Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30159/Zn2SJ1TMU0zx6u0I_qaUFfPce6g.roa
File:                     Zn2SJ1TMU0zx6u0I_qaUFfPce6g.roa (raw, json)
Hash identifier:          M5/iOfI4wipf8npqmomSntwBh10RaC8oCYOzbM4GaIM=
Subject key identifier:   66:7D:92:27:54:CC:53:4C:F1:EA:ED:08:FE:A6:94:15:F3:DC:7B:A8
Certificate issuer:       /CN=B0EF0194A50D1CFB1C7B994BEFE4BE7DA6AC1968
Certificate serial:       24
Authority key identifier: B0:EF:01:94:A5:0D:1C:FB:1C:7B:99:4B:EF:E4:BE:7D:A6:AC:19:68
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sO8BlKUNHPsce5lL7-S-faasGWg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/Zn2SJ1TMU0zx6u0I_qaUFfPce6g.roa
Signing time:             Tue 31 Mar 2026 08:44:39 +0000
ROA not before:           Tue 31 Mar 2026 08:44:39 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     16509
IP address blocks:        2404:7a00:f000::/36 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/sO8BlKUNHPsce5lL7-S-faasGWg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/sO8BlKUNHPsce5lL7-S-faasGWg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sO8BlKUNHPsce5lL7-S-faasGWg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0EF0194A50D1CFB1C7B994BEFE4BE7DA6AC1968
        Validity
            Not Before: Mar 31 08:44:39 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=667D922754CC534CF1EAED08FEA69415F3DC7BA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ae:70:82:84:6c:e1:ad:ca:e5:39:69:98:ae:
                    f1:1a:9a:32:fd:40:a1:e8:24:2f:20:df:18:be:75:
                    7f:f0:40:05:ab:3f:d4:fc:99:cf:20:b9:96:4a:89:
                    8d:c4:3a:52:3d:59:0a:74:1a:38:e0:1e:cf:51:11:
                    c8:93:f3:ac:ba:89:b1:9a:b6:38:ad:dc:25:01:15:
                    18:6c:ce:6b:8b:9d:a1:d1:3b:b3:24:c5:06:6a:dc:
                    9b:70:f3:a2:51:06:01:f6:dd:a1:cd:b1:18:06:6e:
                    ea:fe:a4:30:e8:63:ca:81:b1:f1:07:b3:e0:79:d6:
                    bf:89:0c:8a:a4:92:bb:53:ea:26:e2:4e:f4:e8:7b:
                    17:11:5a:43:7a:c2:7f:e1:af:f2:4a:21:8a:87:2a:
                    76:28:a2:f3:fd:36:2b:1a:f5:1f:e7:d7:73:5c:31:
                    fa:c8:67:4f:15:33:c5:02:4b:82:24:19:e3:3d:4d:
                    00:f1:66:88:34:ef:72:a6:b2:68:b1:bc:74:cb:8d:
                    7b:93:f1:71:d4:89:f8:cd:42:5c:70:c7:6d:88:dd:
                    5a:29:8a:60:3e:6a:f3:43:84:b8:f1:f3:d2:0d:e0:
                    71:8a:7b:9f:49:17:ae:cd:1e:ae:53:a0:5d:9d:27:
                    8c:10:55:38:a2:d9:bb:2a:6a:35:d7:00:d9:59:d8:
                    96:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:7D:92:27:54:CC:53:4C:F1:EA:ED:08:FE:A6:94:15:F3:DC:7B:A8
            X509v3 Authority Key Identifier:
                keyid:B0:EF:01:94:A5:0D:1C:FB:1C:7B:99:4B:EF:E4:BE:7D:A6:AC:19:68

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/sO8BlKUNHPsce5lL7-S-faasGWg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sO8BlKUNHPsce5lL7-S-faasGWg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/Zn2SJ1TMU0zx6u0I_qaUFfPce6g.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:7a00:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         10:45:f6:79:39:bf:4f:24:f4:04:93:19:c4:41:d3:47:65:18:
         55:cf:cc:7a:0f:c0:1c:0b:ce:3b:a4:10:67:a3:fe:ab:ce:e4:
         37:04:e8:b8:b3:71:a4:16:d9:3f:94:b9:3f:b0:36:bf:46:fe:
         cc:26:26:67:4f:5c:0e:22:93:ac:fa:da:17:72:a6:27:cd:e5:
         8a:b4:b2:69:cc:78:37:ac:4c:7e:3e:3e:c6:cc:52:b6:08:c8:
         6e:03:8a:3c:b2:6e:54:4f:9a:65:d9:10:a1:60:9b:c6:be:d0:
         85:ca:1f:4b:cc:40:7f:46:bf:9d:8f:56:0c:0e:17:ef:10:4f:
         03:de:13:a4:c3:cf:10:d7:0b:9b:53:38:2d:b9:61:2c:70:3e:
         5f:72:13:e7:1a:ab:1c:26:5d:64:d8:f7:de:de:6c:e9:9b:f1:
         45:3f:b5:50:de:f5:60:7b:91:e9:d4:63:db:9d:0f:51:75:47:
         cb:6d:bd:5a:c4:d4:07:68:90:b5:8c:7f:9a:bc:84:ca:75:2d:
         14:01:9b:bb:a5:24:79:a4:6f:88:f3:c0:b7:e0:8e:b0:56:5f:
         a1:c1:76:d0:ed:4a:59:6a:04:b6:06:67:e4:20:da:24:c6:af:
         e9:bc:47:45:90:bc:5d:be:54:bd:54:ff:2a:25:36:4e:41:29:
         6d:ea:5c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:14:13 2026 by rpki-client