Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/rUMmDTgQFk3hACUgnXrlo3re_7g.roa
File:                     rUMmDTgQFk3hACUgnXrlo3re_7g.roa (raw, json)
Hash identifier:          psytJu6d3oAzqSNiS2YYHi9RCa7V2s6rExgwsZXYs3I=
Subject key identifier:   AD:43:26:0D:38:10:16:4D:E1:00:25:20:9D:7A:E5:A3:7A:DE:FF:B8
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       06E3
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/rUMmDTgQFk3hACUgnXrlo3re_7g.roa
Signing time:             Tue 31 Mar 2026 08:26:44 +0000
ROA not before:           Tue 31 Mar 2026 08:26:44 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:60:f008::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1763 (0x6e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:26:44 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=AD43260D3810164DE10025209D7AE5A37ADEFFB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a9:c0:d6:0b:bc:e3:b6:f0:56:97:37:75:5e:
                    19:a3:17:0a:90:95:c4:00:b3:2e:5e:37:69:18:b5:
                    1d:10:fe:85:2a:ac:39:58:59:e6:6f:5c:29:b2:ba:
                    73:c1:c0:2f:05:82:db:6d:ce:53:f4:98:9d:82:0e:
                    94:ce:56:16:ad:3b:77:46:28:14:aa:14:7c:08:1f:
                    14:ff:ed:3b:a2:06:fe:c9:21:8d:d5:13:a9:9e:72:
                    11:5c:9b:e1:55:49:b2:71:5d:5f:11:21:90:23:72:
                    e9:51:b8:33:de:1e:a0:05:c0:cd:11:54:09:1a:8f:
                    a9:7d:e9:6f:16:32:c9:60:e0:65:48:87:f9:3d:0c:
                    aa:10:bc:69:83:37:bd:de:55:c3:c1:76:c7:59:0b:
                    f8:35:30:91:86:cd:60:6d:cd:bb:58:f8:84:76:00:
                    1e:b4:d3:22:18:3e:a1:9e:5f:eb:7a:36:cb:2d:52:
                    8a:1b:40:cd:4c:eb:1f:74:ee:55:87:99:ca:e0:dd:
                    c7:7a:62:9f:ba:84:ac:df:ef:ad:4c:f9:75:a9:c9:
                    06:1f:7a:2a:86:1a:19:80:f3:50:b0:9e:8b:86:cd:
                    e8:18:8a:ff:36:5e:88:17:94:1d:56:ca:1d:46:6c:
                    b2:3c:c1:8c:9a:a1:fa:9f:92:94:e7:33:23:52:5e:
                    f9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:43:26:0D:38:10:16:4D:E1:00:25:20:9D:7A:E5:A3:7A:DE:FF:B8
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/rUMmDTgQFk3hACUgnXrlo3re_7g.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:60:f008::/46

    Signature Algorithm: sha256WithRSAEncryption
         cb:fa:2c:cf:1e:cc:1e:e6:a4:e2:14:63:68:d8:f0:2e:8d:8f:
         cd:6f:6a:df:f8:ac:7d:fb:c6:db:06:63:33:d1:65:f0:fe:90:
         c4:ac:bd:e6:d7:12:1e:86:7b:ad:93:d6:24:00:8e:3a:4a:0c:
         34:87:41:7e:f1:92:5d:6b:c1:44:2d:a7:85:a8:5e:01:dd:34:
         90:a0:34:30:97:76:71:43:7a:25:51:b7:a2:10:87:36:3b:99:
         32:6d:dd:77:6e:3d:45:96:48:60:2a:c9:b2:bb:07:8f:8e:69:
         2a:7d:4f:df:2d:c0:eb:fc:17:82:1d:4a:72:f0:5b:e9:65:dd:
         e4:f6:69:48:40:e7:73:37:74:bd:2f:f8:c3:2b:66:68:0d:68:
         16:53:dc:2c:07:63:15:e8:ac:fb:ec:e5:bb:29:13:51:99:bc:
         ca:d9:55:9d:db:78:07:c2:c1:d3:6c:1d:eb:91:1a:10:6a:17:
         c3:d5:ff:72:ee:c3:a9:20:bc:d7:a5:9d:23:d7:9f:60:89:91:
         b6:09:1e:0b:1f:e2:cc:95:ba:0e:d4:0f:c9:93:db:61:0c:39:
         68:24:3d:c1:c4:a0:e8:e7:87:0f:f6:c2:58:e7:5a:85:33:3e:
         65:a3:b2:88:d9:4d:2f:0c:4e:a5:a9:e9:a6:a9:f9:7a:9e:94:
         43:ae:bd:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:38 2026 by rpki-client