Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/x1Yc1NKGSQobX6IHTlrJjUHrkVQ.roa
File:                     x1Yc1NKGSQobX6IHTlrJjUHrkVQ.roa (raw, json)
Hash identifier:          VR2ZvBm5pUaVzWR0FIdx2jM4XWEvNuCeFTddd3NK6Wg=
Subject key identifier:   C7:56:1C:D4:D2:86:49:0A:1B:5F:A2:07:4E:5A:C9:8D:41:EB:91:54
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0697
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/x1Yc1NKGSQobX6IHTlrJjUHrkVQ.roa
Signing time:             Tue 31 Mar 2026 08:26:10 +0000
ROA not before:           Tue 31 Mar 2026 08:26:10 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:4e00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1687 (0x697)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:26:10 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C7561CD4D286490A1B5FA2074E5AC98D41EB9154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e9:1e:9c:bd:e6:3c:19:3a:cf:a6:66:2b:d6:
                    f4:75:98:a6:cb:61:2f:1f:30:e5:f6:35:17:48:01:
                    f6:38:0d:7a:54:74:9d:d0:c9:5a:b0:e2:7b:cc:5c:
                    83:36:28:16:9f:67:e2:f3:00:92:8c:f7:f1:d1:d6:
                    2d:95:8c:f7:74:d6:44:b2:b5:5e:33:8d:5f:f3:8a:
                    9a:4b:26:b4:61:7e:1e:03:34:e5:22:5d:d2:5e:ef:
                    f2:f4:05:f2:80:b7:b3:f2:68:34:7c:c9:2f:2d:5e:
                    3c:92:57:83:d3:2a:ac:23:aa:2c:a2:b6:0f:87:6d:
                    d8:cb:8c:a3:24:6a:63:c9:1d:f1:5f:82:6b:1a:3f:
                    ac:fc:ec:91:57:5a:d2:e3:0f:f2:00:d7:fb:4b:ed:
                    14:68:71:64:9f:0f:f3:f7:f2:0d:09:f5:3b:da:77:
                    fe:4d:bc:77:93:e7:07:50:0c:a8:dc:fc:db:1e:ef:
                    4c:7d:c4:1d:26:11:42:1a:65:cf:30:31:bc:3d:bd:
                    0b:cb:53:0c:b0:3a:0b:c7:e5:50:6f:53:aa:62:4a:
                    06:ee:f4:63:4a:3d:a2:b3:5a:ef:53:22:7c:22:1a:
                    aa:b3:3e:f1:ee:4a:82:ac:76:3e:b1:58:73:7c:9a:
                    b5:a5:a4:34:6c:93:00:2e:2d:0c:52:0e:77:f0:44:
                    3d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:56:1C:D4:D2:86:49:0A:1B:5F:A2:07:4E:5A:C9:8D:41:EB:91:54
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/x1Yc1NKGSQobX6IHTlrJjUHrkVQ.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:4e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         a2:61:ac:be:99:60:a6:71:0f:e5:01:02:f1:ed:43:ca:57:50:
         36:72:a0:4a:75:81:48:49:0a:cd:3f:c6:48:82:60:bd:8e:28:
         b4:3e:c9:af:48:fb:2d:75:72:5f:01:04:d9:7f:40:d2:3d:fe:
         3e:4b:bc:2f:2f:ae:e2:95:d6:01:de:eb:df:ae:0c:7c:3f:64:
         0f:42:23:9a:c5:f5:70:67:d1:c0:81:ca:37:20:04:b8:ac:45:
         5b:3b:0b:c3:44:71:52:ae:51:f7:fd:24:63:bb:5a:c7:3e:29:
         c9:ce:7d:8d:3b:47:02:a6:30:11:ff:0a:95:9f:16:1c:4b:64:
         bb:a5:1d:c4:c7:e0:09:d7:d8:a1:09:94:e3:2a:7c:c2:f0:25:
         af:c4:32:07:9f:0a:d5:9e:fb:03:79:81:b3:91:f2:7f:f2:60:
         d9:08:b3:3d:e5:8c:c8:28:b8:1f:00:f2:98:01:e2:c4:fb:62:
         c7:8a:d6:0e:98:aa:3e:d6:fa:24:b9:b1:e6:fe:99:3e:e5:1b:
         60:a8:6b:b6:c6:af:83:49:7e:72:cd:5f:50:00:9d:3d:42:26:
         66:2c:04:84:cb:ca:56:02:9a:0d:3e:44:c7:fb:f7:57:fa:f4:
         2c:c3:0b:68:69:35:72:2e:bf:9e:05:ce:01:25:e9:19:2d:95:
         84:a1:db:dc
-----BEGIN CERTIFICATE-----
MIIEwzCCA6ugAwIBAgICBpcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjAzMzEw
ODI2MTBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEM3NTYxQ0Q0RDI4NjQ5
MEExQjVGQTIwNzRFNUFDOThENDFFQjkxNTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDT6R6cveY8GTrPpmYr1vR1mKbLYS8fMOX2NRdIAfY4DXpUdJ3Q
yVqw4nvMXIM2KBafZ+LzAJKM9/HR1i2VjPd01kSytV4zjV/zippLJrRhfh4DNOUi
XdJe7/L0BfKAt7PyaDR8yS8tXjySV4PTKqwjqiyitg+HbdjLjKMkamPJHfFfgmsa
P6z87JFXWtLjD/IA1/tL7RRocWSfD/P38g0J9Tvad/5NvHeT5wdQDKjc/Nse70x9
xB0mEUIaZc8wMbw9vQvLUwywOgvH5VBvU6piSgbu9GNKPaKzWu9TInwiGqqzPvHu
SoKsdj6xWHN8mrWlpDRskwAuLQxSDnfwRD2HAgMBAAGjggHfMIIB2zAdBgNVHQ4E
FgQUx1Yc1NKGSQobX6IHTlrJjUHrkVQwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDEyOS94MVljMU5LR1NRb2JYNklIVGxySmpVSHJrVlEucm9h
MCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJAoAa04wDQYJKoZIhvcNAQEL
BQADggEBAKJhrL6ZYKZxD+UBAvHtQ8pXUDZyoEp1gUhJCs0/xkiCYL2OKLQ+ya9I
+y11cl8BBNl/QNI9/j5LvC8vruKV1gHe69+uDHw/ZA9CI5rF9XBn0cCByjcgBLis
RVs7C8NEcVKuUff9JGO7Wsc+KcnOfY07RwKmMBH/CpWfFhxLZLulHcTH4AnX2KEJ
lOMqfMLwJa/EMgefCtWe+wN5gbOR8n/yYNkIsz3ljMgouB8A8pgB4sT7YseK1g6Y
qj7W+iS5seb+mT7lG2Coa7bGr4NJfnLNX1AAnT1CJmYsBITLylYCmg0+RMf791f6
9CzDC2hpNXIuv54FzgEl6RktlYSh29w=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:08 2026 by rpki-client