Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/sHB1v_sXlzTgrjiooT8Ku0Ih5qQ.roa
File:                     sHB1v_sXlzTgrjiooT8Ku0Ih5qQ.roa (raw, json)
Hash identifier:          hwJnhLqwvU08990YRko4njMmajGlGx8yeRhTf3j/4oc=
Subject key identifier:   B0:70:75:BF:FB:17:97:34:E0:AE:38:A8:A1:3F:0A:BB:42:21:E6:A4
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0710
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/sHB1v_sXlzTgrjiooT8Ku0Ih5qQ.roa
Signing time:             Tue 31 Mar 2026 08:27:08 +0000
ROA not before:           Tue 31 Mar 2026 08:27:08 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:ac00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1808 (0x710)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:27:08 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B07075BFFB179734E0AE38A8A13F0ABB4221E6A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:22:9a:13:e8:82:c6:72:6a:95:d6:a4:18:f6:
                    8b:87:cb:4a:ac:0d:f3:74:f8:7e:8b:67:2d:43:42:
                    76:9b:a1:e9:de:8a:a8:93:c2:e4:49:2c:7e:2e:1c:
                    63:cf:ff:25:9b:75:f4:2f:b1:04:13:2d:5c:ec:3b:
                    3d:6c:a2:a6:24:a3:5c:b7:ca:b9:eb:3e:91:7a:e9:
                    56:4b:af:e2:4f:16:d6:52:27:92:d5:12:34:12:d6:
                    14:00:5f:fb:b8:24:e8:a7:a8:f0:19:87:f0:2a:af:
                    79:c9:5e:3c:66:7b:3b:a4:b4:6b:9d:2a:f4:37:da:
                    5d:23:15:ee:47:59:26:7e:f6:c5:49:38:23:8b:67:
                    42:c6:67:23:db:f2:5e:82:b4:a8:46:bf:dd:a4:2b:
                    f8:6e:c2:5d:7f:a3:98:e1:ce:5b:3b:9b:49:83:08:
                    0a:d4:d2:38:d7:01:d7:fd:d0:b1:45:6a:f2:d6:3d:
                    a0:80:4e:9b:04:a7:8f:75:4a:58:0c:ee:2f:d6:f1:
                    f1:38:35:b1:77:fa:d2:d5:23:30:0f:7a:89:0b:4e:
                    23:97:19:fb:97:89:33:1b:1c:09:d7:56:32:b1:74:
                    69:00:27:8f:f2:14:5b:dc:f1:a1:72:e1:1c:1d:53:
                    ee:e6:ee:e7:0d:9e:dc:bb:06:b8:10:90:c0:67:48:
                    f4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:70:75:BF:FB:17:97:34:E0:AE:38:A8:A1:3F:0A:BB:42:21:E6:A4
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/sHB1v_sXlzTgrjiooT8Ku0Ih5qQ.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:ac00::/40

    Signature Algorithm: sha256WithRSAEncryption
         58:e0:55:1b:24:52:55:e4:7e:b7:0e:a3:d0:e4:64:2c:50:c0:
         76:5d:e6:6b:24:6d:55:cc:11:47:13:22:5f:89:ed:f2:38:a4:
         75:e0:c9:06:bb:30:12:71:ef:fd:ea:70:2a:8f:34:7f:16:b6:
         44:e1:22:c3:ee:f4:f2:e5:7e:f0:2f:6c:e3:62:95:ad:2d:94:
         95:14:e8:5f:ea:6c:2c:c6:bb:19:e7:df:51:aa:72:88:ca:8c:
         90:e4:02:71:72:86:ad:c2:18:cc:0a:c2:0e:ff:6e:f0:a3:cb:
         aa:98:71:ea:ae:bf:e1:e9:89:fb:ea:89:16:78:f2:31:a8:56:
         66:5c:36:92:53:ea:70:d5:c1:89:13:75:27:7c:6b:a3:ad:0d:
         6c:c4:0a:4b:2e:11:4a:b5:9f:6b:8b:20:37:7c:e3:87:13:82:
         7b:1f:b0:79:89:c2:18:3d:dd:b3:71:76:4c:35:22:2d:5d:9c:
         34:bb:c7:77:11:c7:cc:7b:6a:45:47:7e:8d:4c:43:c1:f6:2c:
         ef:7b:57:e1:18:1b:66:f9:15:7c:83:0f:06:16:61:69:d2:6c:
         af:99:fa:38:2f:61:04:4a:52:50:65:ac:0b:13:7b:ec:42:34:
         a9:c0:20:b7:3d:19:ac:4d:6d:09:f1:c6:1a:52:f4:da:b3:c3:
         eb:5c:21:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 21:03:25 2026 by rpki-client