Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/uhloi1yERz7yiiDXHNdm_bWvIPE.roa
File:                     uhloi1yERz7yiiDXHNdm_bWvIPE.roa (raw, json)
Hash identifier:          vwbI2uZIKOq3o8KwPO0qUH2CshJ+MeECSp3vycq78FA=
Subject key identifier:   BA:19:68:8B:5C:84:47:3E:F2:8A:20:D7:1C:D7:66:FD:B5:AF:20:F1
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0705
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/uhloi1yERz7yiiDXHNdm_bWvIPE.roa
Signing time:             Tue 31 Mar 2026 08:27:00 +0000
ROA not before:           Tue 31 Mar 2026 08:27:00 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:6d00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1797 (0x705)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:27:00 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=BA19688B5C84473EF28A20D71CD766FDB5AF20F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bd:52:64:99:0e:a9:39:be:83:24:f3:69:b0:
                    15:cd:dd:66:56:fb:72:08:40:25:ff:a3:a5:47:1d:
                    17:4c:08:25:68:34:32:a1:80:1e:6d:e2:af:5d:a6:
                    55:3d:6a:f6:d4:9e:4f:00:45:fb:7b:2a:50:d7:a6:
                    4d:20:ea:4f:7e:ea:f1:f2:a3:86:7e:25:b7:f9:c2:
                    36:c3:41:96:cb:ee:4f:2b:8d:ae:13:8d:fb:be:cd:
                    82:92:4b:bf:25:f7:aa:ed:a5:d7:78:d4:20:b0:cb:
                    38:77:ec:39:5a:54:0a:df:82:5c:b4:dd:10:2f:59:
                    6a:b7:95:f7:ed:e6:eb:ec:28:34:81:d6:f5:b4:ec:
                    7f:c0:75:e9:1d:39:63:af:5e:69:84:0b:86:7b:c7:
                    0e:71:a1:ba:0d:39:45:28:7e:b2:75:02:a1:54:e4:
                    e8:22:ec:1c:4d:08:dd:58:49:16:88:9c:96:a8:ca:
                    c5:9e:2e:a1:4f:e2:b2:39:54:12:9e:87:6b:d6:40:
                    55:2c:06:1a:02:31:ce:b3:2d:50:1d:b8:a5:3b:8c:
                    20:49:68:6e:35:72:bb:b9:cc:98:77:63:08:57:d3:
                    41:09:67:80:bc:34:8d:09:05:7f:6f:f4:d5:9e:c7:
                    9c:c2:13:29:78:13:ae:29:9b:62:23:be:4c:75:35:
                    cd:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:19:68:8B:5C:84:47:3E:F2:8A:20:D7:1C:D7:66:FD:B5:AF:20:F1
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/uhloi1yERz7yiiDXHNdm_bWvIPE.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:6d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         8c:26:61:94:b1:77:7c:ca:06:c3:c0:eb:76:f5:de:3d:87:ed:
         89:9d:49:c2:4a:63:b9:2e:3a:15:d3:61:ac:9f:6c:95:5c:48:
         48:6d:c0:69:d1:57:b4:68:b6:11:f9:f7:fa:9b:27:4d:b2:51:
         4e:36:e7:8f:60:b3:48:0e:20:36:02:0f:8d:2f:78:51:22:7e:
         3d:eb:61:66:bf:58:65:77:46:6d:38:bf:fd:0a:61:24:f1:7c:
         2a:2f:d6:d0:37:cd:02:65:91:a3:68:d9:96:15:74:f5:dd:26:
         23:d0:ec:e9:18:be:db:04:f0:a7:a6:1e:3d:9d:a9:1e:5c:44:
         61:d2:06:6e:09:00:c1:21:81:80:95:fb:97:74:fb:d7:f4:fa:
         76:27:09:96:35:44:db:f4:02:4f:de:0d:41:e3:b4:0e:d8:b0:
         12:31:a1:d8:65:dd:a9:db:3e:99:26:cd:2b:9b:12:17:8e:f5:
         eb:7d:23:b0:34:4d:ec:26:38:98:b5:35:4c:64:6e:b7:f7:04:
         03:29:01:fd:9a:34:82:b5:7b:e0:78:f1:ea:7e:9d:2c:8d:a3:
         cf:7c:dd:57:08:2b:cc:3c:59:4f:1c:42:bf:2e:e2:9d:92:bc:
         68:9b:35:68:57:d7:4e:fa:dd:31:14:b2:49:7c:b2:00:23:9b:
         bf:e3:96:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:01 2026 by rpki-client