Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30159/vjb4PZQeOkns3j5c6qwyjWaClQQ.roa
File:                     vjb4PZQeOkns3j5c6qwyjWaClQQ.roa (raw, json)
Hash identifier:          jDCMkZhT1mQMLwJ9v5kMXBiE2mTT0xCnvHrFAr9Egqg=
Subject key identifier:   BE:36:F8:3D:94:1E:3A:49:EC:DE:3E:5C:EA:AC:32:8D:66:82:95:04
Certificate issuer:       /CN=B0EF0194A50D1CFB1C7B994BEFE4BE7DA6AC1968
Certificate serial:       21
Authority key identifier: B0:EF:01:94:A5:0D:1C:FB:1C:7B:99:4B:EF:E4:BE:7D:A6:AC:19:68
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sO8BlKUNHPsce5lL7-S-faasGWg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/vjb4PZQeOkns3j5c6qwyjWaClQQ.roa
Signing time:             Tue 31 Mar 2026 08:44:38 +0000
ROA not before:           Tue 31 Mar 2026 08:44:38 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     14618
IP address blocks:        2404:7a00:e000::/36 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/sO8BlKUNHPsce5lL7-S-faasGWg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/sO8BlKUNHPsce5lL7-S-faasGWg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sO8BlKUNHPsce5lL7-S-faasGWg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 07:24:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33 (0x21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0EF0194A50D1CFB1C7B994BEFE4BE7DA6AC1968
        Validity
            Not Before: Mar 31 08:44:38 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=BE36F83D941E3A49ECDE3E5CEAAC328D66829504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b3:fa:95:89:17:64:5f:a3:57:28:39:f0:9c:
                    59:f1:77:4d:5e:3d:48:41:c9:48:f2:fe:4d:fd:d6:
                    21:30:f1:43:1e:5c:3a:8c:ea:7c:27:4a:e7:d8:15:
                    3c:63:e9:f0:3f:7f:18:c1:89:a0:9a:bc:62:2c:f3:
                    67:96:6b:b9:58:40:94:d3:3a:63:5f:06:46:4b:d6:
                    be:9e:b9:ed:62:bb:9e:ed:96:4a:52:5f:7f:fc:e0:
                    56:25:6e:22:6d:c9:13:aa:dd:6f:59:29:5c:b0:c7:
                    cd:08:3d:eb:11:d8:e1:b0:14:30:a3:45:c9:2c:20:
                    90:4f:44:2b:d2:29:a2:40:7b:eb:93:39:8e:47:2b:
                    37:8a:36:53:c7:73:10:8f:cc:d8:3a:da:08:48:af:
                    8e:e2:4f:d9:86:f3:b9:aa:12:9c:65:b1:8d:ab:9c:
                    b3:74:99:ab:df:c7:64:0c:f1:4b:55:3b:15:4b:91:
                    0c:c2:a7:ae:01:72:77:a3:2e:b4:8b:f3:02:c0:6e:
                    fd:61:ec:e9:81:f5:60:de:c9:c9:24:cb:fd:fc:21:
                    a4:02:70:47:25:49:47:82:14:75:cf:6f:56:bd:4d:
                    d1:0e:8c:e5:9a:6d:0c:06:8d:02:0f:69:e3:4c:9e:
                    5c:e9:a2:38:80:f5:f6:03:19:9d:47:2d:93:75:be:
                    82:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:36:F8:3D:94:1E:3A:49:EC:DE:3E:5C:EA:AC:32:8D:66:82:95:04
            X509v3 Authority Key Identifier:
                keyid:B0:EF:01:94:A5:0D:1C:FB:1C:7B:99:4B:EF:E4:BE:7D:A6:AC:19:68

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/sO8BlKUNHPsce5lL7-S-faasGWg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sO8BlKUNHPsce5lL7-S-faasGWg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/vjb4PZQeOkns3j5c6qwyjWaClQQ.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:7a00:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         99:f4:29:c1:a2:c5:23:6c:6d:7c:e0:d0:b9:5e:e9:dc:3e:ab:
         c2:e1:33:34:4c:ca:90:a4:e3:f7:09:a2:51:44:e7:df:24:56:
         9b:f3:6e:ac:13:3d:ce:4d:9c:9e:bd:7d:08:bb:40:10:36:2e:
         7b:43:f8:5d:90:4f:d1:2b:74:37:76:c6:00:29:c0:92:8f:a4:
         21:3a:23:59:70:7a:3b:07:4e:c2:2e:39:a1:64:e5:c3:ff:7d:
         03:51:0e:57:18:ae:c8:86:c8:03:9f:13:06:03:0e:8a:dd:e2:
         fc:f7:e7:45:b3:2c:81:3a:88:27:d2:94:17:60:5f:77:1b:a1:
         7e:6b:d3:22:f6:0d:05:96:52:67:c8:ea:06:1d:d6:0e:2c:2a:
         9f:ac:a4:fd:0d:3f:20:2a:97:3a:65:61:65:9c:c9:63:88:13:
         9d:fd:15:eb:58:4e:4b:d1:63:e0:ed:f0:52:ad:21:27:40:f4:
         28:c7:c7:a5:96:ba:4b:b9:46:33:6f:1a:6c:56:08:11:94:5c:
         c3:4b:5c:6b:8f:a3:46:11:4d:e9:c3:c3:32:42:2d:da:83:8f:
         75:a7:69:a9:68:0c:53:85:7e:dc:5c:97:92:1f:4e:0e:6c:b6:
         19:f3:71:a4:06:c5:bc:42:88:8b:58:44:14:ce:23:68:47:69:
         fd:47:5a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 10:31:19 2026 by rpki-client