Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10029/k76mbSplsi0m8lNwTZSY6c6-02s.roa
File:                     k76mbSplsi0m8lNwTZSY6c6-02s.roa (raw, json)
Hash identifier:          ZNAbIUCW1k7Uef8F53Yb5ZKYm9Ed1JO560AzLCC0Xwk=
Subject key identifier:   93:BE:A6:6D:2A:65:B2:2D:26:F2:53:70:4D:94:98:E9:CE:BE:D3:6B
Certificate issuer:       /CN=2EF6A9C9450F711BF33ABA77A95E2460D0A844BF
Certificate serial:       43
Authority key identifier: 2E:F6:A9:C9:45:0F:71:1B:F3:3A:BA:77:A9:5E:24:60:D0:A8:44:BF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/LvapyUUPcRvzOrp3qV4kYNCoRL8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10029/k76mbSplsi0m8lNwTZSY6c6-02s.roa
Signing time:             Tue 31 Mar 2026 08:16:44 +0000
ROA not before:           Tue 31 Mar 2026 08:16:44 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2514
IP address blocks:        202.189.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10029/LvapyUUPcRvzOrp3qV4kYNCoRL8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10029/LvapyUUPcRvzOrp3qV4kYNCoRL8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/LvapyUUPcRvzOrp3qV4kYNCoRL8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2EF6A9C9450F711BF33ABA77A95E2460D0A844BF
        Validity
            Not Before: Mar 31 08:16:44 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=93BEA66D2A65B22D26F253704D9498E9CEBED36B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d5:3d:b5:fe:ef:51:95:6c:8b:4b:d7:b3:e8:
                    7f:fe:b3:ba:8f:0b:3b:1c:12:5b:d9:04:ae:15:73:
                    fd:ed:ec:51:53:e2:a6:ac:7f:90:d0:06:a5:54:ef:
                    a5:b9:56:95:8e:93:12:59:d9:43:25:7b:fe:ea:b3:
                    4e:90:a7:48:fa:16:de:99:46:05:fd:b5:ec:fd:82:
                    da:ad:ff:bb:6a:3d:38:95:1f:2a:e3:c7:4a:50:7a:
                    ee:bc:0c:6c:41:20:05:46:97:51:be:5b:49:c8:12:
                    b9:e7:5d:8b:cf:85:e4:1b:d3:fe:d9:96:07:29:b7:
                    d0:76:cb:cc:9e:ee:d0:9f:a3:3c:40:cc:65:65:e3:
                    a3:c0:e6:f8:a2:95:8f:1f:d7:b1:69:75:ae:d3:d2:
                    e9:4f:78:ca:de:ec:c8:78:1a:eb:05:8a:5a:e5:d5:
                    1f:e1:66:b7:d1:32:55:ef:55:5e:36:ab:87:01:cd:
                    12:b5:7c:12:f1:88:a4:06:7a:16:ac:3b:ff:4f:09:
                    50:4e:0a:ab:8b:1c:3b:19:92:10:e1:30:b1:24:67:
                    bf:d1:d5:2c:85:bd:2f:57:43:c1:fc:07:be:93:1d:
                    32:b2:d4:92:10:10:78:f2:c2:93:2f:0a:58:34:18:
                    31:c1:1b:7d:f9:ac:b7:9d:77:93:56:76:58:1a:e6:
                    13:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:BE:A6:6D:2A:65:B2:2D:26:F2:53:70:4D:94:98:E9:CE:BE:D3:6B
            X509v3 Authority Key Identifier:
                keyid:2E:F6:A9:C9:45:0F:71:1B:F3:3A:BA:77:A9:5E:24:60:D0:A8:44:BF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10029/LvapyUUPcRvzOrp3qV4kYNCoRL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/LvapyUUPcRvzOrp3qV4kYNCoRL8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10029/k76mbSplsi0m8lNwTZSY6c6-02s.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.189.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7b:57:77:c8:89:7e:82:1e:52:be:05:79:d6:ae:fe:3c:ed:a9:
         69:8e:3b:c4:1f:b2:1e:34:e2:23:e7:25:bd:fb:77:2b:7e:d5:
         d9:24:ad:c7:c9:28:ef:ce:31:bc:fe:ac:08:de:aa:12:bd:fe:
         b5:b4:ec:aa:eb:65:44:13:ee:e7:88:8a:c7:9b:a8:a4:ef:bf:
         bf:c9:71:64:23:fe:35:f3:53:19:a7:69:4a:7a:9c:0f:23:92:
         78:22:51:0c:12:22:bd:d2:87:c9:7b:52:64:a2:b3:2b:08:06:
         27:e3:ca:78:31:f6:aa:da:b4:8c:40:87:c3:da:e2:a3:6f:9c:
         0f:58:e4:f0:75:e6:05:08:77:fe:06:40:65:ff:89:cd:d3:97:
         0c:41:8f:09:78:a9:d4:3d:80:81:48:17:34:5b:e6:51:b4:86:
         9a:8e:24:d1:fe:cf:a9:e4:e4:ab:b8:2e:a8:17:87:29:c5:ff:
         a8:77:ee:82:20:08:6d:5c:75:d4:25:3f:2f:6c:40:f1:78:98:
         59:f2:2b:9a:98:7c:84:dd:1d:67:db:0b:43:46:e2:d8:98:d9:
         ab:94:87:8a:d9:d3:b0:2e:62:57:c5:d3:46:1d:f3:8a:33:4a:
         db:63:6e:c0:90:04:fe:78:73:8c:14:e7:8a:51:3a:60:5f:9f:
         c8:b5:8b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:28:00 2026 by rpki-client