Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30102/jjUiO6Vn-kfmqIMSL4Db2qNHKSA.roa
File:                     jjUiO6Vn-kfmqIMSL4Db2qNHKSA.roa (raw, json)
Hash identifier:          J9OFVASw58DHINCVoVKjpqjz19raAE6wWB/fxdzEqTg=
Subject key identifier:   8E:35:22:3B:A5:67:FA:47:E6:A8:83:12:2F:80:DB:DA:A3:47:29:20
Certificate issuer:       /CN=39CE09592C9DA61CC03C3D324A7C6CAC4777CCCF
Certificate serial:       49
Authority key identifier: 39:CE:09:59:2C:9D:A6:1C:C0:3C:3D:32:4A:7C:6C:AC:47:77:CC:CF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Oc4JWSydphzAPD0ySnxsrEd3zM8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30102/jjUiO6Vn-kfmqIMSL4Db2qNHKSA.roa
Signing time:             Tue 31 Mar 2026 08:14:21 +0000
ROA not before:           Tue 31 Mar 2026 08:14:21 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9617
IP address blocks:        2400:3800::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30102/Oc4JWSydphzAPD0ySnxsrEd3zM8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30102/Oc4JWSydphzAPD0ySnxsrEd3zM8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Oc4JWSydphzAPD0ySnxsrEd3zM8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 13:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39CE09592C9DA61CC03C3D324A7C6CAC4777CCCF
        Validity
            Not Before: Mar 31 08:14:21 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=8E35223BA567FA47E6A883122F80DBDAA3472920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:50:fe:8b:c2:ea:67:73:8a:3b:ec:cd:2e:27:
                    64:5e:ee:be:68:ef:24:25:48:de:60:b9:62:0b:25:
                    e2:43:7a:89:20:a2:8b:01:25:d5:ca:27:58:c8:1a:
                    a9:96:7c:14:61:28:b2:f8:fc:ea:75:6f:8a:0e:32:
                    b7:ce:7e:d2:46:9b:a4:b9:e6:61:5e:4d:ce:3d:36:
                    11:bb:79:29:69:fe:d3:99:f6:27:c9:6e:d9:fa:43:
                    45:4f:6d:84:d4:25:c1:3c:61:d6:42:22:76:8b:2c:
                    b8:d5:84:d4:15:87:9a:76:e0:3f:a2:50:9d:b0:5f:
                    7e:62:c7:ee:7a:01:cc:05:b1:4d:6e:7d:5a:52:48:
                    5a:ad:8e:fa:69:78:30:fa:f5:bd:a2:a0:e4:e6:d8:
                    69:09:91:b1:4f:cb:53:7d:6b:58:3b:4f:b6:58:e6:
                    53:d4:af:d2:77:5c:14:eb:30:7c:f6:19:57:5a:d6:
                    6c:4d:6a:c8:a3:d4:f5:09:bc:a8:1b:b6:92:ee:d2:
                    ee:c9:aa:6a:c5:8b:8a:50:df:97:16:79:a5:21:09:
                    81:2a:48:60:1c:f7:da:25:5f:c6:55:40:e3:c2:2d:
                    b8:e7:0b:a3:c1:c3:18:65:c6:96:76:6d:4f:e5:b0:
                    12:60:f1:70:18:9e:cd:e3:6e:1d:f7:e5:72:09:db:
                    44:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:35:22:3B:A5:67:FA:47:E6:A8:83:12:2F:80:DB:DA:A3:47:29:20
            X509v3 Authority Key Identifier:
                keyid:39:CE:09:59:2C:9D:A6:1C:C0:3C:3D:32:4A:7C:6C:AC:47:77:CC:CF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30102/Oc4JWSydphzAPD0ySnxsrEd3zM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Oc4JWSydphzAPD0ySnxsrEd3zM8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30102/jjUiO6Vn-kfmqIMSL4Db2qNHKSA.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:3800::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:7b:e8:c7:91:6b:73:7b:38:1d:f4:8f:bf:68:66:76:5a:90:
         1f:96:92:d2:d4:ad:25:94:91:70:7d:14:eb:fb:0b:69:bc:c8:
         e0:8d:38:e4:33:94:b7:b1:ea:e6:68:8d:30:4d:db:3d:3a:aa:
         ff:e6:04:aa:ad:61:8e:36:cf:59:b5:26:f2:b5:77:4d:02:02:
         24:eb:95:eb:fc:74:26:bc:0c:1e:85:c4:ca:56:c3:aa:0b:4f:
         a5:4c:bb:60:3b:0c:8f:0b:7a:47:d2:86:5e:5b:e2:79:d7:9d:
         4e:24:14:93:71:9d:32:be:47:ec:10:74:ee:4e:40:e5:44:08:
         74:97:aa:00:ff:27:39:df:92:62:e5:88:9d:b2:81:78:b1:f0:
         35:bc:e7:49:10:ac:62:4b:d3:7d:9f:4f:8c:1f:6d:82:4b:d1:
         70:d9:bf:56:ff:1d:47:45:1a:1d:9f:cf:20:54:82:58:a1:d4:
         0a:c9:59:4e:0b:60:79:d8:fa:f2:b5:ee:f8:20:fb:dc:77:79:
         1a:53:d8:c5:dc:3f:89:e0:a0:86:80:8d:e1:7d:65:84:d6:3f:
         67:6b:54:86:58:19:64:e0:01:44:38:49:a1:17:2f:62:b2:58:
         10:85:2b:fc:c6:75:7b:a2:20:17:2a:fe:e5:73:55:28:af:a0:
         f4:09:67:8a
-----BEGIN CERTIFICATE-----
MIIEwTCCA6mgAwIBAgIBSTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzOUNF
MDk1OTJDOURBNjFDQzAzQzNEMzI0QTdDNkNBQzQ3NzdDQ0NGMB4XDTI2MDMzMTA4
MTQyMVoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoOEUzNTIyM0JBNTY3RkE0
N0U2QTg4MzEyMkY4MERCREFBMzQ3MjkyMDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMhQ/ovC6mdzijvszS4nZF7uvmjvJCVI3mC5Ygsl4kN6iSCiiwEl
1conWMgaqZZ8FGEosvj86nVvig4yt85+0kabpLnmYV5Nzj02Ebt5KWn+05n2J8lu
2fpDRU9thNQlwTxh1kIidossuNWE1BWHmnbgP6JQnbBffmLH7noBzAWxTW59WlJI
Wq2O+ml4MPr1vaKg5ObYaQmRsU/LU31rWDtPtljmU9Sv0ndcFOswfPYZV1rWbE1q
yKPU9Qm8qBu2ku7S7smqasWLilDflxZ5pSEJgSpIYBz32iVfxlVA48ItuOcLo8HD
GGXGlnZtT+WwEmDxcBiezeNuHfflcgnbRO0CAwEAAaOCAd4wggHaMB0GA1UdDgQW
BBSONSI7pWf6R+aogxIvgNvao0cpIDAfBgNVHSMEGDAWgBQ5zglZLJ2mHMA8PTJK
fGysR3fMzzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAxMDIvT2M0SldTeWRwaHpBUEQweVNueHNyRWQzek04LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvT2M0SldTeWRwaHpBUEQweVNueHNy
RWQzek04LmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzMwMTAyL2pqVWlPNlZuLWtmbXFJTVNMNERiMnFOSEtTQS5yb2Ew
IAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkADgAMA0GCSqGSIb3DQEBCwUA
A4IBAQB+e+jHkWtzezgd9I+/aGZ2WpAflpLS1K0llJFwfRTr+wtpvMjgjTjkM5S3
sermaI0wTds9Oqr/5gSqrWGONs9ZtSbytXdNAgIk65Xr/HQmvAwehcTKVsOqC0+l
TLtgOwyPC3pH0oZeW+J5151OJBSTcZ0yvkfsEHTuTkDlRAh0l6oA/yc535Ji5Yid
soF4sfA1vOdJEKxiS9N9n0+MH22CS9Fw2b9W/x1HRRodn88gVIJYodQKyVlOC2B5
2Pryte74IPvcd3kaU9jF3D+J4KCGgI3hfWWE1j9na1SGWBlk4AFEOEmhFy9islgQ
hSv8xnV7oiAXKv7lc1Uor6D0CWeK
-----END CERTIFICATE-----
Generated at Mon Apr 6 15:25:30 2026 by rpki-client