Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/eipvna5UIixgdGNIfIPRhn1oMOw.roa
File:                     eipvna5UIixgdGNIfIPRhn1oMOw.roa (raw, json)
Hash identifier:          zklr88Ly0G2QF9nMltQb8CwrPxp3VDb2VbEzG0SGQkA=
Subject key identifier:   7A:2A:6F:9D:AE:54:22:2C:60:74:63:48:7C:83:D1:86:7D:68:30:EC
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0769
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/eipvna5UIixgdGNIfIPRhn1oMOw.roa
Signing time:             Tue 31 Mar 2026 08:27:49 +0000
ROA not before:           Tue 31 Mar 2026 08:27:49 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:61:2000::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1897 (0x769)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:27:49 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7A2A6F9DAE54222C607463487C83D1867D6830EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:49:0f:db:2d:54:cf:0b:8c:5e:84:4f:37:23:
                    ca:3c:72:e5:fc:1e:f3:e1:6d:7b:4f:04:88:14:c7:
                    9c:31:8e:af:44:28:7d:11:a8:28:a8:1b:08:9e:b6:
                    49:8a:ad:fb:51:d8:31:b0:8a:cf:6a:dd:a1:b4:38:
                    6d:e4:4d:b3:2d:c3:48:c8:f6:78:a6:e1:ad:a2:eb:
                    e9:a4:95:f3:03:76:b0:1c:df:68:88:07:26:d8:49:
                    02:c9:40:ec:b5:e2:2f:f7:d8:f0:bf:50:65:da:68:
                    e0:62:f0:f3:29:de:4e:83:09:d1:3f:39:84:88:c6:
                    92:7d:31:93:c0:7f:b8:42:30:70:69:6b:75:05:38:
                    6a:84:dd:b7:e9:c3:0e:8c:6a:c5:01:20:b8:7c:c2:
                    96:8f:63:eb:2d:6d:a2:b3:5e:81:29:09:06:95:fb:
                    88:53:e6:04:a6:3d:4f:56:8d:f5:96:f1:56:ba:f1:
                    78:d7:c1:39:f5:d9:09:18:41:b7:bd:b3:b8:0d:ff:
                    48:a6:b5:75:30:7c:75:bf:8b:5c:be:a2:2f:86:a1:
                    d8:ad:eb:92:42:7c:94:5c:29:77:6b:f5:4f:e3:ae:
                    96:df:28:06:62:08:8c:64:24:08:4f:43:f6:c8:78:
                    af:0e:bf:79:43:e5:65:72:6c:24:18:5a:7f:e7:14:
                    04:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:2A:6F:9D:AE:54:22:2C:60:74:63:48:7C:83:D1:86:7D:68:30:EC
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/eipvna5UIixgdGNIfIPRhn1oMOw.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:2000::/37

    Signature Algorithm: sha256WithRSAEncryption
         55:04:96:4e:9d:93:76:66:c1:b7:fe:bc:12:bb:74:54:83:cd:
         d0:31:4d:76:21:cc:be:fc:3d:28:9f:e3:6a:77:7d:a8:5e:38:
         e0:35:e2:eb:93:71:20:14:02:7b:0d:b7:f6:3d:27:88:26:eb:
         a6:a7:bf:70:00:83:04:3b:39:7f:bc:fb:5d:61:96:41:ab:af:
         39:44:38:47:4d:a6:56:d0:76:ba:07:74:ad:f9:17:5d:e3:f1:
         55:41:60:96:86:56:96:49:0f:83:1e:7b:7f:91:4b:2d:70:b5:
         d3:8b:b0:ea:2f:1a:e9:24:15:0f:bb:f6:e2:b9:6f:c8:19:66:
         57:27:48:97:bc:07:32:f9:24:5e:c9:3b:70:4a:d4:5b:a4:e9:
         c7:1c:e9:47:94:64:6f:51:2f:1b:4a:41:64:3d:4d:f6:ab:bd:
         50:ab:06:3d:98:26:ac:4f:c5:11:0c:90:19:e1:8b:74:7c:7f:
         71:41:b8:8a:b1:4e:9a:5c:99:91:81:ab:80:e0:fe:fd:ac:94:
         15:3c:5d:cc:1d:55:0c:54:4a:a9:85:77:09:e1:a9:cd:20:fe:
         6c:ab:6a:e9:3e:c2:0b:06:c2:1d:85:56:e0:d4:c9:42:4f:51:
         bd:87:de:d6:1e:a3:a4:17:c9:21:26:37:81:b4:b5:79:d8:1d:
         24:5e:cc:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:55 2026 by rpki-client