Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ssiDvANh54KJZNkELz2gchQu-Yk.roa
File:                     ssiDvANh54KJZNkELz2gchQu-Yk.roa (raw, json)
Hash identifier:          YBa4jHBf3+4qiMEP/OZa7MxesI0vtN60OndV8C+/eqs=
Subject key identifier:   B2:C8:83:BC:03:61:E7:82:89:64:D9:04:2F:3D:A0:72:14:2E:F9:89
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       06E5
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ssiDvANh54KJZNkELz2gchQu-Yk.roa
Signing time:             Tue 31 Mar 2026 08:26:45 +0000
ROA not before:           Tue 31 Mar 2026 08:26:45 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:14:e90::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1765 (0x6e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:26:45 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B2C883BC0361E7828964D9042F3DA072142EF989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9f:5c:b5:a2:8f:97:6c:a6:c5:94:5d:ef:91:
                    89:cb:1c:b4:d7:4c:cf:c0:d4:66:7f:17:f9:e9:17:
                    69:d0:67:c3:2b:70:23:59:9d:83:7b:25:dc:74:25:
                    97:b6:6f:51:e5:4d:5e:06:df:29:07:bf:9e:b0:27:
                    bd:f7:ed:c2:c1:a0:29:0b:56:fb:50:dd:da:8d:6d:
                    f5:47:0d:27:68:a6:ff:13:60:27:77:3e:3a:b1:74:
                    d2:36:bc:55:0d:57:cd:6d:76:8d:1a:56:23:e1:ab:
                    98:35:18:5c:4f:62:4a:b3:5f:3e:e9:cc:94:6f:d1:
                    47:28:f0:58:10:16:93:ff:c0:db:00:10:49:68:a9:
                    fe:69:32:4c:d6:1f:a3:d1:3a:c1:38:f4:d7:07:80:
                    0f:b2:f9:32:f5:2f:64:01:84:38:d6:e7:f7:1a:b1:
                    c4:9c:76:95:24:c2:72:1a:af:22:5b:7d:fc:b3:cf:
                    e8:a4:eb:47:cc:16:af:2c:b5:3e:ae:0a:d1:3d:b4:
                    fa:d8:ea:66:02:f5:2f:1d:08:08:a1:c4:4a:78:bb:
                    ff:7a:09:64:6f:08:01:8a:5e:c4:01:b1:de:85:c2:
                    36:fd:96:35:b1:79:31:ea:85:f1:26:e6:86:a3:ec:
                    8d:f3:44:54:8f:bf:b4:ab:08:28:2a:49:f4:c5:e7:
                    23:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:C8:83:BC:03:61:E7:82:89:64:D9:04:2F:3D:A0:72:14:2E:F9:89
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ssiDvANh54KJZNkELz2gchQu-Yk.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:14:e90::/44

    Signature Algorithm: sha256WithRSAEncryption
         6f:10:da:a6:80:50:e4:76:0f:9f:42:19:ad:bb:6b:ec:08:63:
         d9:06:2f:84:ec:e4:e8:6c:76:d8:0c:d2:80:d0:9e:6d:1b:b0:
         d1:32:bd:d1:9c:0b:80:d2:86:b5:84:4a:93:01:d6:6d:b2:2e:
         20:b1:a9:4d:7e:02:f7:f5:76:b5:e0:f8:b8:f2:f7:1e:42:f0:
         54:8e:9f:7b:e6:7d:8b:7a:86:20:31:51:a1:d8:aa:53:4d:6e:
         ab:c0:d5:b5:e5:2b:05:89:b0:d6:26:ea:16:81:b3:99:c7:68:
         e6:9a:29:23:60:65:49:4c:db:c0:1d:d3:77:f2:f6:43:81:64:
         40:68:75:c8:e7:3f:a5:88:41:3a:fd:42:5f:ab:b3:f4:41:82:
         e9:c0:42:43:01:b2:7a:87:c4:17:b1:e1:77:f5:d6:ec:72:b1:
         3c:4b:f1:6c:f4:29:8f:9c:93:af:4e:20:8c:66:73:47:46:cc:
         0c:84:8a:a8:47:9d:53:74:e1:c5:9d:69:7d:27:ef:bc:27:4d:
         d9:00:0d:76:c1:24:30:7f:22:45:ab:20:6c:8c:ea:ab:cb:c4:
         ae:9d:eb:53:36:6e:c5:fa:7d:b2:90:f0:72:63:c1:1a:ef:5d:
         8a:73:6e:bb:54:05:5e:cc:44:43:0d:d5:7d:02:d5:6c:5f:40:
         f4:00:72:f2
-----BEGIN CERTIFICATE-----
MIIExDCCA6ygAwIBAgICBuUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjAzMzEw
ODI2NDVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEIyQzg4M0JDMDM2MUU3
ODI4OTY0RDkwNDJGM0RBMDcyMTQyRUY5ODkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDIn1y1oo+XbKbFlF3vkYnLHLTXTM/A1GZ/F/npF2nQZ8MrcCNZ
nYN7Jdx0JZe2b1HlTV4G3ykHv56wJ7337cLBoCkLVvtQ3dqNbfVHDSdopv8TYCd3
PjqxdNI2vFUNV81tdo0aViPhq5g1GFxPYkqzXz7pzJRv0Uco8FgQFpP/wNsAEElo
qf5pMkzWH6PROsE49NcHgA+y+TL1L2QBhDjW5/cascScdpUkwnIaryJbffyzz+ik
60fMFq8stT6uCtE9tPrY6mYC9S8dCAihxEp4u/96CWRvCAGKXsQBsd6Fwjb9ljWx
eTHqhfEm5oaj7I3zRFSPv7SrCCgqSfTF5yNVAgMBAAGjggHgMIIB3DAdBgNVHQ4E
FgQUssiDvANh54KJZNkELz2gchQu+YkwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDEyOS9zc2lEdkFOaDU0S0paTmtFTHoyZ2NoUXUtWWsucm9h
MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJAoAFA6QMA0GCSqGSIb3DQEB
CwUAA4IBAQBvENqmgFDkdg+fQhmtu2vsCGPZBi+E7OTobHbYDNKA0J5tG7DRMr3R
nAuA0oa1hEqTAdZtsi4gsalNfgL39Xa14Pi48vceQvBUjp975n2LeoYgMVGh2KpT
TW6rwNW15SsFibDWJuoWgbOZx2jmmikjYGVJTNvAHdN38vZDgWRAaHXI5z+liEE6
/UJfq7P0QYLpwEJDAbJ6h8QXseF39dbscrE8S/Fs9CmPnJOvTiCMZnNHRswMhIqo
R51TdOHFnWl9J++8J03ZAA12wSQwfyJFqyBsjOqry8SunetTNm7F+n2ykPByY8Ea
712Kc267VAVezERDDdV9AtVsX0D0AHLy
-----END CERTIFICATE-----
Generated at Tue Apr 7 21:03:20 2026 by rpki-client