Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/hMAe0Lj0ipqoT41WIXEf8hjhRIc.roa
File:                     hMAe0Lj0ipqoT41WIXEf8hjhRIc.roa (raw, json)
Hash identifier:          AZqsV5EPnkMEk5AAqxeh3Bq7+PTMJYFKy0zHsnZotGA=
Subject key identifier:   84:C0:1E:D0:B8:F4:8A:9A:A8:4F:8D:56:21:71:1F:F2:18:E1:44:87
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       071A
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/hMAe0Lj0ipqoT41WIXEf8hjhRIc.roa
Signing time:             Tue 31 Mar 2026 08:27:12 +0000
ROA not before:           Tue 31 Mar 2026 08:27:12 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:4400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1818 (0x71a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:27:12 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=84C01ED0B8F48A9AA84F8D5621711FF218E14487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:43:79:7c:66:d0:b7:97:f5:97:a1:74:6c:6a:
                    2d:5d:ad:76:ce:54:6c:53:46:92:6b:5a:d8:95:49:
                    08:4b:1d:7d:93:90:ee:74:cb:4c:ec:57:a9:51:19:
                    71:88:f7:45:cf:5c:26:dd:f6:89:99:3d:dc:21:2b:
                    90:22:34:2f:c3:21:d9:e0:f4:c5:25:eb:65:67:c8:
                    1b:5c:c7:1e:82:b1:50:0d:f8:d2:84:92:04:01:01:
                    83:09:8d:c3:5f:ff:6e:fc:34:42:24:4a:fd:59:81:
                    81:a4:9e:6c:a6:75:69:50:e8:6a:64:b2:e3:4d:27:
                    7c:ce:ff:f1:ea:37:d1:32:ef:04:29:b3:ca:74:5b:
                    bf:c7:01:3e:e7:0b:f1:2e:b0:41:3b:14:fc:c0:22:
                    db:52:42:ac:f2:62:d2:cf:6d:e3:52:3b:d9:1c:6a:
                    9c:74:16:56:a2:e2:c1:fa:5f:6e:96:94:c2:a6:9d:
                    ce:eb:e7:53:26:ee:dc:22:38:f6:40:1e:6a:24:d3:
                    f5:50:b5:f1:7a:ff:f8:2b:a9:a0:1c:bb:0c:1c:f0:
                    7f:17:6a:1c:d8:78:16:c6:f4:6a:06:41:63:6f:cd:
                    87:c9:bd:03:84:c1:7d:20:77:9a:95:4b:93:61:a2:
                    75:3b:12:41:b9:a2:98:04:1a:81:06:b6:2a:6e:a5:
                    c4:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:C0:1E:D0:B8:F4:8A:9A:A8:4F:8D:56:21:71:1F:F2:18:E1:44:87
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/hMAe0Lj0ipqoT41WIXEf8hjhRIc.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:4400::/40

    Signature Algorithm: sha256WithRSAEncryption
         7d:28:74:aa:2b:0b:c6:f6:46:0d:ed:68:e3:3c:28:63:6d:58:
         9f:d5:79:64:2b:ce:c6:68:42:73:e7:5c:e5:86:7a:e2:fb:b8:
         4d:e5:80:5e:7f:1c:25:a4:53:61:de:76:4c:61:4a:e3:8f:b3:
         44:fb:6c:42:f0:2a:75:ca:8d:3f:76:68:b0:80:90:6f:04:da:
         62:e5:c3:4c:ec:bd:9e:03:83:90:6e:30:df:b2:67:01:63:42:
         34:b6:c1:34:ac:da:92:3e:fe:2b:c5:ed:4e:51:a8:d8:d2:46:
         88:55:a2:43:42:af:82:74:7c:c5:2b:0d:26:a7:10:23:fc:a9:
         3a:bf:30:3c:d0:88:32:b1:49:71:5a:e1:51:79:17:5e:af:1a:
         45:44:6c:59:c9:ba:a5:bf:49:6e:6a:72:47:23:6b:98:a8:90:
         2e:2d:d6:a9:87:c9:c2:7b:7c:a3:0d:f8:43:b4:16:97:78:38:
         a0:a0:b9:4d:49:0e:4c:06:65:7f:a7:57:b8:4c:99:c5:9b:da:
         d9:03:a8:1b:93:ad:cf:33:ce:f4:0d:6f:65:fc:68:38:ea:89:
         77:9d:2e:ba:e5:96:24:de:f7:08:4c:d5:df:62:49:52:55:5d:
         eb:cc:80:ae:25:ee:89:25:ec:0e:a0:b9:55:5d:20:2d:23:e7:
         a4:2d:f5:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:54 2026 by rpki-client