Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/2JJRUZcGnVBpK9vD_naTHNrC7_g.roa
File:                     2JJRUZcGnVBpK9vD_naTHNrC7_g.roa (raw, json)
Hash identifier:          Heh/Tp/nldDZJrG/CKzMo6RaU5aXtqLg5e3ttfC5bT0=
Subject key identifier:   D8:92:51:51:97:06:9D:50:69:2B:DB:C3:FE:76:93:1C:DA:C2:EF:F8
Certificate issuer:       /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial:       A5
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/2JJRUZcGnVBpK9vD_naTHNrC7_g.roa
Signing time:             Tue 31 Mar 2026 08:17:34 +0000
ROA not before:           Tue 31 Mar 2026 08:17:34 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2514
IP address blocks:        210.231.136.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 165 (0xa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
        Validity
            Not Before: Mar 31 08:17:34 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=D892515197069D50692BDBC3FE76931CDAC2EFF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5a:eb:3e:0c:03:86:87:4b:48:f1:9c:e2:ac:
                    b4:41:a3:05:c0:49:ec:38:e7:4a:25:0a:3e:e4:60:
                    3b:fd:a4:6f:c3:e0:be:e8:7a:13:36:60:ac:c5:01:
                    a3:c4:ff:bc:d7:ad:13:41:4b:54:a6:9a:e0:fb:07:
                    14:17:41:83:9b:89:60:a3:2f:c3:d6:93:c4:09:8f:
                    af:76:97:20:42:b4:8f:4a:49:07:3e:b5:9d:0b:c8:
                    83:cb:84:b8:24:e6:d8:a8:ed:70:f5:98:e1:5e:54:
                    8b:e2:19:53:db:14:74:86:da:86:88:13:53:82:95:
                    81:be:3a:4a:25:51:d8:65:ce:98:31:38:a6:c1:15:
                    61:e5:f5:4b:cc:8f:9e:1e:01:c8:b8:28:df:3b:6f:
                    70:e7:e8:dc:9b:22:c5:c5:f3:2d:ac:89:7d:01:9f:
                    1a:a8:67:7b:05:09:8e:0a:4a:1f:ec:f7:4e:c0:d6:
                    a7:63:26:74:61:df:e9:94:6f:75:80:f0:78:83:6a:
                    3e:a1:6a:67:61:e7:75:56:f3:2c:65:ff:eb:48:5b:
                    b2:8f:20:dd:b0:32:a1:29:bb:5f:5b:d2:d2:b5:12:
                    4c:a9:c4:43:46:39:af:83:91:98:4b:bc:d7:86:aa:
                    e7:55:70:8d:12:69:37:f7:a0:5b:f6:4f:51:17:2f:
                    f5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:92:51:51:97:06:9D:50:69:2B:DB:C3:FE:76:93:1C:DA:C2:EF:F8
            X509v3 Authority Key Identifier:
                keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/2JJRUZcGnVBpK9vD_naTHNrC7_g.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.231.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7b:e4:00:60:83:70:85:25:7c:99:ba:ff:7d:51:56:6e:f2:5e:
         26:3c:7f:2f:34:74:e6:ee:2d:4d:01:32:ed:98:ac:4f:7d:e8:
         4c:a3:da:0f:8b:da:01:37:bd:70:c1:e6:38:cd:c4:0a:76:ed:
         fd:21:e0:07:ad:04:fd:d3:31:50:4d:03:cf:4e:43:c0:6e:0f:
         0c:79:42:8b:2d:46:c1:46:3c:08:2b:62:10:7c:d2:41:eb:c9:
         6b:60:91:55:14:b1:3c:92:e5:fb:17:dc:74:be:c9:ab:09:98:
         ad:50:2d:12:b3:6d:22:71:46:ef:f2:f1:a4:17:07:fb:33:eb:
         00:d1:4f:23:9f:b8:e1:df:bf:5d:7f:b3:b0:00:96:c1:0d:b2:
         3d:5d:27:08:b6:ed:9e:e0:8a:ff:36:5e:b5:06:f3:73:1b:44:
         45:e3:f3:bd:3d:e9:0e:27:63:f3:4d:c4:06:5b:b8:64:55:dc:
         e1:d2:9a:d5:87:e0:82:bb:56:65:1d:aa:01:58:ed:ba:13:1f:
         e4:2d:4b:8a:fd:7b:74:e3:df:15:0a:56:4a:3f:04:b1:8c:fe:
         50:10:de:9e:84:9a:ee:e2:b6:c7:87:56:a4:2a:75:e8:a0:18:
         9c:5b:a4:66:43:21:12:2d:af:39:65:cf:2c:c7:e2:7c:f2:b2:
         fa:b5:53:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:24 2026 by rpki-client