Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ZezWOq_uobmdFeVrvJcUCCVPUqk.roa
File:                     ZezWOq_uobmdFeVrvJcUCCVPUqk.roa (raw, json)
Hash identifier:          8MhoMk/wUn6r7KAJYnskFz6zQOuhK1Y5HRBEVnpKXBc=
Subject key identifier:   65:EC:D6:3A:AF:EE:A1:B9:9D:15:E5:6B:BC:97:14:08:25:4F:52:A9
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       068D
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ZezWOq_uobmdFeVrvJcUCCVPUqk.roa
Signing time:             Tue 31 Mar 2026 08:26:07 +0000
ROA not before:           Tue 31 Mar 2026 08:26:07 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:1000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1677 (0x68d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:26:07 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=65ECD63AAFEEA1B99D15E56BBC971408254F52A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5d:fe:31:5c:56:5c:cd:2c:89:e6:64:84:f9:
                    a9:8d:44:d8:8a:83:5e:0c:6e:f6:bf:34:99:aa:48:
                    0e:f1:7f:f3:44:1b:ca:81:64:b7:ef:8f:5a:f9:58:
                    af:5a:ac:0f:72:48:12:49:d3:a4:a7:40:75:7d:33:
                    cd:73:92:fc:db:cb:44:67:01:8e:2a:ec:d2:b1:4a:
                    05:96:68:9f:02:48:41:01:c7:7d:dc:69:e2:9f:df:
                    d2:15:60:2f:ca:be:d0:1f:c1:1f:64:c1:48:2c:9a:
                    eb:0c:b8:fb:cb:6c:f2:fb:5d:d2:e3:be:59:4d:73:
                    79:2f:5d:a1:c5:e6:42:40:de:4f:8c:45:d0:c3:d8:
                    58:17:82:f2:d3:27:ff:96:ef:ff:50:ef:78:19:82:
                    40:e0:b8:08:27:61:b8:8f:f1:9a:22:31:86:d4:4d:
                    31:81:be:dc:47:f2:e6:52:a2:2a:8e:ba:1b:03:4a:
                    6e:0c:00:97:55:14:cd:52:7c:a2:aa:0b:28:e7:ac:
                    18:60:cf:67:fb:ac:6e:e0:97:bc:7a:e9:cc:a4:71:
                    46:96:f3:db:cd:a5:87:92:47:77:fa:75:1c:f0:52:
                    96:57:43:f2:cd:8f:d3:d2:0b:ca:ab:ed:78:74:98:
                    80:00:5b:59:10:d9:6d:8e:8b:fe:64:1e:c1:67:20:
                    5b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:EC:D6:3A:AF:EE:A1:B9:9D:15:E5:6B:BC:97:14:08:25:4F:52:A9
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ZezWOq_uobmdFeVrvJcUCCVPUqk.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         21:8a:20:25:cd:de:96:8a:43:76:09:1c:04:60:53:e5:0c:2d:
         34:66:6e:be:33:c1:ec:89:e1:13:2f:f6:a0:de:ae:76:7c:47:
         e6:83:41:c0:ca:9d:d1:5e:a3:89:ce:bd:37:97:4f:93:5c:9b:
         6f:f9:2f:c0:fc:ed:ae:1c:c0:4e:ec:32:3c:ab:b4:49:5f:ef:
         5e:a4:1b:60:57:e2:43:a0:93:72:3b:86:8f:ea:7e:ea:a8:8c:
         28:ec:ff:e5:1b:07:9c:c5:c1:05:48:18:8f:0f:5a:c3:4a:39:
         2e:b8:74:1a:05:b6:33:b7:e9:36:98:1c:ea:c7:f3:2e:a4:59:
         99:71:a4:ce:2c:e1:e1:f8:47:77:02:86:aa:28:d5:69:55:5e:
         ab:8b:14:db:f2:2c:5f:a1:cc:89:09:76:37:41:bf:5c:6b:1a:
         58:1e:70:e0:d7:93:34:5d:c8:dc:26:ab:ba:35:5d:78:1b:37:
         95:f8:bf:f8:ec:2d:0a:f7:ee:9c:90:4a:39:a9:14:1c:f3:ae:
         1b:6e:52:d0:c7:34:8b:7d:b2:2c:aa:a7:6d:7e:79:d5:aa:5d:
         74:b5:d3:47:45:ac:fd:08:a2:8f:6b:44:a8:ba:58:81:21:d2:
         8a:91:10:e2:ad:8f:ca:a8:20:7b:c3:90:07:6c:ea:9b:bc:0b:
         de:8e:bb:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 21:03:26 2026 by rpki-client