Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/cUdiHYswvUpdvAhInEdiHsSrTGY.roa
File:                     cUdiHYswvUpdvAhInEdiHsSrTGY.roa (raw, json)
Hash identifier:          U4u3wL+G79y/m8E0QI1ceSAcU96Iwgt283cyk86PV9E=
Subject key identifier:   71:47:62:1D:8B:30:BD:4A:5D:BC:08:48:9C:47:62:1E:C4:AB:4C:66
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0687
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/cUdiHYswvUpdvAhInEdiHsSrTGY.roa
Signing time:             Tue 31 Mar 2026 08:26:03 +0000
ROA not before:           Tue 31 Mar 2026 08:26:03 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:f300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1671 (0x687)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:26:03 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7147621D8B30BD4A5DBC08489C47621EC4AB4C66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:67:c1:3c:5f:52:1f:6e:92:c1:e0:51:2b:e9:
                    f6:99:30:cf:cf:f3:1f:45:43:8f:06:39:54:31:57:
                    6e:de:7a:89:b0:22:46:25:1a:d1:57:96:5a:7a:7f:
                    1d:2e:b8:7c:96:55:fa:52:81:51:eb:c6:2c:58:1e:
                    7d:8d:fa:53:25:3e:9f:63:9e:13:75:b8:d1:8b:b4:
                    a5:fb:89:bd:c9:d1:0f:f3:68:72:f5:aa:57:b4:70:
                    96:21:37:8b:82:81:68:14:fd:b1:87:14:ff:36:3d:
                    6d:80:f0:82:ec:e7:ef:b5:73:ed:c0:ca:01:10:92:
                    0d:44:3e:78:1a:44:88:05:a5:9a:5b:59:bb:c9:f3:
                    93:19:5d:82:69:a7:72:87:89:62:4b:4b:14:62:7a:
                    6a:a4:f9:ca:46:ef:da:6c:49:31:00:c1:1f:eb:38:
                    e1:81:f6:38:1c:33:a0:0e:9e:85:90:47:ba:09:d5:
                    97:4a:9b:e4:59:cf:79:79:23:92:0d:5a:b0:75:d7:
                    07:b2:92:08:6f:11:16:0e:fa:92:aa:25:87:9a:49:
                    21:5b:2f:31:09:b2:be:9f:20:50:51:58:8d:9b:73:
                    cd:47:6a:5e:aa:1d:09:46:d2:3c:a0:fb:9e:4a:ed:
                    e1:95:a3:84:93:bf:25:c9:fd:54:ed:c6:5b:5c:c1:
                    67:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:47:62:1D:8B:30:BD:4A:5D:BC:08:48:9C:47:62:1E:C4:AB:4C:66
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/cUdiHYswvUpdvAhInEdiHsSrTGY.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:f300::/40

    Signature Algorithm: sha256WithRSAEncryption
         1f:ed:f9:d2:bb:8b:fe:13:67:33:71:77:d4:d5:82:6f:81:9a:
         32:97:39:0a:86:46:94:d1:ca:ef:24:3c:38:cb:f7:b9:1c:e3:
         48:37:99:87:21:18:10:be:64:28:78:13:75:11:53:8c:a7:7d:
         9f:61:6f:b2:ef:d6:57:01:26:6e:e5:f6:d4:ed:c4:54:9d:aa:
         47:6a:a7:83:36:74:5c:4a:9d:bc:2f:10:ce:e2:3a:94:ad:da:
         91:f6:a6:3b:12:47:46:55:f6:ae:d8:59:b9:50:ed:09:a3:58:
         00:92:eb:74:02:40:6e:3e:56:df:94:40:91:23:a6:80:ff:1d:
         79:60:a1:21:a4:f1:98:db:ae:02:24:f0:62:00:d8:ed:fd:7b:
         24:db:38:72:55:04:3b:3f:ad:bf:2a:98:85:58:60:b8:ea:4b:
         3f:06:6b:b7:fa:07:e2:28:30:94:a6:65:ca:90:41:e0:7a:3a:
         c4:0a:38:c6:c7:dd:49:97:fa:b7:05:5f:7b:98:3b:54:cc:c2:
         31:dd:5b:c3:73:46:77:bb:34:40:78:be:b1:44:dc:67:31:d1:
         ca:00:ae:e0:72:89:d2:87:89:f7:75:04:90:60:1e:71:88:80:
         4b:e6:2f:a0:6e:05:ef:f4:09:5a:f6:d0:09:f9:0f:9c:f9:cc:
         66:cc:4e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:52 2026 by rpki-client