Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Mj9KUNxi2mgNRlyJIV7NrumrgM8.roa
File:                     Mj9KUNxi2mgNRlyJIV7NrumrgM8.roa (raw, json)
Hash identifier:          vfilowktRunjZt1EEeDWZPFdxShShejqgyM8d43WgrA=
Subject key identifier:   32:3F:4A:50:DC:62:DA:68:0D:46:5C:89:21:5E:CD:AE:E9:AB:80:CF
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       074F
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Mj9KUNxi2mgNRlyJIV7NrumrgM8.roa
Signing time:             Tue 31 Mar 2026 08:27:37 +0000
ROA not before:           Tue 31 Mar 2026 08:27:37 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:c900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1871 (0x74f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:27:37 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=323F4A50DC62DA680D465C89215ECDAEE9AB80CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6b:93:0c:27:26:43:4a:41:91:47:85:54:b7:
                    b6:39:7d:ec:c0:a6:58:19:87:b4:39:88:fe:ca:95:
                    67:a7:ae:b5:e9:65:fc:6c:14:f5:d7:26:04:fd:69:
                    3b:dd:6f:d5:b2:52:53:01:2b:bb:24:ae:a5:38:ef:
                    07:f5:7d:4a:ce:71:78:66:eb:3a:a7:b4:b8:96:37:
                    bf:ef:ba:fc:21:32:d4:ee:2d:d8:41:bb:61:4d:9e:
                    8a:78:9f:03:91:03:21:d0:ae:a6:c6:e7:5f:53:d5:
                    fc:ee:e2:95:aa:17:94:8a:81:a3:a4:c2:6c:df:60:
                    62:a9:4b:3d:70:67:20:bf:0a:04:8a:7f:1d:90:5d:
                    00:38:9c:69:ed:23:b4:34:4f:b4:bb:5b:a3:e3:df:
                    e6:68:42:64:bc:b6:fd:12:4a:34:32:e5:e5:d4:8a:
                    0a:b3:bd:14:d0:a7:9d:85:c5:02:ba:3a:3a:5e:1f:
                    1a:ab:05:b6:53:8e:76:61:08:f5:be:32:c5:1e:18:
                    10:e5:e6:bc:e6:c1:2c:a7:bf:69:0c:d6:88:9d:43:
                    d5:4a:c9:5c:c1:f4:ed:9f:ba:36:f6:24:61:c2:92:
                    d1:68:50:26:d6:90:ae:e2:cf:a3:32:1c:57:d6:d3:
                    5b:cd:e6:d8:7e:34:83:b1:6f:1f:16:d3:08:43:20:
                    3f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:3F:4A:50:DC:62:DA:68:0D:46:5C:89:21:5E:CD:AE:E9:AB:80:CF
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Mj9KUNxi2mgNRlyJIV7NrumrgM8.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:c900::/40

    Signature Algorithm: sha256WithRSAEncryption
         0b:4a:a0:7f:42:df:54:c6:c9:13:46:fa:1b:cb:1a:51:e9:42:
         d0:59:0d:db:b8:df:be:e1:67:4d:40:2c:56:f3:40:67:91:5b:
         37:43:ea:63:ac:bb:4e:ca:2f:eb:15:1f:65:c0:08:a5:bb:b3:
         3b:5d:1a:0e:f3:64:65:1a:73:a1:b3:ed:98:3b:ea:57:8e:c0:
         17:51:73:7b:1f:be:bd:83:ff:bc:4f:3d:2d:6c:ab:08:f0:8f:
         ac:98:b1:30:fb:63:40:44:71:0f:3e:e7:13:45:a4:79:5c:a2:
         0c:e0:da:a9:50:2b:1c:ae:83:b7:30:1c:da:3f:1e:6c:54:1e:
         b3:8e:d0:bf:44:d2:df:28:a2:61:7b:bc:08:0b:d0:3a:43:4a:
         93:6e:23:81:39:2e:1d:11:11:db:86:b1:21:49:00:94:35:fb:
         ee:e0:4e:89:26:e1:7d:f8:a4:75:b0:7e:d6:3d:7c:86:9a:2d:
         11:58:b4:02:26:93:47:e9:fe:b7:26:88:02:65:e0:29:1c:c9:
         d4:ae:9e:8b:33:37:7c:bd:08:4c:1d:7f:b0:97:9c:54:6a:ce:
         f8:92:ee:db:5d:9e:38:75:21:4b:12:8b:44:5f:7c:4f:7c:3b:
         c9:26:c3:72:bf:b5:49:2e:de:ff:61:7a:b9:bb:e5:9e:1d:cf:
         5f:ee:57:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:45 2026 by rpki-client