Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ua9vjYhU4Trh8kyYLKO4PopXCUY.roa
File:                     ua9vjYhU4Trh8kyYLKO4PopXCUY.roa (raw, json)
Hash identifier:          c9KzvVhkIyeGP39A5G12hXGx7b+3h5rd757v/ar8h8o=
Subject key identifier:   B9:AF:6F:8D:88:54:E1:3A:E1:F2:4C:98:2C:A3:B8:3E:8A:57:09:46
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0756
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ua9vjYhU4Trh8kyYLKO4PopXCUY.roa
Signing time:             Tue 31 Mar 2026 08:27:40 +0000
ROA not before:           Tue 31 Mar 2026 08:27:40 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:70::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1878 (0x756)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:27:40 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B9AF6F8D8854E13AE1F24C982CA3B83E8A570946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7b:4a:7c:0f:dc:26:81:ed:d1:cf:4f:6f:27:
                    46:1c:f2:94:0a:fa:9c:de:1d:33:27:c3:67:71:04:
                    a8:4d:ce:c5:a2:e0:f6:c1:f7:a6:57:7f:51:31:99:
                    b0:77:45:48:34:5f:1f:32:2d:6b:da:17:95:da:94:
                    3b:2e:18:18:43:c9:95:35:11:d5:db:78:b0:ec:a6:
                    b7:65:f2:98:27:b3:24:d2:f5:a0:66:43:80:0a:7f:
                    c1:30:47:b8:a4:90:98:de:8d:e1:47:38:99:e7:d7:
                    4c:7c:e0:d2:f6:07:f1:80:14:55:09:43:0b:5c:f8:
                    2e:40:a8:fd:f5:ea:ac:44:03:a7:44:89:e7:a1:59:
                    be:6d:23:10:2d:f1:24:ab:d2:c0:66:2b:ef:74:68:
                    19:15:c3:aa:f2:53:02:20:5b:d7:8c:7e:86:cc:c0:
                    41:c0:07:24:ee:25:a1:14:29:54:42:c8:86:1e:5e:
                    d5:80:46:72:9c:4f:e1:7b:e0:22:95:e6:66:3f:88:
                    8d:a4:ac:18:44:a4:f5:66:82:8c:3c:99:44:0c:3e:
                    ce:7c:57:31:26:6d:98:fc:32:17:05:d0:46:c9:2a:
                    4c:e9:43:49:f9:a0:3d:b1:9c:e3:7c:c8:ac:a5:98:
                    ac:87:2f:1b:1f:ad:f1:78:a3:7f:6a:e8:30:d6:38:
                    80:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:AF:6F:8D:88:54:E1:3A:E1:F2:4C:98:2C:A3:B8:3E:8A:57:09:46
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ua9vjYhU4Trh8kyYLKO4PopXCUY.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:70::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:59:72:b9:01:7a:34:01:c6:8c:d2:49:74:9f:b5:6f:cb:48:
         fd:dd:ed:2d:14:ae:42:d8:2e:e5:32:24:38:d7:9b:95:4b:66:
         f4:c1:f1:28:b1:f7:56:cd:b0:cc:b1:9a:f8:ba:52:7e:da:bb:
         1d:15:cc:b4:0d:72:d4:a8:d4:ed:7d:29:e4:b9:fb:60:c2:cf:
         9e:56:5c:f8:36:06:11:96:52:51:6b:64:c6:a8:a3:db:00:22:
         78:18:b9:b1:62:9e:9c:8d:d0:d2:0e:a1:73:37:b2:16:3c:92:
         11:ad:8c:c3:9d:31:ce:6f:17:ed:ef:ce:7f:13:41:d2:47:28:
         c3:58:4e:ef:47:f0:5f:41:4a:d4:31:fb:93:f0:98:a8:f8:be:
         75:71:8f:56:0c:54:c7:1c:8a:af:4c:3f:e8:28:d6:39:3f:e7:
         f6:ef:54:ab:4d:28:70:fe:42:e4:0f:aa:06:7b:a1:55:f8:bc:
         ca:ba:dd:80:b5:f2:d4:b6:24:83:67:d6:9b:6d:ee:b6:b7:dc:
         dd:2a:07:68:89:41:41:8c:fb:73:9d:41:27:56:0b:c2:1b:1a:
         41:57:07:d8:48:1c:66:a1:d9:6c:c5:1b:11:f3:38:42:c7:e6:
         db:1f:f2:06:82:14:15:79:1f:6f:6c:cf:49:76:74:47:02:dc:
         51:2c:b4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:59 2026 by rpki-client