Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/eoOPKCoPzlArOFxbdxzQ6r8f62M.roa
File:                     eoOPKCoPzlArOFxbdxzQ6r8f62M.roa (raw, json)
Hash identifier:          He0n4Yw8SbdabCZFzP2C6C4FtaacgWmvY38csIDdl5o=
Subject key identifier:   7A:83:8F:28:2A:0F:CE:50:2B:38:5C:5B:77:1C:D0:EA:BF:1F:EB:63
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       069B
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/eoOPKCoPzlArOFxbdxzQ6r8f62M.roa
Signing time:             Tue 31 Mar 2026 08:26:12 +0000
ROA not before:           Tue 31 Mar 2026 08:26:12 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:2700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1691 (0x69b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:26:12 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7A838F282A0FCE502B385C5B771CD0EABF1FEB63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0e:d9:64:7b:3d:1a:ec:c1:57:29:cf:4c:3d:
                    7c:f0:4f:d0:fb:f9:55:70:19:37:58:b9:9f:a1:45:
                    27:6a:07:2f:80:a6:58:be:c7:f5:93:26:bc:8f:5d:
                    7d:a5:03:e9:75:62:c9:34:59:56:5f:5f:00:a1:84:
                    82:5e:cb:b5:ea:de:9b:28:ad:69:d4:64:4e:1f:e0:
                    90:72:c7:0c:20:af:19:c2:71:a2:05:3d:2c:f7:8b:
                    99:02:66:c6:95:96:c5:f0:46:d1:16:ed:8e:00:5e:
                    1e:d7:61:ca:5c:29:88:4d:c2:de:90:a1:58:f2:db:
                    26:67:ec:3c:67:36:c6:6a:38:af:37:2b:b3:ca:7b:
                    55:e2:34:20:be:60:1a:8d:f5:26:31:11:f9:42:6c:
                    78:92:5b:b4:64:9b:d2:cb:42:d5:bc:59:6f:df:b4:
                    85:c2:23:b2:02:ca:01:30:f1:2b:70:77:ba:20:a1:
                    af:9e:bc:83:87:04:8b:0d:ba:41:7d:d9:82:86:37:
                    aa:0f:69:0d:5e:78:50:a4:dd:d9:04:d1:0d:8b:96:
                    36:56:a8:d4:83:ca:2a:d6:7f:8c:b8:c4:7c:f3:d3:
                    6b:e9:05:29:6d:f6:ac:df:b5:7b:53:e3:3d:ad:b6:
                    77:a4:3e:f9:af:0b:e7:63:60:76:8d:52:0c:09:32:
                    1c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:83:8F:28:2A:0F:CE:50:2B:38:5C:5B:77:1C:D0:EA:BF:1F:EB:63
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/eoOPKCoPzlArOFxbdxzQ6r8f62M.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:2700::/40

    Signature Algorithm: sha256WithRSAEncryption
         90:aa:d2:3f:4f:c4:56:23:fa:38:9f:51:ba:d0:ad:48:53:ec:
         03:d1:6a:95:fa:d6:3b:4f:72:75:34:c7:31:7e:e4:20:33:ce:
         0e:38:64:81:67:ea:41:41:ea:29:a9:23:2f:e6:85:b8:87:0c:
         d1:10:9f:0a:45:1e:d3:5a:64:1e:97:e5:a2:84:d2:08:34:56:
         06:f3:b6:d1:31:29:e5:a9:c1:9e:bb:71:3c:fb:29:7e:cb:c3:
         ea:29:97:96:42:ba:f3:ff:08:d6:16:b8:8f:b6:a8:fb:e4:ff:
         79:a2:48:13:9a:02:05:45:2c:f8:19:ba:2d:39:52:0f:6d:d0:
         ae:b4:4b:db:00:03:e9:de:9e:25:ae:4f:60:34:46:ce:2d:26:
         18:a0:d4:c7:aa:30:77:e5:b5:e3:5c:0f:99:9a:1b:a2:df:9c:
         c6:9f:d4:f0:a0:bc:7a:2b:d7:50:68:80:4f:0a:e1:f2:ad:9a:
         4b:0e:83:8a:c0:d8:0b:a2:5f:12:46:4d:a5:0a:59:28:b1:ca:
         04:c7:a6:95:c7:1b:b8:bf:58:83:cb:91:81:70:d5:40:f4:4e:
         80:d2:5e:7e:94:4d:9e:df:65:78:dd:9c:43:80:ba:7d:62:8f:
         f9:c7:a6:92:91:06:40:57:f0:ca:b0:88:07:a3:de:c8:61:e4:
         7f:a2:fc:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 21:01:41 2026 by rpki-client