Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Sn-wh_5_vp_3z5_lDbt0yZY31-s.roa
File:                     Sn-wh_5_vp_3z5_lDbt0yZY31-s.roa (raw, json)
Hash identifier:          N7ek3KPAKQD55CqXn/1UC/8iJm4CBw4p2IoY7Y6/Qbk=
Subject key identifier:   4A:7F:B0:87:FE:7F:BE:9F:F7:CF:9F:E5:0D:BB:74:C9:96:37:D7:EB
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       075B
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Sn-wh_5_vp_3z5_lDbt0yZY31-s.roa
Signing time:             Tue 31 Mar 2026 08:27:43 +0000
ROA not before:           Tue 31 Mar 2026 08:27:43 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:4d00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1883 (0x75b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:27:43 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=4A7FB087FE7FBE9FF7CF9FE50DBB74C99637D7EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:13:d2:69:0e:7f:9b:fa:54:ef:fe:aa:03:d5:
                    ac:46:75:bf:ff:e4:bf:ee:38:a9:f7:62:2a:a6:06:
                    54:e0:59:3f:46:91:f1:65:df:74:13:88:e2:f0:91:
                    57:22:0f:13:e5:ae:7f:a1:74:65:21:5f:e1:39:b5:
                    88:70:f9:81:7c:23:c3:69:ca:dc:31:9e:29:71:5b:
                    76:89:89:e3:0c:21:28:80:9b:5a:dc:58:c3:e0:eb:
                    a4:70:16:60:9b:99:79:5b:43:b5:0a:42:20:cc:7c:
                    49:b7:d8:aa:36:f6:f6:08:7c:97:33:b5:9f:b5:1f:
                    56:21:4d:da:8e:6c:d1:d5:d8:67:c9:40:0c:ae:8d:
                    98:f5:40:39:c2:64:a4:5c:8d:50:18:3e:f3:8d:0f:
                    51:8a:ec:6e:96:58:eb:2b:b1:9a:0f:2e:60:be:37:
                    d7:4d:27:6a:26:22:35:c1:b7:24:b6:59:97:9f:86:
                    cb:63:48:14:0e:98:4c:80:88:51:fc:c7:1a:b5:60:
                    d1:01:48:b1:1c:c0:d5:e0:98:dd:08:a6:08:21:4e:
                    e2:f7:3f:8e:70:11:6d:fe:1f:ec:b3:d8:f4:56:e8:
                    ef:97:26:8a:29:cb:1b:02:09:a6:ac:26:94:58:82:
                    e6:bf:fa:50:0a:e1:0e:d7:47:c0:51:c8:e4:a2:f7:
                    a6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:7F:B0:87:FE:7F:BE:9F:F7:CF:9F:E5:0D:BB:74:C9:96:37:D7:EB
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Sn-wh_5_vp_3z5_lDbt0yZY31-s.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:4d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         12:10:19:10:c7:96:7d:0a:7e:0f:1d:02:43:f3:f0:0b:81:cc:
         48:ae:b0:53:89:3a:58:63:1b:5c:24:3d:76:fa:2e:40:ab:5a:
         a5:8c:d9:1b:2e:27:3e:ac:72:a3:36:de:20:d8:b9:27:17:42:
         80:53:c6:e8:ff:8a:7c:55:7b:3a:c7:48:f1:d2:ce:4f:98:95:
         ff:35:ef:25:f4:27:77:59:ed:18:c4:b5:1c:2f:77:e7:07:03:
         f6:00:77:84:86:84:cc:05:e5:bc:a9:16:13:2d:8c:67:8d:ca:
         6f:e6:a2:4d:17:85:da:80:e9:87:d1:9b:4a:df:c8:b6:9c:d2:
         24:5b:50:06:4b:cb:4f:c0:53:26:90:2a:a7:a6:79:c4:7d:c7:
         c0:d2:bd:94:3e:64:b5:b2:fe:ba:12:da:2a:bf:1c:9d:75:80:
         d7:8c:71:3e:5a:1a:c9:ec:be:6d:13:ad:86:cb:16:32:09:38:
         61:29:d3:5b:61:82:bd:69:ab:fb:1f:ad:ce:1f:53:d9:40:42:
         13:7a:7d:b4:41:9e:a9:a8:a4:84:9f:08:8a:87:df:bd:ea:06:
         aa:d6:90:20:ec:1e:2d:29:a9:a7:07:43:64:e7:6a:69:03:41:
         b3:e6:20:74:2b:47:47:cb:e7:40:c2:6c:a2:99:a2:58:ba:6e:
         e8:ab:3d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:28 2026 by rpki-client