Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/lAoU-tg1WtiznOuqfKiajapyMEQ.roa
File:                     lAoU-tg1WtiznOuqfKiajapyMEQ.roa (raw, json)
Hash identifier:          F8P7ELIcBp5lQryAkUTb2UgJf4edywhNDjTj7EhYvFs=
Subject key identifier:   94:0A:14:FA:D8:35:5A:D8:B3:9C:EB:AA:7C:A8:9A:8D:AA:72:30:44
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       06AF
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/lAoU-tg1WtiznOuqfKiajapyMEQ.roa
Signing time:             Tue 31 Mar 2026 08:26:21 +0000
ROA not before:           Tue 31 Mar 2026 08:26:21 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:61:1e00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1711 (0x6af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:26:21 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=940A14FAD8355AD8B39CEBAA7CA89A8DAA723044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fc:07:45:b4:08:4e:f6:d8:bc:58:b9:5e:95:
                    70:ea:56:5e:c8:dc:bd:23:b9:fd:32:2f:60:af:07:
                    32:b9:19:c8:f2:41:65:19:09:80:15:e7:6d:ce:03:
                    77:4b:3e:f5:dc:23:55:3e:37:b1:ab:30:25:02:2e:
                    4d:cb:76:0f:c4:21:bf:80:a3:19:7d:df:c4:ca:c2:
                    88:40:28:ff:9a:5e:56:83:34:3a:7a:98:b8:37:49:
                    4d:a0:e4:2d:62:13:0f:73:75:d1:67:88:d5:53:2f:
                    e2:6e:6b:e7:10:81:bc:25:ac:7c:85:9b:3b:07:21:
                    00:29:51:4c:9a:10:23:48:5f:2c:7a:42:65:ce:c0:
                    bf:74:d7:57:4d:d4:c2:33:ee:40:e4:7a:e4:2e:e4:
                    c9:76:3e:8e:3e:75:97:56:e3:36:cd:73:ec:93:27:
                    c7:65:6a:7f:c1:21:59:85:09:d1:ad:3b:49:e2:b5:
                    5e:20:b1:9e:be:77:94:5c:47:89:1e:bc:3f:8f:88:
                    c8:56:78:2b:33:9e:6b:1b:1f:a9:8f:7b:36:f8:a9:
                    65:f6:c8:03:c2:e0:36:20:a8:02:32:d4:8e:9c:6e:
                    ed:c6:cd:b2:bd:fb:56:19:19:cc:dc:71:fc:89:83:
                    d8:93:79:30:b5:21:92:bd:f8:b9:5c:0e:ae:b0:d0:
                    9c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:0A:14:FA:D8:35:5A:D8:B3:9C:EB:AA:7C:A8:9A:8D:AA:72:30:44
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/lAoU-tg1WtiznOuqfKiajapyMEQ.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:1e00::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:98:85:74:d0:17:f7:50:56:d0:34:32:77:2f:51:92:f4:6c:
         0b:6d:e4:d7:23:76:e9:e2:a5:c2:d7:57:d4:4a:d3:85:99:dd:
         fd:68:55:cf:b1:ca:be:93:56:ce:a5:5b:08:a2:34:19:95:0b:
         ac:5e:8a:b9:cf:aa:14:9e:69:70:79:ae:b7:5f:ef:ac:64:9e:
         84:4b:c2:0b:61:e2:a0:00:d5:d5:af:ab:83:20:89:f1:f4:28:
         d8:6d:c7:c0:4a:3a:0b:84:d2:9a:0c:3c:24:70:b1:00:5e:49:
         09:35:5a:c4:75:85:2b:03:e8:15:cd:4f:28:59:5d:53:24:5f:
         70:e0:1d:0e:74:ed:2f:82:de:05:84:64:1d:be:08:73:98:b9:
         2a:55:13:90:67:2b:4e:c2:f8:d4:79:18:58:3a:1d:f4:e5:90:
         5b:b6:ee:76:b0:c9:43:96:4a:42:27:3d:e9:d7:c0:b8:93:55:
         3f:cd:cd:3b:9d:aa:eb:6e:44:12:36:c2:28:82:5a:43:f0:94:
         5e:78:ee:14:45:90:25:23:6c:67:f5:e2:de:c7:b6:86:8b:76:
         22:3a:53:b5:ca:f7:23:ae:d2:6e:79:7d:c2:38:6f:5f:6e:6a:
         55:0b:84:29:6d:18:ad:f0:c0:fd:50:4a:68:a7:14:d2:e1:09:
         cf:52:2f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:26 2026 by rpki-client