Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30371/Xe0tyeZVubxDAHFDTtfag-yu9DY.roa
File:                     Xe0tyeZVubxDAHFDTtfag-yu9DY.roa (raw, json)
Hash identifier:          zfdiAMjUK4HW5glDBn8Wj9wbG2GpPgJBiAKaKGC3JD4=
Subject key identifier:   5D:ED:2D:C9:E6:55:B9:BC:43:00:71:43:4E:D7:DA:83:EC:AE:F4:36
Certificate issuer:       /CN=439837AD93D92471E2024D06ECFDCAEE8F64D1C3
Certificate serial:       33
Authority key identifier: 43:98:37:AD:93:D9:24:71:E2:02:4D:06:EC:FD:CA:EE:8F:64:D1:C3
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5g3rZPZJHHiAk0G7P3K7o9k0cM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30371/Xe0tyeZVubxDAHFDTtfag-yu9DY.roa
Signing time:             Tue 31 Mar 2026 08:34:32 +0000
ROA not before:           Tue 31 Mar 2026 08:34:32 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131976
IP address blocks:        2406:e240::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30371/Q5g3rZPZJHHiAk0G7P3K7o9k0cM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30371/Q5g3rZPZJHHiAk0G7P3K7o9k0cM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5g3rZPZJHHiAk0G7P3K7o9k0cM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=439837AD93D92471E2024D06ECFDCAEE8F64D1C3
        Validity
            Not Before: Mar 31 08:34:32 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=5DED2DC9E655B9BC430071434ED7DA83ECAEF436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:93:97:b0:bd:a2:22:7e:4b:76:38:c1:79:11:
                    2b:ee:5d:8b:d6:ac:66:87:5f:64:9f:e3:b4:88:ba:
                    7a:5d:28:96:35:8f:ea:59:d6:8e:1f:4d:f0:15:08:
                    f4:b1:bb:0d:67:56:b1:f2:3b:96:cb:47:e2:ed:a3:
                    fd:96:93:13:39:da:95:fc:f2:8b:0a:73:92:32:26:
                    55:46:31:ac:09:aa:c9:34:e8:3d:49:da:1b:70:58:
                    ba:30:62:c4:2a:9e:a0:91:6c:8f:c6:07:e5:9d:e4:
                    48:50:a5:a0:98:a2:b1:83:d0:f6:17:af:62:25:d6:
                    70:09:8e:db:55:27:f2:e3:8f:5a:59:bf:6b:eb:66:
                    2f:10:96:4e:dc:57:51:78:05:5a:ae:d9:ce:db:61:
                    81:d7:de:b7:fb:3d:6b:51:7e:b0:ce:ea:84:67:bb:
                    7a:fc:8d:08:ba:58:7c:f4:8f:14:ce:84:c5:55:af:
                    11:89:8f:e9:fa:85:d9:ab:48:ba:7f:ec:8e:07:35:
                    eb:54:ad:1e:a4:2c:c0:7c:bc:04:da:ca:87:f2:72:
                    5c:ba:c8:61:f7:c2:12:db:34:d2:20:08:d7:17:c5:
                    9d:18:7e:88:fa:93:80:8f:3f:58:a1:ec:c1:01:1b:
                    49:dc:22:2b:07:5d:8b:aa:b1:0f:ec:01:83:a9:d3:
                    4f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:ED:2D:C9:E6:55:B9:BC:43:00:71:43:4E:D7:DA:83:EC:AE:F4:36
            X509v3 Authority Key Identifier:
                keyid:43:98:37:AD:93:D9:24:71:E2:02:4D:06:EC:FD:CA:EE:8F:64:D1:C3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30371/Q5g3rZPZJHHiAk0G7P3K7o9k0cM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5g3rZPZJHHiAk0G7P3K7o9k0cM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30371/Xe0tyeZVubxDAHFDTtfag-yu9DY.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:e240::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:ce:24:c5:37:03:12:a1:3a:4d:57:b9:a8:9e:fb:0d:80:b4:
         56:3f:71:ef:9a:c7:35:d8:73:fe:9e:50:18:7f:4c:7e:05:a9:
         47:2f:b0:c1:69:a7:dd:f0:be:5d:55:67:41:9f:b9:6b:25:e2:
         a7:9f:04:4d:6b:c0:f0:f4:ae:95:1b:fb:ad:b9:83:a9:9a:36:
         34:48:4f:3b:91:40:b8:7c:a5:c5:f1:e4:19:7c:75:a6:9b:5d:
         73:72:80:18:af:97:9f:ab:5a:8e:64:9b:ca:45:7e:90:c1:ce:
         b5:e0:f3:6f:6f:3d:89:ba:4e:a6:1a:2a:fe:5d:19:7f:fe:cb:
         5d:f6:30:e1:65:8f:7d:6e:7d:11:c6:50:29:71:15:56:b3:2f:
         4d:26:23:a8:06:46:7c:5d:6c:1e:d6:8e:68:8a:cc:b9:a4:3f:
         10:4b:d4:59:08:e0:6f:fe:5d:bc:4b:1b:2a:72:48:f3:b6:a2:
         7e:03:ca:a8:4b:ea:3e:78:f2:95:c1:59:2b:6d:c3:6e:e7:45:
         17:90:0a:64:aa:cd:60:22:f0:be:38:0b:ac:8c:42:8e:2a:af:
         c8:7e:3b:b9:cc:e6:ee:6c:3a:66:e6:a0:31:ee:c6:2b:d6:78:
         a2:45:23:c0:2d:08:d0:0b:b5:1b:58:a5:a6:87:59:22:5d:19:
         c3:d7:46:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:20:08 2026 by rpki-client