Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/d60QRuyTjelh93Usp83pW-E8jcQ.roa
File:                     d60QRuyTjelh93Usp83pW-E8jcQ.roa (raw, json)
Hash identifier:          fM1QWwGuUUAC4pblUa92aUVHKobi2a4GrxPGiwbtNCc=
Subject key identifier:   77:AD:10:46:EC:93:8D:E9:61:F7:75:2C:A7:CD:E9:5B:E1:3C:8D:C4
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       06F9
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/d60QRuyTjelh93Usp83pW-E8jcQ.roa
Signing time:             Tue 31 Mar 2026 08:26:54 +0000
ROA not before:           Tue 31 Mar 2026 08:26:54 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:ca00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1785 (0x6f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:26:54 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=77AD1046EC938DE961F7752CA7CDE95BE13C8DC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ae:37:be:1b:cb:64:6b:3c:4a:3e:f1:c5:5e:
                    59:b3:02:1a:7e:c4:20:5b:59:b5:ec:93:71:49:81:
                    bc:67:03:9b:49:86:5e:e5:04:2a:43:f1:a3:59:be:
                    5c:08:6e:52:0d:70:30:73:13:63:bb:97:3a:1a:23:
                    7c:4a:7b:d4:cf:6a:5e:08:36:67:f3:cb:fc:17:64:
                    ea:9f:bc:61:67:3b:36:4f:9c:32:12:be:fc:85:25:
                    86:ff:e5:f1:b8:b8:02:37:70:f1:82:bb:db:26:bf:
                    5d:9d:8a:c3:5b:9e:42:b9:60:a4:f9:c1:54:3f:50:
                    e5:71:fa:0b:90:ee:ab:05:58:30:3b:54:25:5b:91:
                    de:a3:d4:ef:0b:1b:4e:e1:e5:74:e1:c2:69:fc:d8:
                    cb:d6:0c:5a:96:06:b9:cc:ba:54:58:b0:83:b8:ec:
                    c4:1f:bb:d0:53:2a:b1:6e:c5:60:4a:08:63:45:2a:
                    df:2d:bc:35:92:fc:a5:87:85:88:cd:65:e6:2a:44:
                    b6:db:ad:6e:87:08:72:51:79:25:88:04:40:50:c4:
                    d3:7f:11:a9:6b:4f:68:c6:27:d3:8b:c0:f5:72:5f:
                    9a:fc:35:5b:53:22:fc:10:57:19:3d:1a:9e:9d:89:
                    73:66:19:2b:ec:d0:a4:82:b6:43:74:c4:f8:76:50:
                    5d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:AD:10:46:EC:93:8D:E9:61:F7:75:2C:A7:CD:E9:5B:E1:3C:8D:C4
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/d60QRuyTjelh93Usp83pW-E8jcQ.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:ca00::/40

    Signature Algorithm: sha256WithRSAEncryption
         43:c5:8a:7a:8e:30:2f:3e:cf:d1:2d:69:82:2d:6a:10:f2:40:
         1d:6e:e8:3f:df:e2:17:0a:6e:e9:b9:c1:30:99:c6:04:19:6b:
         39:5b:ac:c8:ea:6a:cf:af:65:f8:a3:ad:ce:09:8f:76:e6:43:
         de:c3:89:f7:8b:51:25:34:52:f7:9d:95:32:8d:72:8e:a7:78:
         ec:3b:7d:93:88:04:da:aa:13:83:6e:c7:e7:f6:68:40:4f:8c:
         c4:5b:21:87:50:1d:fd:a8:57:2e:9b:4f:f2:27:f4:83:00:74:
         ec:3d:14:2a:fc:84:0b:29:37:be:01:99:76:23:a3:a2:1a:d5:
         01:5e:59:1e:03:8a:03:28:15:7b:62:2a:be:10:7e:fd:43:b1:
         22:2c:ef:eb:03:4e:c7:db:6d:1b:e0:1b:f9:a3:5b:b1:0c:02:
         01:70:30:93:89:81:40:a4:a8:2c:43:fc:94:d1:fa:a8:a3:b1:
         a9:67:5b:a2:77:8c:ca:91:01:90:ae:31:94:26:e8:fa:ed:33:
         96:75:93:d1:45:9a:7b:e0:fb:83:84:bc:d0:79:12:41:4d:26:
         06:87:ee:e4:da:5c:ef:f0:99:e9:59:95:5d:9a:eb:05:9f:bf:
         cb:1c:a4:ae:83:78:9d:1c:45:ae:1c:3a:a7:96:5c:33:fe:7a:
         f7:03:07:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 21:03:28 2026 by rpki-client