Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Wx1LaZ3AOPtegZ93Sc2ZR5u2n0c.roa
File:                     Wx1LaZ3AOPtegZ93Sc2ZR5u2n0c.roa (raw, json)
Hash identifier:          mxTDtE29SdCgyonNf9N1Aiq8vWxCy1SO3S2Hd56I0wY=
Subject key identifier:   5B:1D:4B:69:9D:C0:38:FB:5E:81:9F:77:49:CD:99:47:9B:B6:9F:47
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0721
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Wx1LaZ3AOPtegZ93Sc2ZR5u2n0c.roa
Signing time:             Tue 31 Mar 2026 08:27:15 +0000
ROA not before:           Tue 31 Mar 2026 08:27:15 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:c300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1825 (0x721)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:27:15 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=5B1D4B699DC038FB5E819F7749CD99479BB69F47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:35:c0:b3:eb:9d:e6:39:c5:f9:e3:89:f1:55:
                    15:0c:cc:a3:1e:09:31:a9:60:f3:eb:fd:eb:6d:49:
                    dd:50:90:d3:d3:ff:25:e1:80:fd:5f:3a:39:45:9d:
                    45:dd:bc:00:53:4d:a0:43:62:2d:be:3a:e2:c9:57:
                    73:8e:f0:91:e5:79:45:9e:09:27:0e:bb:99:4f:c1:
                    55:54:23:76:d7:a6:42:35:b0:99:b3:13:b8:d6:b6:
                    10:52:c7:e7:60:ee:8d:c4:35:d8:51:9b:52:2b:07:
                    35:e8:ef:22:f4:8c:52:a1:c6:2d:b1:0d:c9:4d:82:
                    97:45:80:1f:c9:1d:07:f6:e4:89:f9:85:5b:d4:fa:
                    5a:05:7b:21:46:06:04:6a:97:f5:5a:d5:ac:f2:db:
                    e7:0d:dd:b6:9d:51:60:c1:d8:bc:8f:ee:36:df:2b:
                    9a:96:95:03:33:fb:02:d2:f2:33:50:8a:85:60:3d:
                    83:af:7a:b0:54:3e:89:ad:3a:1b:3a:ff:81:33:2c:
                    eb:7b:c9:b4:09:57:66:22:9e:c2:5f:4c:ad:97:d4:
                    09:ee:31:78:ca:5e:86:3d:77:52:f3:db:33:05:16:
                    66:68:e4:d2:f2:fd:eb:88:e4:69:bd:16:04:db:d6:
                    87:43:c2:62:4c:d9:02:2e:9d:b8:a1:dc:4e:9a:62:
                    23:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:1D:4B:69:9D:C0:38:FB:5E:81:9F:77:49:CD:99:47:9B:B6:9F:47
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Wx1LaZ3AOPtegZ93Sc2ZR5u2n0c.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:c300::/40

    Signature Algorithm: sha256WithRSAEncryption
         0e:1e:18:d9:02:7a:bf:21:ca:f2:98:28:9d:b4:5a:be:69:9e:
         9b:31:4f:55:a7:b6:12:21:f0:78:c4:c0:73:26:83:df:5b:9b:
         e9:ef:66:17:9f:76:78:bb:b0:4d:18:6f:de:08:7b:8a:bf:02:
         1a:9b:bd:a3:00:ef:de:e4:9f:de:a9:5e:b4:e8:22:a2:c3:25:
         91:35:ec:5f:0c:9a:a0:96:db:73:31:45:c3:11:7e:3c:0b:2f:
         b8:90:3c:e6:51:01:9a:6b:1e:14:d8:77:87:02:5e:41:82:ea:
         48:4e:12:0a:84:ea:00:70:c8:ea:07:9b:b9:c5:99:f3:3f:d1:
         04:61:12:b4:c1:86:08:31:36:ca:c7:fb:08:4f:66:95:ca:83:
         f8:3d:1d:90:2f:87:25:0b:d6:87:63:9d:b9:1d:7b:3d:6a:ad:
         d8:ac:47:54:cc:b8:76:78:86:9f:71:13:b6:b3:0f:55:d4:51:
         63:af:22:40:b2:15:41:e8:39:1f:97:50:81:58:47:8a:26:6c:
         15:0f:f0:e1:8f:8b:cd:d9:7d:49:df:8d:b6:09:77:ce:d7:ce:
         fe:a0:46:eb:b2:c3:0d:80:21:23:36:f0:f2:c5:7b:31:eb:51:
         c2:fd:53:07:fc:19:3d:23:2e:e2:97:2c:ae:0d:55:eb:3c:6e:
         92:ff:0d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:57 2026 by rpki-client