Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10029/UfLXmtgXWRamhBJcEcluhvvgdSE.roa
File:                     UfLXmtgXWRamhBJcEcluhvvgdSE.roa (raw, json)
Hash identifier:          jYBswwVAsIIwiCy2w/X+KhW6LfSIokbxAIGBgbxhQnQ=
Subject key identifier:   51:F2:D7:9A:D8:17:59:16:A6:84:12:5C:11:C9:6E:86:FB:E0:75:21
Certificate issuer:       /CN=2EF6A9C9450F711BF33ABA77A95E2460D0A844BF
Certificate serial:       45
Authority key identifier: 2E:F6:A9:C9:45:0F:71:1B:F3:3A:BA:77:A9:5E:24:60:D0:A8:44:BF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/LvapyUUPcRvzOrp3qV4kYNCoRL8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10029/UfLXmtgXWRamhBJcEcluhvvgdSE.roa
Signing time:             Tue 31 Mar 2026 08:16:45 +0000
ROA not before:           Tue 31 Mar 2026 08:16:45 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2514
IP address blocks:        218.40.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10029/LvapyUUPcRvzOrp3qV4kYNCoRL8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10029/LvapyUUPcRvzOrp3qV4kYNCoRL8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/LvapyUUPcRvzOrp3qV4kYNCoRL8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69 (0x45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EF6A9C9450F711BF33ABA77A95E2460D0A844BF
        Validity
            Not Before: Mar 31 08:16:45 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=51F2D79AD8175916A684125C11C96E86FBE07521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:00:35:4d:19:39:c8:e6:cc:40:9e:9f:e4:d6:
                    eb:59:f4:1c:c6:a0:9c:d9:4e:89:91:fc:d7:10:1d:
                    a8:5b:19:b2:39:29:56:3d:b4:f5:01:7d:fe:bb:6f:
                    bb:20:62:32:25:14:88:48:7d:89:47:33:56:37:ef:
                    ce:72:56:0f:40:b5:0e:7f:ea:a4:95:92:38:d6:39:
                    51:a1:fa:b7:aa:a8:28:7b:15:5e:3b:78:0e:3e:d3:
                    eb:89:81:5c:77:0a:c3:04:2c:47:9b:eb:bc:46:c3:
                    d5:a9:65:cf:aa:5b:62:e8:3b:42:8b:3f:49:a5:62:
                    9d:6f:da:9d:09:33:33:4a:02:4b:fb:31:9c:e4:b1:
                    c0:ce:35:d5:07:ca:91:50:09:2e:9b:94:a1:13:bd:
                    10:ba:7c:79:79:b7:20:c1:23:da:17:0c:ba:66:64:
                    ee:e1:39:a1:8e:be:f0:a9:20:fa:9d:d2:8d:00:98:
                    dc:80:68:5d:35:3f:e4:05:21:7d:b6:73:cf:56:c3:
                    05:f5:13:5e:82:31:90:63:8d:b4:10:8f:01:d8:43:
                    16:1d:22:92:cb:89:08:6b:45:cb:1d:c2:1c:92:46:
                    cd:25:a2:09:bd:95:58:6e:77:7b:d8:e5:f5:47:f2:
                    97:2a:1e:15:77:49:04:be:79:05:6e:cf:79:8c:a2:
                    b5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F2:D7:9A:D8:17:59:16:A6:84:12:5C:11:C9:6E:86:FB:E0:75:21
            X509v3 Authority Key Identifier:
                keyid:2E:F6:A9:C9:45:0F:71:1B:F3:3A:BA:77:A9:5E:24:60:D0:A8:44:BF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10029/LvapyUUPcRvzOrp3qV4kYNCoRL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/LvapyUUPcRvzOrp3qV4kYNCoRL8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10029/UfLXmtgXWRamhBJcEcluhvvgdSE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.40.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         86:3f:67:61:2f:3e:ba:04:3a:5d:18:69:c6:54:51:97:b7:a4:
         59:51:b7:42:7e:f5:51:6f:c2:67:41:ef:cb:22:90:80:96:46:
         b5:7d:c1:99:51:01:0d:cd:b8:dc:99:58:18:13:bd:2b:ac:e6:
         f8:ba:cc:f9:9f:fb:a0:e1:21:6c:c1:76:2d:9a:ee:ae:c5:0a:
         58:cd:cc:07:3d:c9:8b:49:ac:29:c8:77:a7:c9:e2:92:82:49:
         1c:60:15:09:1b:30:a2:64:df:5a:37:7e:29:6f:b5:ea:61:94:
         cf:b4:5a:59:fd:80:d3:20:ac:9a:92:f7:2c:0b:6b:a2:2a:b6:
         f4:08:28:bd:0b:37:a4:0a:9d:33:92:dc:b1:e7:f8:1d:0d:c9:
         03:0e:f8:fd:17:de:c8:a1:2a:e5:99:eb:8e:02:99:0f:49:c6:
         86:d6:4e:fe:eb:42:32:97:5a:f4:84:9f:09:c9:0a:95:28:2c:
         5c:ae:e9:d2:2c:1e:f2:14:cb:84:2a:18:8c:4f:d3:e8:32:8d:
         85:de:fa:5a:7b:d3:c8:d7:b0:40:a5:70:29:0a:b7:5f:6b:79:
         3b:21:c0:1d:99:9d:2a:bd:f0:32:5a:3a:da:b9:29:9f:25:10:
         0c:c7:49:88:58:72:65:21:7b:67:a6:8f:87:fc:db:6e:c5:a6:
         37:7d:66:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:29:07 2026 by rpki-client