Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/z7zISwMKvkVqctGIbwcFf-FL7-Q.roa
File:                     z7zISwMKvkVqctGIbwcFf-FL7-Q.roa (raw, json)
Hash identifier:          2UZeTID8yLG1ryuoxdm6hFkIvQ9owjqhG7LoK0LqWCw=
Subject key identifier:   CF:BC:C8:4B:03:0A:BE:45:6A:72:D1:88:6F:07:05:7F:E1:4B:EF:E4
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       06F2
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/z7zISwMKvkVqctGIbwcFf-FL7-Q.roa
Signing time:             Tue 31 Mar 2026 08:26:51 +0000
ROA not before:           Tue 31 Mar 2026 08:26:51 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:a100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1778 (0x6f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:26:51 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=CFBCC84B030ABE456A72D1886F07057FE14BEFE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:fe:2a:45:ea:67:ec:bf:cf:28:e0:a4:af:34:
                    1e:15:70:b7:33:7e:47:f0:03:83:21:23:a2:7a:59:
                    57:10:9e:bb:24:cf:2b:84:0e:67:eb:ef:2a:75:50:
                    da:38:d7:fe:3b:d2:a1:12:e5:cf:13:dd:57:67:47:
                    c1:91:92:7e:68:63:13:15:66:73:62:10:31:25:d0:
                    48:5f:ff:48:e7:fb:c2:7f:b3:80:37:bc:94:93:ae:
                    2e:b1:65:7d:48:54:1f:ce:b0:3f:f2:02:0e:53:c3:
                    97:b7:09:88:e9:12:46:f4:df:a4:fd:45:73:17:24:
                    d5:6c:dc:ea:ed:74:bf:5e:ac:65:49:90:0b:03:87:
                    3d:1c:ac:7d:d3:94:da:b0:31:23:69:9a:15:8d:ba:
                    d8:8f:87:ff:26:59:eb:af:c8:2b:50:14:92:7e:ac:
                    6e:e6:70:71:cb:29:2d:7f:3c:c9:4f:8a:a2:ad:41:
                    67:7f:9c:35:58:2a:73:ad:66:b3:73:38:2c:8c:e5:
                    23:fc:95:84:69:7d:ff:a0:6b:45:1f:d2:fe:8a:a6:
                    57:e6:0a:a1:dc:96:73:c3:51:28:39:45:c1:d5:44:
                    5d:ea:ce:a5:83:23:36:36:ca:5b:48:e4:8e:bf:7b:
                    22:a3:1a:59:95:3b:7b:80:62:d0:d7:3e:9b:96:18:
                    a7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:BC:C8:4B:03:0A:BE:45:6A:72:D1:88:6F:07:05:7F:E1:4B:EF:E4
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/z7zISwMKvkVqctGIbwcFf-FL7-Q.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:a100::/40

    Signature Algorithm: sha256WithRSAEncryption
         03:cb:2f:75:1d:be:a2:9d:78:95:3b:8b:ea:64:94:7e:ba:ec:
         b3:09:a5:0d:b3:c4:5f:95:6e:7d:4e:b6:85:36:67:be:9c:10:
         94:06:14:83:89:64:27:ef:3a:ed:7c:08:ba:58:33:ca:f3:72:
         c7:65:07:6c:2c:c6:9d:7b:4a:72:4a:a0:d8:1d:12:d7:ba:57:
         fc:8c:cb:21:30:ba:b0:8e:96:74:7a:b2:b9:08:a7:51:26:d2:
         7c:18:6f:a7:dd:1a:ce:78:32:c8:52:d8:aa:d5:56:e3:5f:3c:
         fe:74:2f:e3:7f:0f:a7:ff:69:91:7d:d9:27:f5:65:d8:93:9e:
         3c:e7:63:da:b5:31:f3:ac:01:e3:55:fb:41:41:f7:7e:79:e1:
         7f:a7:d5:3d:ca:d3:0d:3b:58:34:c2:ce:05:2d:10:1b:81:f9:
         27:b5:ed:61:32:86:3d:0e:3d:49:6c:e9:8d:ba:4c:77:93:49:
         1a:5d:7f:a6:35:a8:87:96:fa:f5:11:c0:99:55:df:58:54:e9:
         97:ca:ca:77:5f:8c:bb:a8:a8:14:57:12:8b:64:25:17:41:44:
         ea:39:77:af:6a:88:d7:c6:4f:39:6b:1e:92:d5:d9:dd:1e:ad:
         2a:cf:91:42:32:76:d8:24:30:d6:c4:99:10:4d:b8:57:6d:8a:
         90:3c:1c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:15 2026 by rpki-client