Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/gemFe65jSLz5pZkBkex8V6mlGOY.roa
File:                     gemFe65jSLz5pZkBkex8V6mlGOY.roa (raw, json)
Hash identifier:          DMVHCJlPgxiattnSkUzOPSGzfTSRrF+NFJELWuu2fl8=
Subject key identifier:   81:E9:85:7B:AE:63:48:BC:F9:A5:99:01:91:EC:7C:57:A9:A5:18:E6
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0768
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/gemFe65jSLz5pZkBkex8V6mlGOY.roa
Signing time:             Tue 31 Mar 2026 08:27:49 +0000
ROA not before:           Tue 31 Mar 2026 08:27:49 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:61:2800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1896 (0x768)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:27:49 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=81E9857BAE6348BCF9A5990191EC7C57A9A518E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:80:e9:34:86:1a:13:ad:9c:76:94:59:6c:d3:
                    3d:cd:e6:b7:dd:3d:87:29:e2:ac:41:e4:f3:61:d7:
                    73:e0:f7:8b:18:52:fd:38:ba:e2:72:d0:bc:50:3c:
                    f4:1b:69:70:d6:8c:d4:4a:22:e0:9c:9d:66:db:a3:
                    6f:43:ee:8b:55:3a:4b:db:d8:18:17:07:92:b0:56:
                    e6:7b:c2:8a:48:68:92:e1:df:78:3f:8a:01:1a:63:
                    52:46:22:a6:e8:7b:e8:1d:f2:27:4e:d4:6a:56:47:
                    f5:86:03:a7:0e:50:a9:4b:a2:c0:2b:62:06:fb:ad:
                    f7:2a:9f:a6:1a:20:a8:09:01:7b:1c:86:5d:cb:18:
                    3f:f9:01:6b:68:a3:0b:eb:a1:e9:ce:88:26:38:2c:
                    6b:09:77:e8:38:00:35:99:f3:71:ee:e6:9b:e5:84:
                    72:e7:10:78:87:75:b0:39:da:71:78:6c:2d:98:d5:
                    d9:38:26:bf:e9:e6:aa:5d:d5:d4:40:66:a3:29:2e:
                    78:ec:76:56:6e:39:53:58:90:95:d4:ba:63:14:e4:
                    03:ff:d7:08:8a:f0:ec:5b:78:1b:0f:14:03:d9:ce:
                    23:b4:3d:cf:e7:97:56:de:b8:64:63:fa:32:dc:f0:
                    72:e5:50:3b:2a:ba:42:db:8c:78:09:90:70:e3:d4:
                    7b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:E9:85:7B:AE:63:48:BC:F9:A5:99:01:91:EC:7C:57:A9:A5:18:E6
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/gemFe65jSLz5pZkBkex8V6mlGOY.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:2800::/38

    Signature Algorithm: sha256WithRSAEncryption
         4b:76:e2:ca:48:7c:07:cb:ee:6f:21:7d:47:8c:11:c5:a2:09:
         dc:15:60:6b:a2:9a:8b:b4:44:e4:0f:84:76:78:8a:a2:56:73:
         eb:c7:ee:28:1c:fc:64:ba:e2:76:c0:1e:1b:25:37:dd:fb:ac:
         aa:d2:b2:22:f4:1c:33:47:26:3f:26:ae:c4:6d:32:25:84:85:
         69:a3:4a:27:28:60:fc:ba:45:62:74:c0:08:da:5e:3c:1c:3b:
         82:05:3d:1e:ba:1e:3c:fb:f6:e6:9e:21:1f:57:49:97:14:f5:
         da:09:fe:b7:2b:44:7f:a8:69:c3:ab:87:dd:3e:ed:b7:a5:9a:
         7c:fd:d8:23:1e:55:fe:08:a8:69:dd:82:d1:0b:73:a4:53:9c:
         df:81:fd:69:3a:ba:5a:3d:e0:ed:12:55:ab:5f:bb:6d:76:f7:
         22:69:86:6b:a3:f8:c9:cc:af:d9:a8:2c:33:db:08:d5:ca:2c:
         25:b2:eb:e1:77:8b:de:59:35:5f:0f:0b:16:99:e0:c1:a4:8d:
         6c:d4:29:59:72:2f:ca:88:dc:a7:39:bd:bb:28:59:6b:8d:62:
         23:98:95:ea:5e:55:a8:0b:b7:4c:26:08:f2:44:6e:46:15:fe:
         3d:8f:9d:af:fd:50:e1:48:14:dd:04:cd:ed:e9:49:25:7c:9e:
         55:4b:34:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:11 2026 by rpki-client