Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30272/zlofQUpfioUOCYC7iGh5DPqeoGI.roa
File:                     zlofQUpfioUOCYC7iGh5DPqeoGI.roa (raw, json)
Hash identifier:          moLdCZBcpouWAIg0eq/OGXuIebBwBsS7sYyyhKBAKVQ=
Subject key identifier:   CE:5A:1F:41:4A:5F:8A:85:0E:09:80:BB:88:68:79:0C:FA:9E:A0:62
Certificate issuer:       /CN=5F468B31DB275A5DDAE7A549AC058DC20D7F8C9C
Certificate serial:       43
Authority key identifier: 5F:46:8B:31:DB:27:5A:5D:DA:E7:A5:49:AC:05:8D:C2:0D:7F:8C:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/X0aLMdsnWl3a56VJrAWNwg1_jJw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30272/zlofQUpfioUOCYC7iGh5DPqeoGI.roa
Signing time:             Tue 31 Mar 2026 08:24:22 +0000
ROA not before:           Tue 31 Mar 2026 08:24:22 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     17682
IP address blocks:        2402:1580:2000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30272/X0aLMdsnWl3a56VJrAWNwg1_jJw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30272/X0aLMdsnWl3a56VJrAWNwg1_jJw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/X0aLMdsnWl3a56VJrAWNwg1_jJw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F468B31DB275A5DDAE7A549AC058DC20D7F8C9C
        Validity
            Not Before: Mar 31 08:24:22 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=CE5A1F414A5F8A850E0980BB8868790CFA9EA062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2a:88:2f:c0:03:6e:e0:0f:34:1e:28:81:0f:
                    34:03:7f:6e:aa:cc:09:84:10:fe:f5:45:80:8d:b7:
                    ec:39:56:77:3e:b1:6f:23:1d:88:51:ac:91:10:18:
                    5c:cc:b2:0b:71:31:ed:06:9e:26:15:81:d3:d7:93:
                    fe:ed:50:4f:58:5f:c5:57:7e:6c:b7:b7:b6:0e:ce:
                    2a:31:0a:41:4b:27:15:b8:1d:c4:99:cc:7c:26:46:
                    17:0f:19:c4:98:c1:1d:0d:06:fe:6f:e7:90:cd:ce:
                    80:8d:7a:0e:9e:50:38:c1:d5:42:8a:75:ac:27:f5:
                    ba:cd:75:c8:de:33:4c:5c:bd:1f:d4:77:10:a8:37:
                    38:30:5a:1d:0d:61:17:49:48:ae:64:4f:a3:8c:c9:
                    0b:4c:79:e3:04:e1:2b:19:37:2c:55:d5:b1:3f:bd:
                    8d:81:b5:6e:47:e9:79:e4:8b:0f:c0:71:87:fe:96:
                    67:48:76:34:64:1d:92:ea:1f:b9:a8:e7:b2:02:4f:
                    a2:9c:c2:94:bd:9c:f3:a1:eb:86:40:83:58:c3:82:
                    d5:80:8c:81:78:e8:de:2f:1a:43:80:5b:88:e2:42:
                    b8:ed:80:d2:b8:ad:93:c2:d1:b4:d3:a8:34:c8:50:
                    f5:5e:57:c3:ce:13:99:03:22:9e:6d:a3:68:14:0b:
                    d6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:5A:1F:41:4A:5F:8A:85:0E:09:80:BB:88:68:79:0C:FA:9E:A0:62
            X509v3 Authority Key Identifier:
                keyid:5F:46:8B:31:DB:27:5A:5D:DA:E7:A5:49:AC:05:8D:C2:0D:7F:8C:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30272/X0aLMdsnWl3a56VJrAWNwg1_jJw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/X0aLMdsnWl3a56VJrAWNwg1_jJw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30272/zlofQUpfioUOCYC7iGh5DPqeoGI.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:1580:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         9c:3a:f3:a7:89:7a:71:9b:e3:7e:dc:e8:6b:96:ea:61:0e:26:
         ac:26:5f:7c:d7:93:28:16:b2:7b:89:11:21:7c:94:87:3f:06:
         52:26:7e:08:e6:1e:f8:06:d0:a8:d0:e0:54:9d:56:91:ad:35:
         47:7d:4d:6e:80:a3:e9:6d:4c:95:0d:01:a2:ad:d5:ec:29:f6:
         ba:cb:cf:ce:94:a2:8c:b2:66:63:4a:10:ce:94:1c:23:ac:cd:
         c8:2f:1c:3b:13:39:66:db:68:fc:51:56:5a:88:69:0e:45:af:
         26:9e:3e:98:53:c3:8f:ee:8f:b6:02:0c:c4:dd:c4:6f:e0:7d:
         08:b7:b8:76:2c:1e:dd:ef:ad:8c:a3:b7:8f:18:fd:eb:a0:1f:
         9a:cb:2a:45:c9:1f:67:0c:9c:26:20:da:94:be:14:ed:e1:2f:
         06:4a:04:a5:0f:f5:9e:f5:00:7d:b7:78:3b:e6:82:32:a9:6d:
         f7:86:52:21:35:dd:e1:20:13:b7:b9:d7:92:82:b6:3d:bf:79:
         1d:ab:7f:8c:25:e5:e4:c8:d9:ce:cc:57:1f:fe:d0:44:76:27:
         cc:39:b4:f7:db:5f:24:67:62:88:5b:f9:7e:1e:28:ff:00:28:
         cd:fb:42:26:e9:dc:31:1f:38:89:1b:36:73:ff:09:80:ea:95:
         4d:df:4e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:21 2026 by rpki-client