Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/mXlkF0uzftJEg0P5u5wi4nbQE2Y.roa
File:                     mXlkF0uzftJEg0P5u5wi4nbQE2Y.roa (raw, json)
Hash identifier:          rxQYuLLG9kzxvsoStvxrrAUtUqwFfGaIn7zYHQYtz9g=
Subject key identifier:   99:79:64:17:4B:B3:7E:D2:44:83:43:F9:BB:9C:22:E2:76:D0:13:66
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       06CE
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/mXlkF0uzftJEg0P5u5wi4nbQE2Y.roa
Signing time:             Tue 31 Mar 2026 08:26:36 +0000
ROA not before:           Tue 31 Mar 2026 08:26:36 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:61:3800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1742 (0x6ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:26:36 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=997964174BB37ED2448343F9BB9C22E276D01366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ad:9e:ce:32:64:a5:7e:62:f0:65:2b:c2:95:
                    04:ea:98:ac:91:b3:ea:94:d4:b7:26:84:ed:dd:c3:
                    43:91:7e:2c:a3:3c:c9:f6:9d:a7:d8:10:62:19:1b:
                    7d:3b:d9:4b:d4:de:a0:5a:49:2b:15:7c:b8:31:c9:
                    53:a2:da:26:c0:2a:2b:64:1a:f3:74:3b:77:c7:df:
                    e5:2d:9c:4e:da:d0:ec:48:19:b1:3b:3e:44:e1:7d:
                    fe:b7:32:29:18:52:75:04:e7:67:36:42:34:39:d7:
                    8b:b8:c0:94:e6:83:83:7e:60:0c:59:75:35:46:f2:
                    e7:11:15:d1:03:29:8f:07:c1:49:55:70:94:60:f1:
                    df:1b:07:d6:4d:64:14:e1:5f:4b:2b:92:dd:e8:5d:
                    7d:9c:5e:83:80:f6:f2:4c:4e:06:2d:46:57:43:6f:
                    f5:68:68:d2:81:70:24:3b:c1:83:b7:70:db:bc:2b:
                    ad:af:7c:4c:56:85:b9:4f:76:4f:41:69:c9:cd:b1:
                    58:11:fb:da:87:bf:d5:db:48:2b:87:bd:72:43:9e:
                    1a:96:3b:9f:79:67:85:bd:f5:38:c9:96:7b:ff:44:
                    92:38:a4:ec:3d:24:10:fe:fb:f3:9e:80:48:c9:27:
                    7a:a2:58:07:f9:4e:b3:06:36:b9:9a:ea:22:82:c3:
                    5a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:79:64:17:4B:B3:7E:D2:44:83:43:F9:BB:9C:22:E2:76:D0:13:66
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/mXlkF0uzftJEg0P5u5wi4nbQE2Y.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:3800::/38

    Signature Algorithm: sha256WithRSAEncryption
         17:a9:d1:c1:ae:fc:63:61:0a:da:c3:5c:99:cd:5b:a1:6c:aa:
         50:81:6b:b7:c5:ea:42:81:cb:4c:12:69:0d:d1:26:a7:4f:67:
         4d:7b:2f:3f:2f:81:8f:7e:42:9c:51:ea:72:8a:d9:d4:c9:d3:
         ae:45:fc:79:4e:43:9c:01:2c:56:30:39:01:51:0e:dd:7e:8c:
         c3:1e:e9:81:0a:fd:90:f0:c2:30:2a:50:83:9a:ad:ae:1f:9f:
         23:6a:89:f2:eb:8d:39:aa:fe:2b:27:df:cc:cb:5b:fe:49:c0:
         48:7f:1a:a5:de:2a:90:ed:d7:16:40:94:be:e7:ac:4c:7b:cc:
         e4:91:1b:fc:de:65:61:84:c2:1d:37:37:58:78:3e:b9:e3:36:
         92:5a:0c:f5:7a:4f:dc:ff:d0:c6:33:fc:94:35:34:21:f2:ca:
         8d:12:12:39:ff:8d:5a:33:57:6c:7c:f6:03:14:3d:44:b3:7e:
         77:76:06:c8:9f:0c:e9:28:14:d3:61:cd:5d:b3:32:55:58:75:
         fc:11:89:da:99:50:cc:64:2b:e8:38:73:a3:12:d2:ba:1c:7d:
         1a:53:00:f7:26:17:22:67:e4:81:0d:dc:97:d4:38:e1:0a:90:
         70:2f:94:83:bb:23:81:68:67:e3:cc:16:8f:fb:49:ac:ec:bb:
         70:cd:4b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:16 2026 by rpki-client