00:3f:5c:f0:e7:bd:a8:c0:ba:43:dd:d2:
                    dc:8a:94:ad:02:b6:94:ea:e8:53:b5:1f:88:15:d6:
                    05:08:9b:3a:47:47:51:70:57:be:96:54:91:16:2e:
                    4e:04:f0:cf:ea:f9:25:2d:21:30:2d:c3:5b:89:1a:
                    a4:04:d1:f3:b7:e6:e2:8f:f3:9c:a7:1e:58:cf:8f:
                    c3:9e:49:0f:b7:4d:17:40:01:89:66:d6:6f:d4:f2:
                    85:e6:a8:fe:c2:bf:5b:1c:4f:a4:f8:b4:9c:59:05:
                    e9:d2:c2:05:29:0d:a6:52:ef:ec:98:01:4e:ca:88:
                    c7:d9:6f:11:f2:13:bd:49:be:a1:ce:2e:c9:3e:f5:
                    f6:25:76:f0:de:1a:7b:74:dd:dc:01:1e:fd:7c:0b:
                    54:87:03:d1:b4:14:f1:42:90:3d:11:17:ab:50:60:
                    88:72:96:99:7c:99:ec:92:02:26:8f:b9:df:14:3f:
                    c1:e7:fd:95:d9:31:7c:d1:10:7c:26:b4:24:8f:b8:
                    8f:6d:a4:22:0c:87:f9:cf:56:40:3d:1b:db:f7:b8:
                    61:75:5e:08:7c:da:89:e9:b4:3a:9c:ea:e8:73:3b:
                    c1:e2:0c:74:c5:c6:24:7f:e6:21:8b:17:a3:3e:52:
                    98:39:a3:17:48:9f:1f:f9:c5:a3:66:e1:25:a3:07:
                    85:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:AC:A2:3A:BE:E2:98:14:72:D3:71:DC:15:D3:DD:68:DC:96:24:05
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/L6yiOr7imBRy03HcFdPdaNyWJAU.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:db00::/40

    Signature Algorithm: sha256WithRSAEncryption
         b4:0d:92:12:86:4c:32:98:19:7f:b7:34:f2:8e:95:a2:8f:77:
         2e:42:ab:21:a6:a6:46:45:2a:2f:36:8a:0e:22:44:e9:d3:9f:
         8e:ee:8d:e6:7e:c0:f0:a3:14:31:84:5d:d8:6f:37:54:7e:e4:
         a5:5a:6b:b1:02:2a:99:8a:e8:e2:ac:42:25:c6:e3:31:a4:3b:
         a6:b6:b0:e1:79:31:79:17:b7:73:ff:fa:8a:21:5d:7a:ba:02:
         29:cc:f6:3e:7e:bd:dd:e9:8c:ca:5e:7e:28:4d:e8:54:94:84:
         5d:f5:02:0e:aa:d3:26:00:86:70:68:43:bd:de:f6:2b:d3:52:
         4b:85:7c:fe:ab:f0:7b:6a:0b:47:69:f9:00:9e:ab:d3:90:c0:
         bc:4d:5d:4e:64:fa:21:e2:b0:8d:6f:46:a4:57:32:7f:70:b0:
         49:66:b9:d2:36:e7:9e:95:86:c4:6f:53:00:a8:83:6d:6d:3a:
         3f:0a:4a:ee:bc:89:cd:3a:f0:20:de:85:a4:c2:42:dd:30:1e:
         61:25:74:a3:ce:da:cc:52:ff:f8:34:4b:3b:17:29:b5:36:fd:
         0f:c8:29:14:d3:3b:34:d0:90:92:cd:4f:06:8f:12:05:5a:e9:
         67:0c:ef:d6:72:36:48:68:58:ba:c3:0e:7b:02:b8:65:2e:de:
         68:9e:2c:80
-----BEGIN CERTIFICATE-----
MIIEwzCCA6ugAwIBAgICBtQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjAzMzEw
ODI2MzlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDJGQUNBMjNBQkVFMjk4
MTQ3MkQzNzFEQzE1RDNERDY4REM5NjI0MDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDOUgA/XPDnvajAukPd0tyKlK0CtpTq6FO1H4gV1gUImzpHR1Fw
V76WVJEWLk4E8M/q+SUtITAtw1uJGqQE0fO35uKP85ynHljPj8OeSQ+3TRdAAYlm
1m/U8oXmqP7Cv1scT6T4tJxZBenSwgUpDaZS7+yYAU7KiMfZbxHyE71JvqHOLsk+
9fYldvDeGnt03dwBHv18C1SHA9G0FPFCkD0RF6tQYIhylpl8meySAiaPud8UP8Hn
/ZXZMXzREHwmtCSPuI9tpCIMh/nPVkA9G9v3uGF1Xgh82onptDqc6uhzO8HiDHTF
xiR/5iGLF6M+Upg5oxdInx/5xaNm4SWjB4WvAgMBAAGjggHfMIIB2zAdBgNVHQ4E
FgQUL6yiOr7imBRy03HcFdPdaNyWJAUwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDEyOS9MNnlpT3I3aW1CUnkwM0hjRmRQZGFOeVdKQVUucm9h
MCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJAoAa9swDQYJKoZIhvcNAQEL
BQADggEBALQNkhKGTDKYGX+3NPKOlaKPdy5CqyGmpkZFKi82ig4iROnTn47ujeZ+
wPCjFDGEXdhvN1R+5KVaa7ECKpmK6OKsQiXG4zGkO6a2sOF5MXkXt3P/+oohXXq6
AinM9j5+vd3pjMpefihN6FSUhF31Ag6q0yYAhnBoQ73e9ivTUkuFfP6r8HtqC0dp
+QCeq9OQwLxNXU5k+iHisI1vRqRXMn9wsElmudI2556VhsRvUwCog21tOj8KSu68
ic068CDehaTCQt0wHmEldKPO2sxS//g0SzsXKbU2/Q/IKRTTOzTQkJLNTwaPEgVa
6WcM79ZyNkhoWLrDDnsCuGUu3mieLIA=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:31 2026 by rpki-client