Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/QQWPEqMBTjultNsqar2ZeC3i4Us.roa
File:                     QQWPEqMBTjultNsqar2ZeC3i4Us.roa (raw, json)
Hash identifier:          ClYj/boxs8HUbunfXIxEGqn2/dO7C+YZr6nQwk71KU4=
Subject key identifier:   41:05:8F:12:A3:01:4E:3B:A5:B4:DB:2A:6A:BD:99:78:2D:E2:E1:4B
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0799
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/QQWPEqMBTjultNsqar2ZeC3i4Us.roa
Signing time:             Fri 26 Jun 2026 05:15:30 +0000
ROA not before:           Fri 26 Jun 2026 05:15:30 +0000
ROA not after:            Tue 15 Jun 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:60:f05c::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Jul 2026 09:53:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1945 (0x799)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Jun 26 05:15:30 2026 GMT
            Not After : Jun 15 01:30:02 2027 GMT
        Subject: CN=41058F12A3014E3BA5B4DB2A6ABD99782DE2E14B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6c:46:0e:75:93:d8:1d:03:2d:b4:64:9e:63:
                    4c:a8:ac:f1:8b:fc:c8:de:da:c4:20:e8:63:88:86:
                    9c:b3:47:dc:d4:19:04:c9:11:8a:1b:9f:f8:16:e7:
                    a5:67:e3:c0:74:7a:f3:67:64:8d:f8:eb:a8:c1:df:
                    82:63:3b:76:6b:7e:a8:e9:ae:10:a6:4b:45:2f:f8:
                    42:ac:9a:eb:77:fe:6d:b6:61:d5:42:8a:2a:a8:73:
                    06:e1:15:95:66:a4:05:0e:db:71:f0:2f:18:9a:e1:
                    13:e0:cf:fc:a6:0d:4b:a5:c7:90:b6:ba:87:a7:c2:
                    83:6b:08:06:c3:94:41:20:ad:fa:c4:e3:86:5f:6e:
                    e6:39:70:a7:6a:43:ab:0e:2f:94:63:f4:14:50:c5:
                    3b:4d:b5:c9:ef:60:87:15:40:d5:0f:2c:e7:5b:e9:
                    c0:f8:a9:b5:e2:00:a3:40:bf:37:20:1e:18:ff:cb:
                    77:81:01:b5:be:52:26:4b:c6:bd:fc:ea:a7:19:25:
                    c5:42:93:51:ac:4e:a3:ab:c4:33:d7:32:a9:3e:b4:
                    b8:30:69:ea:65:43:85:23:d7:52:b6:22:74:06:2c:
                    d3:10:52:dc:25:ae:13:1b:bd:8e:9a:a9:9c:45:4e:
                    c4:03:9d:74:8b:7c:ef:e6:7a:b5:7e:a7:02:8f:5c:
                    c5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:05:8F:12:A3:01:4E:3B:A5:B4:DB:2A:6A:BD:99:78:2D:E2:E1:4B
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/QQWPEqMBTjultNsqar2ZeC3i4Us.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:60:f05c::/47

    Signature Algorithm: sha256WithRSAEncryption
         25:3e:4f:f8:1a:4a:f1:c2:57:93:3c:24:fd:ab:1e:5f:e0:89:
         8c:80:fe:71:ce:5a:b7:79:bf:59:62:03:66:b5:91:9f:3c:c5:
         a3:45:f7:01:a6:e5:04:fc:9c:12:9e:c0:c3:b2:76:af:26:a9:
         db:da:b7:42:4d:3b:a6:06:29:a6:5a:cc:6d:7c:10:a4:dd:59:
         ed:e1:98:8e:07:b6:92:93:21:4b:e9:4b:b5:63:8a:1a:c9:5b:
         4c:d7:c0:af:af:10:93:cb:1b:7c:d4:85:9d:0a:79:d5:f5:0e:
         00:e9:e9:43:d4:17:2a:ef:08:f3:86:de:f5:ac:cd:96:59:90:
         bf:ed:7e:58:27:8f:66:f8:8c:db:6a:4b:5e:3d:d5:2c:6b:96:
         8d:8b:4d:aa:76:4c:9f:29:bc:d3:d2:58:c0:91:c5:62:1c:9c:
         73:64:85:2d:ce:a4:d1:90:82:d1:71:45:58:06:2b:0d:2f:28:
         9a:0f:0d:30:40:35:2e:a1:ad:dc:c1:c9:e7:b6:2a:aa:2d:16:
         64:b6:a4:64:a6:7f:61:63:de:98:c6:52:2a:d0:13:7b:ab:d4:
         01:e7:54:c0:bf:ec:2b:10:7f:f2:40:3d:e1:0b:68:2b:86:c9:
         e8:4c:80:80:8c:75:0d:8f:e3:e5:19:bb:61:40:1c:f9:b8:12:
         bf:59:5e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 13:39:24 2026 by rpki-client