Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/UJA33ux2slxspdbG_znVE2IMWXA.roa
File:                     UJA33ux2slxspdbG_znVE2IMWXA.roa (raw, json)
Hash identifier:          FA/vyJqdZ/2XvEEin2ZEeqfOGvhJmxqMS0/5JNx+8ww=
Subject key identifier:   50:90:37:DE:EC:76:B2:5C:6C:A5:D6:C6:FF:39:D5:13:62:0C:59:70
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       06FE
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/UJA33ux2slxspdbG_znVE2IMWXA.roa
Signing time:             Tue 31 Mar 2026 08:26:57 +0000
ROA not before:           Tue 31 Mar 2026 08:26:57 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:b00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1790 (0x6fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:26:57 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=509037DEEC76B25C6CA5D6C6FF39D513620C5970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:96:cb:bb:47:29:ff:94:fc:03:f3:92:09:4f:
                    d9:1e:08:eb:71:a1:91:b5:a1:9a:eb:68:b1:9d:f7:
                    04:82:51:de:df:2e:04:79:45:d1:45:b7:32:79:80:
                    67:88:e4:b8:2b:ee:90:74:b8:7e:eb:53:97:67:58:
                    4a:18:25:be:7f:03:0e:de:5f:fb:43:4e:9b:c4:dd:
                    fd:77:b1:97:29:ef:cf:81:63:eb:55:0a:95:5e:2a:
                    63:4f:91:75:a3:e6:eb:14:e9:b9:84:eb:5b:e5:cd:
                    74:7c:22:96:f8:5a:e7:4e:48:df:a5:d5:fc:06:f3:
                    27:a6:48:6c:b6:f1:98:23:d7:fb:15:f8:24:a4:c3:
                    9c:07:b0:a1:98:8d:38:53:8a:5e:60:51:3d:8a:15:
                    f6:e1:c7:cd:eb:b2:d7:ff:26:86:04:19:f2:4f:e9:
                    1c:05:20:b9:bd:4c:dc:32:6c:cb:d3:69:cb:0e:52:
                    a2:55:58:72:9f:8b:f3:e6:a7:6c:f0:d3:60:a5:90:
                    2e:fe:31:85:df:88:a7:bf:77:b0:f9:cb:68:47:40:
                    c7:88:8f:be:d0:4b:aa:92:0f:4d:d8:4f:98:47:f8:
                    c1:2b:5e:64:ed:4d:df:21:12:3b:5a:39:08:6a:7e:
                    a3:4c:72:6a:88:02:f3:15:0a:80:f4:32:d7:ea:e7:
                    cd:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:90:37:DE:EC:76:B2:5C:6C:A5:D6:C6:FF:39:D5:13:62:0C:59:70
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/UJA33ux2slxspdbG_znVE2IMWXA.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         81:66:cc:96:ed:8a:c6:c4:e4:9c:23:3e:5b:70:89:b5:da:7b:
         4b:e3:b8:d1:9b:bd:33:bf:c9:11:fa:ef:51:4e:f0:66:69:65:
         db:db:86:5f:9d:ad:9e:b4:a3:34:d1:94:e5:c9:3e:03:00:ec:
         75:13:1b:a2:b3:a5:a6:8e:68:78:80:5a:4d:db:1c:e1:83:bb:
         e8:9d:a8:87:17:8f:42:9b:b3:ec:b0:23:f3:71:30:62:30:e5:
         b0:02:26:8c:f5:ae:e9:e5:30:d4:02:1e:eb:19:fc:75:b6:78:
         70:61:5d:32:ab:ff:fe:5d:b0:fc:04:c4:4e:cc:b3:61:be:99:
         8b:68:3d:fa:22:6f:de:fa:8b:98:7e:9e:a5:63:2a:84:e8:cf:
         d5:ac:4c:aa:f9:d9:0a:22:95:9b:58:f0:0d:1f:23:50:31:f4:
         02:7c:d0:da:79:09:91:d0:c3:a7:64:c0:0f:24:4a:fd:5b:3e:
         91:e3:b4:da:56:1e:7f:a7:c9:75:ef:7a:fe:71:b4:e0:6e:8f:
         56:24:21:a7:e9:fc:80:e6:ff:32:ad:0e:04:44:43:d9:bc:06:
         4f:81:c5:ab:32:8e:8c:f9:bf:24:fb:d2:ad:78:b0:38:d6:02:
         22:1c:c5:1d:0a:8e:97:d3:4f:16:11:0b:cf:42:64:88:dd:72:
         1c:28:4b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:50 2026 by rpki-client