Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30367/lheuBIgjJonO8lctikYDFBfZTlE.roa
File:                     lheuBIgjJonO8lctikYDFBfZTlE.roa (raw, json)
Hash identifier:          J6R7tGV/r7JNcV4xEFLmUCtwKYAiqkv+lHX+pFRaqZ4=
Subject key identifier:   96:17:AE:04:88:23:26:89:CE:F2:57:2D:8A:46:03:14:17:D9:4E:51
Certificate issuer:       /CN=82E5B28A20F4C6A62A4612F6C5DFB7A3D64D9DEA
Certificate serial:       59
Authority key identifier: 82:E5:B2:8A:20:F4:C6:A6:2A:46:12:F6:C5:DF:B7:A3:D6:4D:9D:EA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/guWyiiD0xqYqRhL2xd-3o9ZNneo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/lheuBIgjJonO8lctikYDFBfZTlE.roa
Signing time:             Tue 31 Mar 2026 08:11:25 +0000
ROA not before:           Tue 31 Mar 2026 08:11:25 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131921
IP address blocks:        2406:a1c0:300::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/guWyiiD0xqYqRhL2xd-3o9ZNneo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/guWyiiD0xqYqRhL2xd-3o9ZNneo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/guWyiiD0xqYqRhL2xd-3o9ZNneo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 14:45:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82E5B28A20F4C6A62A4612F6C5DFB7A3D64D9DEA
        Validity
            Not Before: Mar 31 08:11:25 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=9617AE0488232689CEF2572D8A46031417D94E51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:da:42:8a:2b:b6:ef:95:ed:3e:e0:c8:7c:cd:
                    46:03:7b:cd:47:0f:68:2d:b8:76:58:e5:e8:73:9e:
                    a5:bf:6c:50:2c:07:90:d9:e3:e9:df:a2:b0:7f:48:
                    1c:00:89:67:8a:20:e5:16:b9:42:d9:87:56:07:dd:
                    5f:ed:85:fd:a9:e1:f5:78:88:34:0d:47:26:cf:b0:
                    73:d3:8c:d0:06:78:a0:0e:10:c3:a9:a2:72:03:dd:
                    73:2b:b4:13:ac:b6:2f:24:d7:bd:5a:e2:46:36:a9:
                    6f:90:0d:1d:0e:9b:04:9d:54:3d:63:bc:ea:86:0a:
                    0c:e0:eb:f7:42:9c:fc:2d:87:fe:53:dc:a1:2d:b0:
                    d9:12:a1:e3:48:cc:1e:9e:f8:f3:25:ae:00:5e:76:
                    e5:4a:64:3e:3d:26:da:45:04:4d:9f:61:f3:34:1f:
                    6a:3f:8a:a2:c3:f1:22:07:14:37:b1:ae:45:75:43:
                    f7:bd:97:3d:6f:fd:10:3a:6a:b6:12:03:24:7a:6c:
                    8a:4d:0a:2a:47:a7:90:b2:b6:b5:15:f6:09:f0:d1:
                    17:7f:38:c7:6b:9f:88:8e:a0:c4:7b:63:88:18:ce:
                    e1:9c:6a:0d:0f:a9:d2:53:ab:42:94:f7:8b:f7:0d:
                    2b:c4:d9:4d:7c:b7:2f:4d:e5:a8:39:99:60:57:c8:
                    ba:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:17:AE:04:88:23:26:89:CE:F2:57:2D:8A:46:03:14:17:D9:4E:51
            X509v3 Authority Key Identifier:
                keyid:82:E5:B2:8A:20:F4:C6:A6:2A:46:12:F6:C5:DF:B7:A3:D6:4D:9D:EA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/guWyiiD0xqYqRhL2xd-3o9ZNneo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/guWyiiD0xqYqRhL2xd-3o9ZNneo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/lheuBIgjJonO8lctikYDFBfZTlE.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:a1c0:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         63:32:56:1b:40:95:63:3e:c5:a7:e5:d1:93:9e:12:7a:d8:35:
         77:4a:34:a5:45:0f:39:79:33:f6:5f:a9:23:99:e3:76:e0:4f:
         1d:8f:fb:5d:17:1e:59:5b:4f:3a:e1:02:9a:f9:87:aa:74:50:
         34:73:32:ba:73:d6:8b:8e:d3:c2:09:85:3f:e0:42:bb:68:50:
         42:38:10:76:32:2d:e0:d0:3d:99:94:70:e9:c3:6d:8d:c6:96:
         b5:0f:b2:6b:96:6e:fa:76:02:b9:52:b6:13:5f:ac:44:7f:f1:
         63:6a:e5:2f:6d:d1:d5:4d:46:5c:0c:a0:0c:cd:1c:f8:82:53:
         0b:f0:d2:64:a2:9b:f5:30:0e:4f:76:96:c3:3d:69:92:11:54:
         57:af:7b:cf:c9:e3:4c:18:5b:b9:60:86:53:c6:ae:e7:59:b4:
         38:27:86:af:5f:9d:7b:bd:d5:a7:58:60:cd:b2:17:69:3c:0d:
         31:9c:7d:de:40:83:ae:5f:7d:50:4e:4d:fc:53:f4:6d:0b:8a:
         40:05:1d:1e:3a:10:fd:2f:43:6e:8c:ab:96:ee:ab:8f:6c:14:
         7b:05:d8:5d:3d:90:61:61:d8:49:ee:b2:ad:d1:a4:c9:28:47:
         1e:a1:db:20:e2:af:3b:5f:51:19:2d:74:1a:5e:4d:61:e4:25:
         fa:29:45:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:26:49 2026 by rpki-client