Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/6S10hlF6GK17XsTjWkyWh_ueiKs.roa
File:                     6S10hlF6GK17XsTjWkyWh_ueiKs.roa (raw, json)
Hash identifier:          EqshO7N9qfeG2hUCnBYo+wfjMz4aFE3SO7il7f0iReA=
Subject key identifier:   E9:2D:74:86:51:7A:18:AD:7B:5E:C4:E3:5A:4C:96:87:FB:9E:88:AB
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       0117
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/6S10hlF6GK17XsTjWkyWh_ueiKs.roa
Signing time:             Tue 31 Mar 2026 08:17:20 +0000
ROA not before:           Tue 31 Mar 2026 08:17:20 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2514
IP address blocks:        160.248.242.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 279 (0x117)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Mar 31 08:17:20 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=E92D7486517A18AD7B5EC4E35A4C9687FB9E88AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5e:a4:da:d5:20:9b:72:94:94:b3:1c:6e:e3:
                    6f:53:35:fa:ba:d2:55:bb:68:09:6b:a7:6e:64:08:
                    8f:80:e4:eb:84:30:58:30:6a:ae:df:2c:55:dd:ba:
                    85:ec:6f:69:9a:dc:d2:c5:7e:df:28:6b:7f:76:c5:
                    24:b1:c6:79:80:b1:79:07:f0:7c:48:73:76:2d:32:
                    44:01:da:3b:cc:17:29:c9:c7:33:d5:7e:6d:d5:7e:
                    a8:05:f4:cd:56:99:68:dc:c6:c7:a6:aa:06:71:3a:
                    85:63:22:fc:ad:75:2b:2e:c4:98:b8:7b:dc:5e:e7:
                    e6:7f:ec:d8:f7:06:3b:0a:bc:a4:15:6f:58:a2:3b:
                    5b:32:d6:3e:3b:df:df:87:e9:a2:3b:86:78:4f:70:
                    20:f8:ac:b5:c4:7a:ce:8b:e6:94:0e:c6:41:06:a9:
                    83:59:81:cf:87:56:9d:7b:a3:dc:be:8d:aa:85:91:
                    3b:3b:17:fb:1c:48:88:22:97:55:51:af:b7:5e:44:
                    6a:97:82:87:6f:df:5d:09:ac:18:20:0e:fa:22:7d:
                    01:9a:60:79:4f:7e:db:0d:32:01:9a:ae:48:7a:8e:
                    ba:b0:1c:a2:50:8e:08:1c:56:51:47:85:c4:fd:76:
                    c3:ad:c9:4f:24:ee:15:af:15:a5:4b:a3:66:24:b5:
                    ab:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:2D:74:86:51:7A:18:AD:7B:5E:C4:E3:5A:4C:96:87:FB:9E:88:AB
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/6S10hlF6GK17XsTjWkyWh_ueiKs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.248.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:31:3f:6a:02:0b:b6:56:b6:d9:dd:5c:c4:f8:cb:33:5e:37:
         c9:a2:98:9f:fe:f4:fb:ea:7f:03:32:36:1c:aa:3e:4e:4e:1d:
         47:ab:05:94:0d:20:24:9b:2b:53:09:86:25:79:fb:cc:63:1d:
         de:ae:e8:25:35:7a:51:d2:ef:3e:70:4e:e3:5d:9b:fa:0a:62:
         4e:1a:49:ae:12:32:b1:9e:67:74:91:2a:39:36:36:48:95:ec:
         f4:4c:b2:c8:50:90:e8:c7:20:7d:2f:ab:05:33:3b:5b:80:af:
         9f:2c:6d:e3:9f:78:2b:98:90:c7:5f:b3:7b:66:a7:54:20:e7:
         c0:a3:01:f8:8d:8d:dc:82:5b:ca:7c:ad:03:b6:cf:22:91:c4:
         f0:f5:88:c1:49:9b:18:f0:8c:47:04:fd:a2:fb:f3:31:32:d7:
         9b:f5:46:44:8f:4f:29:57:7b:c0:3c:56:d7:f9:67:f9:90:51:
         f5:30:fd:ed:0d:e4:68:1f:4f:d5:39:b0:3b:d5:9b:0d:0d:a6:
         64:d9:d1:ae:af:ea:de:27:77:44:8c:1f:bb:ee:e2:c1:02:46:
         6f:2f:a3:f6:dd:c3:43:4d:ff:52:c4:b3:ed:3f:5d:e0:ff:a8:
         07:ae:b0:ae:b1:42:14:8d:6a:00:c8:94:8f:a5:b5:51:b8:a6:
         c5:5b:99:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:02:17 2026 by rpki-client