Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/iFd2SXcEaIPUiPHuZ2tb3qHRkgY.roa
File:                     iFd2SXcEaIPUiPHuZ2tb3qHRkgY.roa (raw, json)
Hash identifier:          qRkT5IjgktWaPYBy+xuujQqyk5n6ySBYQxbu5bsGzE0=
Subject key identifier:   88:57:76:49:77:04:68:83:D4:88:F1:EE:67:6B:5B:DE:A1:D1:92:06
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       06DA
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/iFd2SXcEaIPUiPHuZ2tb3qHRkgY.roa
Signing time:             Tue 31 Mar 2026 08:26:41 +0000
ROA not before:           Tue 31 Mar 2026 08:26:41 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1754 (0x6da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:26:41 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=8857764977046883D488F1EE676B5BDEA1D19206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d4:b5:21:cf:42:28:97:0f:40:b0:f6:da:2c:
                    99:58:dc:96:48:e7:5a:fa:fa:c5:5d:13:84:fa:b8:
                    26:e9:36:4e:c7:36:52:c5:ab:1b:53:d9:6f:0e:93:
                    ff:37:c7:3b:22:0b:18:78:10:b2:78:64:94:0a:30:
                    5d:52:92:07:0a:cf:12:b7:90:44:c5:1c:aa:3b:9c:
                    41:ec:b8:98:31:57:4d:b0:ea:b7:c3:bc:e8:80:af:
                    fc:e8:fb:7d:64:09:e8:57:0d:d2:de:74:5b:86:a1:
                    fe:c6:fe:09:8c:91:dc:d8:fc:14:4b:b2:0c:19:8d:
                    a7:c6:4b:50:6b:30:0a:22:54:31:17:0e:6c:ba:c2:
                    a2:30:b2:c6:25:da:82:92:39:1b:27:b8:79:c5:4c:
                    85:89:9a:57:6f:94:04:23:58:5c:1c:b9:6b:8f:11:
                    b1:a5:6d:3c:ab:9c:30:6d:b7:45:49:c9:53:86:8d:
                    fc:75:7f:97:07:5d:7a:78:c1:20:25:47:41:93:00:
                    00:db:1c:a7:ae:dc:cb:08:03:2e:c5:3a:2c:cf:3e:
                    64:5e:42:d8:c4:99:56:44:9f:bf:30:c5:b9:95:98:
                    bd:72:b6:68:e9:0b:44:57:ec:a1:58:ce:3d:39:70:
                    82:7d:0c:02:a8:65:ce:e7:bc:13:96:f4:1c:df:54:
                    6c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:57:76:49:77:04:68:83:D4:88:F1:EE:67:6B:5B:DE:A1:D1:92:06
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/iFd2SXcEaIPUiPHuZ2tb3qHRkgY.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:ec:5e:9e:38:4b:29:6d:35:e2:d7:68:d8:ed:fa:97:43:7c:
         e3:e6:d8:92:6c:23:e6:aa:48:9d:0d:29:be:7d:8d:c0:fb:b4:
         2b:69:4a:43:4a:64:19:1c:81:c3:98:e2:a3:96:78:d2:dd:07:
         27:f0:99:f2:64:62:a7:3d:35:02:33:8f:7d:ca:19:cf:17:1d:
         60:1f:64:8d:ba:1f:07:fd:c5:5a:bd:ab:c6:48:a4:73:45:ad:
         57:74:71:a4:12:ef:60:a7:83:04:d6:af:28:ca:46:f1:1d:c7:
         e7:54:96:3f:2f:55:45:14:32:b8:be:72:38:07:00:a6:2d:a3:
         66:1f:83:f3:4e:e9:e8:b4:98:19:32:25:6b:9a:70:58:67:bb:
         81:49:03:e3:2b:2e:4c:71:6f:68:74:ae:5e:ff:c2:57:22:50:
         5f:25:8b:05:ed:8b:73:7d:fe:c0:c2:b0:b6:18:f9:b0:73:96:
         c4:3f:82:16:3f:a3:0e:fb:b7:e1:06:ff:84:63:a0:90:f5:22:
         fb:58:ba:85:68:be:a8:84:4a:2c:be:dd:64:da:a1:7c:c2:1e:
         f1:11:29:0f:3e:76:7c:f1:55:df:bd:63:a0:7b:e3:05:60:c7:
         6c:5a:d8:de:1d:de:1b:ce:52:ae:4c:d5:21:dc:e0:2a:f5:f2:
         45:dc:0c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:00 2026 by rpki-client