Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30349/J3zMrleH_K_ztaPh1MMSHlQK0nY.roa
File:                     J3zMrleH_K_ztaPh1MMSHlQK0nY.roa (raw, json)
Hash identifier:          xep6qdmyvQJOngb6ywzFZYLH40PtKAar9c80BbMAAa0=
Subject key identifier:   27:7C:CC:AE:57:87:FC:AF:F3:B5:A3:E1:D4:C3:12:1E:54:0A:D2:76
Certificate issuer:       /CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
Certificate serial:       62
Authority key identifier: 5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/J3zMrleH_K_ztaPh1MMSHlQK0nY.roa
Signing time:             Tue 31 Mar 2026 08:42:46 +0000
ROA not before:           Tue 31 Mar 2026 08:42:46 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     0
IP address blocks:        2405:25c0:5000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
        Validity
            Not Before: Mar 31 08:42:46 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=277CCCAE5787FCAFF3B5A3E1D4C3121E540AD276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:19:ba:98:d2:3c:1e:5d:6e:98:e7:65:99:08:
                    9e:e1:77:b2:7b:f0:3b:dd:9f:d1:64:76:eb:f3:14:
                    76:ea:77:59:c5:19:3c:04:3f:93:53:96:8f:9a:9f:
                    4a:0a:46:48:c5:6e:87:ce:89:ef:e9:ff:7c:91:bb:
                    da:55:f6:00:57:0f:47:f1:76:42:9f:b4:eb:f9:47:
                    89:4d:c3:d1:48:5e:6d:ff:41:ea:5e:2a:06:5a:dd:
                    13:33:68:85:c8:73:91:be:a6:0b:49:44:4d:36:03:
                    43:41:03:ce:0f:39:e9:cd:73:2d:63:23:7b:e7:ed:
                    81:db:1b:5d:d6:6c:cb:3b:26:4d:7a:21:ec:13:7b:
                    cb:bb:73:7c:94:7d:5c:36:61:3f:d5:ce:4c:58:da:
                    e9:3f:70:10:00:77:c1:ce:f8:a0:f4:59:20:fb:0f:
                    c8:af:e2:96:85:ab:6e:aa:bc:f6:c5:82:c6:10:5f:
                    0d:ee:64:23:5e:b0:0a:40:16:55:ae:0f:af:4c:05:
                    97:5e:15:ec:bd:b3:0d:f7:ed:5d:2c:6e:c4:fd:22:
                    78:26:32:f8:6d:af:bc:30:36:76:cb:75:27:83:05:
                    0b:5c:55:2e:1e:ae:2b:c3:27:ac:29:92:0a:02:8f:
                    21:3c:af:a4:78:b0:f0:ea:39:6b:ab:a7:f1:08:41:
                    1a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:7C:CC:AE:57:87:FC:AF:F3:B5:A3:E1:D4:C3:12:1E:54:0A:D2:76
            X509v3 Authority Key Identifier:
                keyid:5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/J3zMrleH_K_ztaPh1MMSHlQK0nY.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:25c0:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         9c:aa:84:bb:50:49:15:70:1c:75:1b:41:a5:93:e1:e4:bf:6d:
         1f:0a:cc:76:0a:2c:12:9f:83:0b:2a:20:d7:ac:d9:b8:6e:85:
         9c:ee:65:c8:2d:3e:f6:fa:0f:e2:17:05:5a:9a:2a:5d:76:74:
         b8:d0:e0:a6:5f:7e:f8:85:78:8f:dd:ed:fe:dd:7e:98:f6:8a:
         49:89:21:2e:55:72:56:ec:a7:23:30:2b:97:f6:a7:b0:c5:fa:
         e1:0d:98:d6:65:12:38:84:e9:cc:d4:b5:ac:d8:29:8e:4d:48:
         49:b0:f8:f7:69:e2:5c:72:73:ee:63:30:59:1e:b7:e7:51:f1:
         6d:67:8a:ad:28:fd:9d:3c:0d:26:3c:3c:ea:62:0f:ad:30:75:
         39:96:5d:cd:76:e7:e5:a9:8f:02:70:c1:e7:9f:47:7a:60:3b:
         82:23:fc:65:bf:a9:14:70:de:5b:64:2a:40:de:72:47:cd:e9:
         f3:7e:aa:65:a9:9d:29:e2:e8:d6:c3:eb:ed:da:bd:f2:89:4e:
         3d:3e:89:d5:2c:70:4e:fe:00:af:94:a8:4e:e8:cc:34:83:30:
         98:21:15:36:f5:6f:a4:ec:ea:13:b6:b2:d8:65:0d:78:19:71:
         a8:79:0f:50:77:7e:ad:10:05:58:ff:2f:ee:a7:5d:cc:75:8e:
         21:95:05:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:40:09 2026 by rpki-client