Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/5K-yrL8oFGFb95U8tdIGR_yPxHs.roa
File:                     5K-yrL8oFGFb95U8tdIGR_yPxHs.roa (raw, json)
Hash identifier:          Wo4CQ2xRO8jQTK6WOUJtgeGXjw1SXvFMLItYYtL4Kyw=
Subject key identifier:   E4:AF:B2:AC:BF:28:14:61:5B:F7:95:3C:B5:D2:06:47:FC:8F:C4:7B
Certificate issuer:       /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial:       B1
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/5K-yrL8oFGFb95U8tdIGR_yPxHs.roa
Signing time:             Tue 31 Mar 2026 08:17:38 +0000
ROA not before:           Tue 31 Mar 2026 08:17:38 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2514
IP address blocks:        163.44.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177 (0xb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
        Validity
            Not Before: Mar 31 08:17:38 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=E4AFB2ACBF2814615BF7953CB5D20647FC8FC47B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:88:27:d7:6c:69:68:4e:71:36:81:66:6e:c2:
                    ac:d6:54:95:bd:a9:e6:03:5b:7a:34:29:a8:d8:30:
                    5a:b6:e6:06:e6:e7:e4:ab:8d:89:e8:9e:a8:6e:b6:
                    e4:7f:11:72:ee:d7:40:6e:bf:42:fe:56:19:7a:ba:
                    91:85:86:67:b4:ed:25:64:18:d3:57:59:02:28:29:
                    47:1a:47:11:76:a1:bc:27:d2:db:dc:01:2e:ba:1f:
                    97:6c:f9:1b:ec:b1:01:fb:48:90:12:33:57:ae:df:
                    b9:f1:c3:20:c3:60:1a:07:c0:a0:5a:85:4b:44:2b:
                    18:32:43:0f:95:6e:69:ea:ef:46:c3:66:1e:3d:3e:
                    88:52:80:bb:cf:d0:69:dd:b1:1d:65:37:82:f6:59:
                    ef:fd:33:80:be:11:54:03:1d:05:de:0f:29:3e:48:
                    cf:1a:39:f2:bf:14:8c:1f:bb:31:93:da:ef:20:12:
                    c4:7b:4e:84:e6:06:bb:ef:a3:dc:7e:c8:f9:65:d8:
                    47:c9:0a:eb:65:3b:90:5e:37:01:94:44:32:af:c9:
                    8b:11:e7:36:db:69:41:df:dc:15:77:32:35:80:9d:
                    0a:44:1d:25:0b:d4:80:67:c4:29:cd:e2:61:72:82:
                    fa:51:47:91:57:2a:e8:ee:46:d5:32:c0:e6:d9:2a:
                    63:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:AF:B2:AC:BF:28:14:61:5B:F7:95:3C:B5:D2:06:47:FC:8F:C4:7B
            X509v3 Authority Key Identifier:
                keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/5K-yrL8oFGFb95U8tdIGR_yPxHs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.44.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         98:65:54:d9:42:0d:60:0a:8f:e0:84:3d:7c:d7:b6:de:32:a3:
         43:52:aa:4a:48:3a:28:26:a6:c2:d1:88:0e:0b:be:6d:15:ef:
         f8:84:1a:71:36:ef:99:2e:65:1a:4b:02:93:f2:9f:7a:58:d8:
         5b:10:0b:57:a4:2b:e5:12:6d:e0:f2:fa:5e:b8:90:25:e1:fa:
         fb:37:d8:0b:6a:0a:47:62:cf:fd:7b:a0:37:6f:00:ea:6b:21:
         76:4b:b6:74:8a:6c:3d:64:6c:7f:40:ce:7d:c0:bd:e9:1e:c5:
         0a:23:b9:b1:f6:9a:57:4d:dc:80:0d:e2:3f:f8:38:61:08:91:
         e4:22:b6:05:f1:fb:36:9e:b8:80:0e:28:64:35:b7:79:2e:9c:
         7d:6a:eb:61:fd:1f:4a:eb:a8:dc:4e:51:65:fe:3a:c8:ac:32:
         70:bb:6e:4a:73:76:75:e8:75:65:64:d2:93:de:6c:2c:c9:10:
         00:d3:a2:85:6d:a6:bb:ef:4f:21:dd:3e:50:12:ec:94:49:13:
         43:36:33:3b:c9:44:b3:05:c0:7a:19:0e:2d:99:c9:fc:3c:15:
         cb:e4:8f:33:eb:f3:5a:72:4b:42:d9:1b:f2:87:39:3c:d6:f5:
         3d:0f:0e:e6:1a:09:11:f7:ee:b8:3c:fb:ad:68:20:84:ce:2f:
         68:ed:a0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:24 2026 by rpki-client