Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/tVPZi9cob-NpxiwV23BulbAHZTc.roa
File:                     tVPZi9cob-NpxiwV23BulbAHZTc.roa (raw, json)
Hash identifier:          Hg0Lv5pYXJS1uoTupNuAL5aLY//e5+dCUGulLaHAzEs=
Subject key identifier:   B5:53:D9:8B:D7:28:6F:E3:69:C6:2C:15:DB:70:6E:95:B0:07:65:37
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0755
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/tVPZi9cob-NpxiwV23BulbAHZTc.roa
Signing time:             Tue 31 Mar 2026 08:27:40 +0000
ROA not before:           Tue 31 Mar 2026 08:27:40 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:7f00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1877 (0x755)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:27:40 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B553D98BD7286FE369C62C15DB706E95B0076537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8c:07:d0:1b:1f:46:c6:5e:35:fb:9e:c9:51:
                    d2:2a:0a:e9:56:60:38:1f:fd:30:0b:cf:63:16:12:
                    87:01:9a:be:a8:54:c3:f3:e5:80:eb:9a:35:28:48:
                    e9:a8:0d:40:de:64:dd:23:43:07:9b:8f:d0:b1:03:
                    53:db:be:33:e2:ca:db:dc:d8:9f:18:53:51:c0:4c:
                    a2:5c:6d:cb:d4:aa:c8:db:33:c3:f1:7e:c4:a2:53:
                    68:08:99:4e:f2:49:39:8d:b9:25:ce:e1:ba:c3:58:
                    a9:bd:99:15:b6:a3:d5:5e:df:6e:b2:02:c1:a7:52:
                    8e:fa:dd:98:46:a6:37:38:94:0c:2a:25:bd:79:29:
                    a2:8f:2e:0e:47:45:db:18:57:76:61:ba:2b:d7:68:
                    cc:b8:26:2a:43:1e:dd:bb:4f:9f:0c:89:c0:09:51:
                    80:ed:a0:1a:78:88:6c:d1:53:2f:77:97:c1:04:8f:
                    59:65:93:75:98:7e:62:d3:06:e1:c9:04:44:8c:ad:
                    3b:f8:03:2f:03:58:39:71:61:1c:c8:96:73:3d:be:
                    25:76:26:b9:f5:61:7d:5b:ed:db:75:01:d1:b2:f2:
                    e0:1d:c0:82:dd:59:fb:b0:b2:89:4a:03:15:e6:db:
                    63:d6:1b:df:17:25:b3:7f:18:b8:a6:df:7a:ee:e9:
                    06:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:53:D9:8B:D7:28:6F:E3:69:C6:2C:15:DB:70:6E:95:B0:07:65:37
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/tVPZi9cob-NpxiwV23BulbAHZTc.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:7f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         ad:24:0d:c7:11:4e:e8:dc:f4:2a:44:2c:a4:56:3d:5d:1b:d3:
         ca:c8:ea:06:26:d5:ca:0e:6e:f2:6b:61:e2:97:ab:c2:3d:7c:
         14:dd:ff:2d:c0:48:11:05:3b:17:df:37:e9:cd:db:46:40:23:
         df:00:2d:7e:92:f6:5b:f7:7b:6b:68:8f:62:a4:1e:13:e5:9d:
         4a:d9:26:b6:ef:d7:63:d9:79:60:66:c4:ee:a7:6b:99:c5:d3:
         c2:fa:12:df:5e:64:35:b3:2e:19:de:1b:38:0b:29:6d:fd:45:
         03:fa:ea:5f:fd:32:60:73:b8:e6:9e:93:49:e1:b8:32:73:5d:
         15:47:c6:35:8c:fc:f4:0a:d4:45:46:5d:4d:c1:f8:7a:96:f0:
         bc:ab:5a:1f:79:c1:fa:63:68:8a:dd:3e:b1:3c:3f:86:fb:a9:
         5f:61:cb:85:85:ee:8c:89:0c:58:58:0e:8d:55:35:5e:a4:64:
         ae:ba:b3:7e:90:37:c9:54:d8:23:88:23:3b:8d:71:79:36:33:
         6b:ce:38:1f:f8:87:4a:bd:20:0b:cd:9a:ea:17:e7:dc:a0:c5:
         49:9f:b4:54:3a:cf:43:ae:bb:88:f2:9f:44:00:77:88:0a:ed:
         c0:9d:c7:a5:4a:6d:1d:2d:df:a7:09:48:9e:45:8f:69:c7:ca:
         12:c7:e1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:33 2026 by rpki-client