Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/xJXCv5XpY9gRbpAg5lJI4Wh2Yt8.roa
File:                     xJXCv5XpY9gRbpAg5lJI4Wh2Yt8.roa (raw, json)
Hash identifier:          3X2q10QInbZ75T6KOr+p5xMP3y+gdbA+HCwjbzZHu3I=
Subject key identifier:   C4:95:C2:BF:95:E9:63:D8:11:6E:90:20:E6:52:48:E1:68:76:62:DF
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0663
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/xJXCv5XpY9gRbpAg5lJI4Wh2Yt8.roa
Signing time:             Tue 31 Mar 2026 08:25:44 +0000
ROA not before:           Tue 31 Mar 2026 08:25:44 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:3700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1635 (0x663)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:25:44 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C495C2BF95E963D8116E9020E65248E1687662DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0c:e2:eb:6d:38:4b:21:10:92:4d:cf:24:64:
                    b9:5c:7e:09:4a:9d:b5:72:59:eb:7b:cf:6d:a4:2c:
                    57:c1:cc:41:41:22:41:3a:06:e7:fd:b0:92:0d:ef:
                    15:f2:4c:51:f0:fc:3e:1f:b4:d7:e4:da:d2:80:97:
                    81:5a:55:88:fb:d9:1f:fa:c5:f6:00:b8:ea:df:1d:
                    1d:f4:9a:31:d4:e2:37:b9:d3:8f:57:f7:56:0d:38:
                    46:5c:b9:95:93:30:ae:94:9a:b7:26:8b:3b:5c:6b:
                    2a:8d:e9:ca:82:ea:9c:98:25:a5:99:66:81:4f:cd:
                    86:20:2e:56:9f:73:37:16:c6:29:fc:ba:c9:0a:60:
                    a5:67:42:3f:70:ae:41:00:6d:4b:1f:3b:ec:cb:79:
                    ba:c5:ab:ae:65:d5:6d:eb:93:68:48:36:3c:61:0e:
                    54:f5:6e:6a:84:10:6d:27:0e:b1:2d:c3:75:f8:f0:
                    10:a4:d1:8e:3c:db:37:34:a1:ba:cf:b1:7b:35:44:
                    be:79:5e:b1:1b:60:b6:7d:ef:58:43:e9:32:01:1c:
                    8f:e1:58:2d:cd:8d:3a:55:6b:1e:62:c5:06:14:40:
                    a0:39:3f:d8:6e:84:45:85:9b:ac:82:36:9f:15:b3:
                    ad:e3:ea:20:85:1e:2b:4c:2b:cc:13:dc:72:3b:98:
                    88:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:95:C2:BF:95:E9:63:D8:11:6E:90:20:E6:52:48:E1:68:76:62:DF
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/xJXCv5XpY9gRbpAg5lJI4Wh2Yt8.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:3700::/40

    Signature Algorithm: sha256WithRSAEncryption
         11:5f:f6:e4:9c:c9:7f:01:8e:a1:5e:bf:5a:2a:7b:95:c7:19:
         78:8b:d3:10:8f:53:68:74:25:38:36:6f:45:e5:ee:b6:a2:3f:
         c7:f8:fc:84:33:20:bb:4d:96:ff:cf:89:20:cb:76:75:95:d9:
         77:eb:a9:85:ea:dd:93:b0:1f:c7:f5:6a:3c:ab:30:43:ad:96:
         0d:42:f2:cd:fa:fa:fd:3a:d3:d5:40:d0:e7:aa:6b:c5:54:5e:
         50:14:63:d7:92:40:10:80:e5:c5:a3:4e:6c:a3:ba:d5:15:e2:
         be:1b:a6:5a:e3:27:37:d1:30:33:86:5b:ca:e9:39:66:5e:1b:
         05:84:65:28:fe:e5:5e:37:89:5e:13:d7:a8:26:21:d6:78:d1:
         21:dd:01:03:40:f0:85:38:7d:db:b3:c1:0b:39:81:49:66:d6:
         ae:8e:c3:b1:9b:54:01:c9:94:89:3d:2b:fa:2a:b3:c6:05:5d:
         9d:80:51:fe:1b:ff:02:45:4b:c0:a9:dd:85:8f:75:e0:0b:35:
         5d:65:73:8e:d8:2d:02:28:6e:ee:55:4d:b8:e8:32:6c:6f:b1:
         be:6f:2b:8b:70:de:73:82:4a:63:d9:a7:6a:b5:2b:78:5a:4a:
         35:69:a0:c3:cd:bb:8d:61:e9:6c:d8:79:1e:60:42:a2:6c:ac:
         05:35:a2:d2
-----BEGIN CERTIFICATE-----
MIIEwzCCA6ugAwIBAgICBmMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNjAzMzEw
ODI1NDRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEM0OTVDMkJGOTVFOTYz
RDgxMTZFOTAyMEU2NTI0OEUxNjg3NjYyREYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCZDOLrbThLIRCSTc8kZLlcfglKnbVyWet7z22kLFfBzEFBIkE6
Buf9sJIN7xXyTFHw/D4ftNfk2tKAl4FaVYj72R/6xfYAuOrfHR30mjHU4je5049X
91YNOEZcuZWTMK6UmrcmiztcayqN6cqC6pyYJaWZZoFPzYYgLlafczcWxin8uskK
YKVnQj9wrkEAbUsfO+zLebrFq65l1W3rk2hINjxhDlT1bmqEEG0nDrEtw3X48BCk
0Y482zc0obrPsXs1RL55XrEbYLZ971hD6TIBHI/hWC3NjTpVax5ixQYUQKA5P9hu
hEWFm6yCNp8Vs63j6iCFHitMK8wT3HI7mIhLAgMBAAGjggHfMIIB2zAdBgNVHQ4E
FgQUxJXCv5XpY9gRbpAg5lJI4Wh2Yt8wHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMHMGCCsGAQUFBwELBGcwZTBjBggr
BgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDEyOS94SlhDdjVYcFk5Z1JicEFnNWxKSTRXaDJZdDgucm9h
MCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJAoAazcwDQYJKoZIhvcNAQEL
BQADggEBABFf9uScyX8BjqFev1oqe5XHGXiL0xCPU2h0JTg2b0Xl7raiP8f4/IQz
ILtNlv/PiSDLdnWV2XfrqYXq3ZOwH8f1ajyrMEOtlg1C8s36+v0609VA0Oeqa8VU
XlAUY9eSQBCA5cWjTmyjutUV4r4bplrjJzfRMDOGW8rpOWZeGwWEZSj+5V43iV4T
16gmIdZ40SHdAQNA8IU4fduzwQs5gUlm1q6Ow7GbVAHJlIk9K/oqs8YFXZ2AUf4b
/wJFS8Cp3YWPdeALNV1lc47YLQIobu5VTbjoMmxvsb5vK4tw3nOCSmPZp2q1K3ha
SjVpoMPNu41h6WzYeR5gQqJsrAU1otI=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:14 2026 by rpki-client