Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30229/30hXyJkMk4eBuVUqgxHQUDNWets.roa
File:                     30hXyJkMk4eBuVUqgxHQUDNWets.roa (raw, json)
Hash identifier:          /VLLX0vhb/TPIwIfeENHz2aQ4H5c1egxi592UmJWA40=
Subject key identifier:   DF:48:57:C8:99:0C:93:87:81:B9:55:2A:83:11:D0:50:33:56:7A:DB
Certificate issuer:       /CN=E06AF47B5B3459CAE224BEC7ED12FC5743434EFE
Certificate serial:       1E
Authority key identifier: E0:6A:F4:7B:5B:34:59:CA:E2:24:BE:C7:ED:12:FC:57:43:43:4E:FE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4Gr0e1s0WcriJL7H7RL8V0NDTv4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30229/30hXyJkMk4eBuVUqgxHQUDNWets.roa
Signing time:             Tue 31 Mar 2026 08:42:11 +0000
ROA not before:           Tue 31 Mar 2026 08:42:11 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     55891
IP address blocks:        2403:7300::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30229/4Gr0e1s0WcriJL7H7RL8V0NDTv4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30229/4Gr0e1s0WcriJL7H7RL8V0NDTv4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4Gr0e1s0WcriJL7H7RL8V0NDTv4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 22:48:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E06AF47B5B3459CAE224BEC7ED12FC5743434EFE
        Validity
            Not Before: Mar 31 08:42:11 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=DF4857C8990C938781B9552A8311D05033567ADB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b3:fa:8d:19:b9:3c:91:76:d4:71:1f:8c:5f:
                    b6:0e:86:40:2d:ae:83:34:56:be:36:82:50:6e:dc:
                    f7:7a:18:72:c4:e7:b5:4c:81:0a:ea:16:54:17:6c:
                    18:48:7a:a0:4f:27:6c:4f:60:cd:c0:86:43:7a:5c:
                    db:f5:6c:28:ee:72:ea:ea:0b:b9:75:58:ec:fa:6a:
                    e3:41:66:e6:e1:c6:7b:6d:71:09:8d:a1:f5:bb:ed:
                    ad:c3:89:c6:b6:ca:33:ee:a0:32:47:79:e7:b3:25:
                    4a:03:c6:5a:6b:fd:f0:74:f3:f5:42:8f:f4:10:b2:
                    b4:66:e4:c9:2c:45:72:c8:96:94:67:fd:a0:06:9d:
                    14:ff:26:d8:68:e1:d3:71:a7:d9:f7:6a:96:99:e8:
                    88:5c:fa:d2:73:a6:68:a3:5a:b8:f7:99:9a:e6:75:
                    39:0a:bf:a1:05:ec:cc:15:28:2f:50:ad:36:55:83:
                    18:59:e0:6a:d4:d6:4f:99:1f:76:3f:7a:c0:ec:36:
                    d9:56:93:98:21:41:7d:5f:3d:e4:ab:9f:ae:eb:6d:
                    69:a0:ed:99:a7:bb:2d:38:a8:bb:a2:e2:44:ff:af:
                    bb:6c:a2:dc:d2:90:62:fc:09:61:1d:f9:b6:87:2e:
                    49:9e:f0:43:76:46:22:a2:7a:78:89:21:2c:53:49:
                    5d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:48:57:C8:99:0C:93:87:81:B9:55:2A:83:11:D0:50:33:56:7A:DB
            X509v3 Authority Key Identifier:
                keyid:E0:6A:F4:7B:5B:34:59:CA:E2:24:BE:C7:ED:12:FC:57:43:43:4E:FE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30229/4Gr0e1s0WcriJL7H7RL8V0NDTv4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4Gr0e1s0WcriJL7H7RL8V0NDTv4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30229/30hXyJkMk4eBuVUqgxHQUDNWets.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:7300::/32

    Signature Algorithm: sha256WithRSAEncryption
         b4:2f:92:2b:31:bc:fd:54:0d:83:2c:61:19:4a:f1:ee:da:cd:
         ce:e9:21:9d:0a:b3:7e:f5:5b:b1:87:d8:89:86:d3:75:d4:b0:
         55:59:62:b3:6b:a6:26:55:ce:4c:40:56:33:a2:f4:6c:a0:01:
         54:ac:fa:ce:f4:42:7f:cb:69:05:78:0d:fc:91:07:13:4c:26:
         ce:25:5d:ed:bd:89:7f:b9:ae:ff:ae:e5:7a:81:a2:46:be:4a:
         22:0d:10:a3:f1:e6:b7:c5:17:04:60:72:9b:0d:69:6d:7f:01:
         d3:7d:cf:8b:7d:8c:3d:0c:28:94:4a:26:cb:7c:d0:18:4d:26:
         92:81:62:f1:d7:13:e1:fb:ac:f0:69:4d:ae:fb:f8:76:57:1a:
         99:70:8a:f9:81:35:71:d9:6c:f8:b4:b1:46:9d:c2:99:b5:34:
         c6:b7:2e:94:98:41:e4:a4:d5:12:a1:a8:04:6f:6f:d8:11:a8:
         4e:76:f2:e5:2d:a1:4d:8d:34:ea:43:e4:1c:30:7a:92:70:31:
         b6:47:b9:f4:fd:4e:86:3a:35:55:57:fc:b8:7f:a3:dd:94:56:
         b1:b8:6a:fb:9f:d1:f1:c5:97:31:64:80:2f:23:5f:f4:e1:0b:
         f1:a4:27:bf:91:7d:af:a1:a0:3b:c2:2c:a6:28:35:a5:2a:c4:
         58:2f:3b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 02:18:29 2026 by rpki-client