Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/4X0foaY-7OzSK-T1TiDJCL_gdAw.roa
File:                     4X0foaY-7OzSK-T1TiDJCL_gdAw.roa (raw, json)
Hash identifier:          bNJFooV041mSEXzTMos/zO6wdxo3lRAmu1XNchFvrh4=
Subject key identifier:   E1:7D:1F:A1:A6:3E:EC:EC:D2:2B:E4:F5:4E:20:C9:08:BF:E0:74:0C
Certificate issuer:       /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial:       B9
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/4X0foaY-7OzSK-T1TiDJCL_gdAw.roa
Signing time:             Tue 31 Mar 2026 08:17:43 +0000
ROA not before:           Tue 31 Mar 2026 08:17:43 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2514
IP address blocks:        210.139.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 185 (0xb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
        Validity
            Not Before: Mar 31 08:17:43 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=E17D1FA1A63EECECD22BE4F54E20C908BFE0740C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:99:b8:78:da:db:b6:01:84:46:7d:c7:eb:5d:
                    c0:57:e5:09:73:ee:ca:c5:ed:fc:fb:1b:2a:1d:ec:
                    86:e9:16:ad:21:1f:98:5e:e5:a3:25:96:fe:bb:3f:
                    82:59:6d:3b:06:64:80:0c:df:6e:e1:fd:71:64:c3:
                    d3:e5:80:0a:cc:f2:02:22:c4:8b:20:d9:22:81:41:
                    f2:ba:62:bc:48:23:2e:3a:98:09:36:fc:6c:c1:27:
                    91:b7:7f:4e:74:56:e9:03:f9:4b:a5:b2:6d:7c:50:
                    35:d8:f0:58:dd:7c:69:c5:31:86:12:71:c5:3c:f2:
                    79:1f:1b:f8:9c:3f:18:b5:72:4c:90:50:b5:f7:49:
                    0a:73:2c:bc:85:cd:6c:c2:6f:2b:9a:e6:ba:90:90:
                    cf:04:0e:f9:ca:01:fe:b8:82:9f:fc:74:29:56:25:
                    e9:3b:0e:2d:a3:d1:0e:26:2a:79:eb:4b:00:ae:d9:
                    65:60:fd:8e:ae:86:85:6b:0d:5c:44:f3:92:a4:19:
                    6a:44:92:12:8e:d8:83:9c:62:4f:be:7d:fa:76:84:
                    6b:49:a6:48:28:aa:49:96:fc:39:24:53:28:66:fb:
                    1d:85:d3:57:ea:10:78:47:5e:d0:ff:e6:a2:03:2a:
                    c0:74:98:d9:7e:1f:6a:f4:e1:ec:df:ac:6c:27:76:
                    ad:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:7D:1F:A1:A6:3E:EC:EC:D2:2B:E4:F5:4E:20:C9:08:BF:E0:74:0C
            X509v3 Authority Key Identifier:
                keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/4X0foaY-7OzSK-T1TiDJCL_gdAw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.139.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         64:b3:9f:a5:c3:56:0e:41:de:b2:9d:ea:37:f5:c9:06:d1:49:
         51:d9:0c:f8:a6:8d:55:9d:3d:d6:69:15:aa:7b:61:50:4f:d2:
         f8:e7:02:0e:38:3e:4e:14:ee:f0:9a:ac:cc:d7:87:9f:ba:41:
         06:c2:b6:d4:12:af:78:82:86:de:30:b7:49:22:a9:8b:f0:05:
         ff:b4:ae:cb:bc:58:da:03:77:8c:b3:a5:67:da:d7:ac:31:37:
         a0:c8:de:ca:97:d3:63:b7:b5:99:02:89:47:42:f8:3f:fe:bb:
         03:ed:26:c4:e3:fc:63:a8:cf:84:f2:fe:29:8f:45:e2:ee:87:
         8a:e0:f5:cd:42:f4:cc:a5:4a:c9:1f:2d:2a:61:56:86:75:d3:
         77:b8:bd:11:b7:71:cc:3c:6e:f7:7c:6d:44:81:ef:f6:ef:cc:
         83:4a:6d:05:6c:c3:85:55:2d:d2:e0:62:9b:ec:35:fa:54:f5:
         57:20:10:ce:1a:be:37:3c:70:f6:a7:35:fb:5d:54:7b:04:69:
         7b:bd:bc:c9:e9:ec:08:7b:41:cd:3f:14:92:8f:bd:a5:84:c7:
         1c:5f:61:01:e0:10:9d:54:4b:76:13:cf:c4:a1:a1:f4:72:86:
         71:7c:94:c6:ad:2c:c3:52:7e:02:fa:ec:ae:dc:ea:de:85:38:
         64:d5:e2:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:11:26 2026 by rpki-client