Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10029/Nn6FdtpTX16pXnL_qwx7nNimHxg.roa
File:                     Nn6FdtpTX16pXnL_qwx7nNimHxg.roa (raw, json)
Hash identifier:          xAycr3MJ5uE1cutaxXfe3GzZM+/g/zrgv6wL71UCDf8=
Subject key identifier:   36:7E:85:76:DA:53:5F:5E:A9:5E:72:FF:AB:0C:7B:9C:D8:A6:1F:18
Certificate issuer:       /CN=2EF6A9C9450F711BF33ABA77A95E2460D0A844BF
Certificate serial:       44
Authority key identifier: 2E:F6:A9:C9:45:0F:71:1B:F3:3A:BA:77:A9:5E:24:60:D0:A8:44:BF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/LvapyUUPcRvzOrp3qV4kYNCoRL8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10029/Nn6FdtpTX16pXnL_qwx7nNimHxg.roa
Signing time:             Tue 31 Mar 2026 08:16:44 +0000
ROA not before:           Tue 31 Mar 2026 08:16:44 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2514
IP address blocks:        203.141.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10029/LvapyUUPcRvzOrp3qV4kYNCoRL8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10029/LvapyUUPcRvzOrp3qV4kYNCoRL8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/LvapyUUPcRvzOrp3qV4kYNCoRL8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EF6A9C9450F711BF33ABA77A95E2460D0A844BF
        Validity
            Not Before: Mar 31 08:16:44 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=367E8576DA535F5EA95E72FFAB0C7B9CD8A61F18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:e4:be:7a:2f:0f:e5:7f:cd:82:16:b5:4f:0f:
                    60:81:21:a3:12:2e:ae:a3:e8:d9:e5:cf:94:34:96:
                    96:e0:22:67:ec:d7:1f:cb:8c:9d:1d:40:05:a0:a2:
                    65:b9:9a:7c:59:85:9d:08:44:47:91:d3:8a:fc:38:
                    22:73:e9:27:0d:d4:90:f6:84:e0:cb:fa:5a:2c:c9:
                    34:11:07:bb:5b:63:42:ce:a4:c9:17:f8:33:68:3a:
                    f7:e7:39:9f:8c:80:39:d1:15:ed:52:be:da:d6:8d:
                    2b:c4:38:a9:72:08:30:fb:9a:7a:1e:2b:ea:c6:ac:
                    32:e6:47:19:4a:5b:a0:71:8f:f4:20:69:e0:3e:9d:
                    58:94:03:05:fc:4c:57:12:04:94:cf:ef:49:23:65:
                    ad:a2:59:aa:1b:c2:85:0f:b9:48:82:ae:6f:29:3a:
                    ee:93:0f:66:44:39:10:ec:8c:c5:7e:5f:48:a6:6f:
                    94:f2:1a:ed:35:b6:26:60:2e:c8:f8:0e:e0:fa:1d:
                    d0:25:d8:97:d6:54:98:4e:ab:67:2a:ef:f0:31:ce:
                    28:6b:29:04:22:0b:fa:fd:07:0a:bf:43:ef:b6:0e:
                    39:f1:f1:a3:62:26:c8:a4:64:ed:de:20:22:93:86:
                    a6:b8:c9:c3:9e:95:eb:77:73:91:63:82:25:be:f6:
                    34:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:7E:85:76:DA:53:5F:5E:A9:5E:72:FF:AB:0C:7B:9C:D8:A6:1F:18
            X509v3 Authority Key Identifier:
                keyid:2E:F6:A9:C9:45:0F:71:1B:F3:3A:BA:77:A9:5E:24:60:D0:A8:44:BF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10029/LvapyUUPcRvzOrp3qV4kYNCoRL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/LvapyUUPcRvzOrp3qV4kYNCoRL8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10029/Nn6FdtpTX16pXnL_qwx7nNimHxg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.141.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         03:99:12:b5:92:ea:93:03:0f:3d:e8:b5:68:1d:1f:33:ab:fd:
         bc:1a:4e:7d:65:2b:05:bc:e9:ee:0b:6f:bc:51:d7:a1:e3:be:
         08:93:b6:27:81:29:99:2b:8e:13:b9:a3:a9:c9:50:48:4a:8c:
         e1:d1:d2:54:f7:23:1f:25:af:f1:10:1f:06:af:ac:71:9f:43:
         61:6e:89:f6:b5:fd:93:24:8c:d9:b7:ed:63:79:a5:95:f9:e1:
         31:d7:ee:28:c1:05:22:1c:57:c4:4e:d0:bb:de:c6:9a:9c:77:
         30:6a:db:d4:ad:b2:57:9d:60:da:74:27:98:b8:4b:f7:3b:02:
         c7:43:9c:02:37:08:78:dc:be:7d:43:c8:70:4c:a1:c8:2c:9e:
         4b:19:3b:66:a1:64:ee:d5:cc:d2:54:36:48:45:f0:c6:63:7b:
         60:c4:b5:d4:6a:1c:8d:9d:33:9f:4c:67:b5:e2:96:4b:a1:20:
         3b:b1:48:9f:d9:9f:3a:5b:32:1b:fe:83:a6:1e:89:6f:25:63:
         88:74:47:46:e7:d2:e8:a9:cd:b1:1c:88:28:53:67:eb:47:68:
         44:09:af:ff:5e:1d:4b:73:fa:da:b2:2b:22:1c:46:4a:cd:ca:
         88:7e:5a:1f:6a:f7:9e:a2:5a:aa:44:b2:de:2f:38:9d:33:23:
         54:44:85:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:10:25 2026 by rpki-client