Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30159/6zBWFbMSLn7CY8g7XFwQXgg3lJU.roa
File:                     6zBWFbMSLn7CY8g7XFwQXgg3lJU.roa (raw, json)
Hash identifier:          FW8FqgVVpR9pwps8b8SMf4uJ9IIZY9NPyf3C7BWhbr0=
Subject key identifier:   EB:30:56:15:B3:12:2E:7E:C2:63:C8:3B:5C:5C:10:5E:08:37:94:95
Certificate issuer:       /CN=B0EF0194A50D1CFB1C7B994BEFE4BE7DA6AC1968
Certificate serial:       22
Authority key identifier: B0:EF:01:94:A5:0D:1C:FB:1C:7B:99:4B:EF:E4:BE:7D:A6:AC:19:68
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sO8BlKUNHPsce5lL7-S-faasGWg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/6zBWFbMSLn7CY8g7XFwQXgg3lJU.roa
Signing time:             Tue 31 Mar 2026 08:44:38 +0000
ROA not before:           Tue 31 Mar 2026 08:44:38 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     16509
IP address blocks:        2404:7a00:e000::/36 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/sO8BlKUNHPsce5lL7-S-faasGWg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/sO8BlKUNHPsce5lL7-S-faasGWg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sO8BlKUNHPsce5lL7-S-faasGWg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0EF0194A50D1CFB1C7B994BEFE4BE7DA6AC1968
        Validity
            Not Before: Mar 31 08:44:38 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=EB305615B3122E7EC263C83B5C5C105E08379495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:88:02:90:4f:80:90:e1:3d:e3:02:5f:f8:65:
                    a0:b5:bf:78:93:41:06:37:cb:6c:5d:be:21:fd:48:
                    bd:d8:8f:03:f9:e0:a4:56:97:78:8c:b9:4e:d4:40:
                    bf:74:36:7d:d3:77:1b:d8:9d:b3:61:3b:0e:82:95:
                    4c:32:d5:c2:71:b1:21:f7:de:b3:89:0b:c1:f8:f1:
                    ef:11:dc:0c:d5:64:75:cb:63:cc:8d:3c:28:10:23:
                    be:e1:9a:cb:87:3e:90:46:e2:5b:60:09:fb:37:75:
                    ff:36:ae:84:61:c0:a9:04:89:77:6d:03:3d:2d:97:
                    b0:32:76:4b:9b:21:65:31:24:ef:48:83:57:8e:9d:
                    90:85:24:09:93:68:fd:99:92:8a:4a:7f:23:f4:a8:
                    c4:41:90:17:45:c7:40:33:91:fc:3d:b5:48:7a:60:
                    6b:df:73:ad:54:a5:ce:ac:63:97:16:72:46:5f:f3:
                    a0:02:72:fc:ea:cd:17:e1:7e:a4:11:73:86:d7:f0:
                    56:89:cb:de:3f:d7:a9:bf:bd:f0:2c:90:2c:79:d2:
                    90:35:88:fc:df:24:79:12:fe:d7:67:e0:d3:59:34:
                    1b:9a:5b:c2:cd:3e:f2:7a:88:b5:43:2b:d3:fb:5d:
                    5d:aa:06:c4:ca:8b:b8:66:3d:8b:99:ec:a8:2f:dc:
                    42:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:30:56:15:B3:12:2E:7E:C2:63:C8:3B:5C:5C:10:5E:08:37:94:95
            X509v3 Authority Key Identifier:
                keyid:B0:EF:01:94:A5:0D:1C:FB:1C:7B:99:4B:EF:E4:BE:7D:A6:AC:19:68

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/sO8BlKUNHPsce5lL7-S-faasGWg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sO8BlKUNHPsce5lL7-S-faasGWg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/6zBWFbMSLn7CY8g7XFwQXgg3lJU.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:7a00:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a3:19:5c:71:f1:58:ad:2b:3a:c7:04:ac:dd:fd:3b:0d:87:fc:
         96:87:e1:0d:02:1c:59:95:5b:6a:69:e4:f2:62:20:f4:34:4e:
         8b:1d:0a:a7:62:96:ec:a1:a1:8c:da:2b:75:0f:0d:24:af:6f:
         2d:21:22:04:ce:90:19:b9:82:7a:97:a6:de:61:5c:4d:26:b0:
         ca:4f:50:9c:29:e1:32:d0:ae:a2:66:81:42:80:77:dd:13:dd:
         76:a0:62:b6:13:a0:cc:82:bf:84:5e:a1:42:b5:bf:31:03:e0:
         0a:ab:2f:e5:7e:62:e3:d7:03:60:b4:26:37:3a:d1:29:50:4a:
         0d:d3:84:b0:3e:e0:6a:aa:f4:d0:7d:6f:c1:bb:fb:4b:dd:75:
         72:0c:52:f5:83:50:57:23:e5:a2:fc:ce:9d:a8:68:20:55:39:
         2d:01:a2:1c:b7:82:3d:a8:8d:50:a3:ed:c7:9c:a4:dd:ac:c3:
         9b:22:b6:1e:4c:0b:ff:e5:33:15:24:2a:65:81:ea:9b:3d:25:
         01:73:60:57:0a:a3:30:40:4f:78:d7:71:c7:2c:35:ba:c4:62:
         d9:f1:a8:c0:81:10:ed:a1:0b:bf:7c:ac:45:12:5c:38:c9:dc:
         8d:58:f0:50:d2:8d:e0:f7:8c:c8:98:9d:bd:88:b4:ff:ec:e2:
         b4:2f:31:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:50:15 2026 by rpki-client