Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/wEKZkgBvZslg6Elezft5WRF0yzI.roa
File:                     wEKZkgBvZslg6Elezft5WRF0yzI.roa (raw, json)
Hash identifier:          APRvDLFnMwtFkikyYHS96KqJxxsVKxXHgjqFVHjNPzg=
Subject key identifier:   C0:42:99:92:00:6F:66:C9:60:E8:49:5E:CD:FB:79:59:11:74:CB:32
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0770
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/wEKZkgBvZslg6Elezft5WRF0yzI.roa
Signing time:             Tue 31 Mar 2026 08:27:53 +0000
ROA not before:           Tue 31 Mar 2026 08:27:53 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:17:fcc::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1904 (0x770)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:27:53 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C0429992006F66C960E8495ECDFB79591174CB32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:07:92:22:cd:65:b2:b2:c0:36:94:14:b8:23:
                    39:3a:2b:fd:7a:7c:b9:e4:3a:f8:4f:3f:f5:60:84:
                    7a:61:34:74:a0:b3:0d:45:23:fb:ff:50:52:f3:ae:
                    3a:fb:d5:5a:8c:e6:68:49:55:a8:22:60:e5:bf:b5:
                    2c:6e:02:2b:75:4e:1d:50:8e:5a:20:6f:44:e0:b3:
                    a0:dc:c2:8e:37:df:6e:68:09:cc:b0:0c:2f:e6:5a:
                    fe:f4:e3:b7:f9:07:4e:48:37:b0:8e:a8:59:d5:5c:
                    ea:f4:29:a1:f8:16:31:bc:94:50:12:4e:7d:95:52:
                    14:6f:a4:1a:d9:49:28:08:dc:32:79:58:9c:d7:d1:
                    0d:a5:39:e7:30:3c:bf:72:4a:9e:e4:3b:79:fb:cb:
                    27:b9:43:6d:17:05:9e:d3:00:cb:58:58:c4:bf:e0:
                    fe:a4:ed:4d:2f:7d:db:4d:e2:e0:f4:2a:bc:0e:03:
                    fb:db:3c:2d:25:28:72:8d:f7:e3:25:82:53:73:9d:
                    ce:98:c5:09:4a:2b:7f:6a:ee:c8:df:b5:17:63:47:
                    74:f6:72:a1:c4:15:30:f0:dc:41:2e:72:c0:a9:8f:
                    49:c1:cd:c0:40:e4:e5:11:fa:2b:23:be:bd:80:3b:
                    0c:62:57:5a:85:70:1c:82:df:e9:85:34:df:b5:93:
                    92:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:42:99:92:00:6F:66:C9:60:E8:49:5E:CD:FB:79:59:11:74:CB:32
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/wEKZkgBvZslg6Elezft5WRF0yzI.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:17:fcc::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:f2:ca:df:fc:82:b6:03:87:57:aa:78:66:32:0f:09:16:20:
         c6:62:a5:55:4d:0d:61:a4:2a:2c:d0:c9:14:77:81:a8:ae:4a:
         d6:f5:9f:7f:6a:85:1a:e6:7a:4e:8f:95:35:71:dc:cf:66:ae:
         62:eb:5e:d4:9a:62:12:3c:dd:23:6c:69:e0:9a:cb:ca:03:cd:
         1d:a3:94:fd:1f:08:72:8b:ad:74:65:54:27:b3:a8:8e:47:4b:
         c3:e5:f1:d0:f8:d3:b5:ee:fc:a1:63:15:f9:09:42:65:07:74:
         92:07:58:86:8a:9e:c2:50:12:0c:bb:af:a3:39:38:0a:e7:ea:
         de:76:7d:8a:cc:2a:1c:bc:65:84:bd:2c:d1:bc:5c:7e:2f:04:
         d5:0f:2b:04:27:ed:25:18:63:64:c0:d5:54:a9:68:62:c7:46:
         58:1a:ce:cc:af:0c:7a:f4:c8:53:98:e1:ec:72:e1:e2:1e:2e:
         b5:d4:7d:d5:43:fa:c9:d0:c8:ff:f0:2e:e5:47:07:22:77:d6:
         00:bd:9b:c0:ae:a5:a0:a0:4b:a4:73:95:b1:0c:d6:da:b0:ce:
         cf:15:68:25:56:3e:9d:e3:32:f6:e7:90:7e:0a:a1:db:7f:11:
         77:0a:8e:f3:6e:92:ef:8d:ca:17:30:50:e4:98:21:59:37:c2:
         87:93:58:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:08 2026 by rpki-client