Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/QCjjwfYXojW_kLDXDWAWABx482E.roa
File:                     QCjjwfYXojW_kLDXDWAWABx482E.roa (raw, json)
Hash identifier:          VlU4fZ82Oq9zY4T5hDKOKKB4gBfMFLe6Dp1LsbHJJ2w=
Subject key identifier:   40:28:E3:C1:F6:17:A2:35:BF:90:B0:D7:0D:60:16:00:1C:78:F3:61
Certificate issuer:       /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial:       C1
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/QCjjwfYXojW_kLDXDWAWABx482E.roa
Signing time:             Tue 31 Mar 2026 08:17:47 +0000
ROA not before:           Tue 31 Mar 2026 08:17:47 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2514
IP address blocks:        61.194.0.0/16 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 193 (0xc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
        Validity
            Not Before: Mar 31 08:17:47 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=4028E3C1F617A235BF90B0D70D6016001C78F361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b4:07:dd:a9:77:43:a9:dd:ce:1d:f5:d6:53:
                    a9:53:f3:61:39:26:fd:7f:3e:88:c6:4e:2b:53:58:
                    fe:a9:94:8a:f6:4f:41:2c:b1:75:b1:9d:b4:6b:dd:
                    d6:e1:b0:fb:24:00:ee:76:43:c6:94:70:44:e1:68:
                    9b:da:89:16:68:c3:d4:f4:38:91:54:78:e1:2b:7c:
                    4b:c2:70:01:f3:e4:44:cf:3f:8f:8e:7e:93:ff:ad:
                    65:d9:dc:b3:4c:a8:d6:38:c6:e6:fd:6d:77:cd:97:
                    78:7d:8c:d0:48:73:6e:83:38:58:20:0d:03:36:8e:
                    9d:98:1d:da:f7:68:84:5d:50:0d:9e:1b:4e:2c:25:
                    4b:29:e8:bd:5f:6f:23:73:3c:b4:56:61:b0:09:c3:
                    f7:a6:2f:64:f5:48:95:cc:60:61:92:e3:f5:73:9f:
                    64:9a:46:07:2e:a0:29:66:3d:83:2c:08:17:84:10:
                    ef:c2:c8:94:86:1f:6d:11:01:01:48:e3:2d:26:9e:
                    b3:a2:58:48:ea:1e:04:ec:1c:15:b6:d8:8f:35:7b:
                    f2:ee:a9:c6:ec:07:0d:9b:77:e0:ae:01:63:6e:ab:
                    fd:5c:fa:4d:d0:cb:ee:0a:df:b5:4b:cf:8a:1d:ae:
                    88:36:7a:76:b2:d8:f8:5a:1f:82:ac:97:64:dc:69:
                    68:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:28:E3:C1:F6:17:A2:35:BF:90:B0:D7:0D:60:16:00:1C:78:F3:61
            X509v3 Authority Key Identifier:
                keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/QCjjwfYXojW_kLDXDWAWABx482E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.194.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a4:57:71:59:cb:a2:51:e7:d2:e7:39:53:46:cd:4c:21:ec:d4:
         ab:75:29:58:55:5e:25:b7:da:c6:b0:9d:d9:70:17:5e:bf:1d:
         ee:16:fa:8a:39:de:b6:e2:2d:d2:b6:71:a1:f0:12:3c:25:7c:
         77:54:3f:6b:df:f8:39:c4:31:02:31:42:8a:21:6c:86:64:58:
         11:43:a9:d1:19:1f:42:9a:f6:89:de:6e:b9:8e:5b:9e:5b:3a:
         c5:7e:7b:13:03:73:9a:5f:c3:69:be:b5:a5:c9:bc:47:e9:7f:
         d4:69:00:f5:bd:7e:36:1d:55:80:72:01:12:38:5a:01:72:b5:
         64:12:dc:29:54:2f:3e:4a:cb:88:23:ed:1d:3f:e4:e2:9f:0d:
         16:4e:57:69:77:c3:ac:87:5f:af:d5:2f:de:cc:c0:9f:8f:ab:
         d5:83:02:ea:05:df:57:d3:01:27:ce:9e:3b:ac:8a:5d:f8:c7:
         a6:17:d8:83:7c:da:83:c4:52:c6:8d:bb:62:37:54:ea:b1:98:
         2a:85:0d:f5:12:e4:4e:09:dd:29:88:2d:bd:24:03:51:85:7f:
         25:e1:46:73:1d:5e:9c:80:8d:38:56:c8:f3:32:e4:42:b8:e0:
         93:9e:ae:45:5c:30:7c:d1:43:dc:76:4a:ff:66:3f:aa:b1:1e:
         71:f1:71:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:15 2026 by rpki-client