Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/UxeqcdYETGG2CuDXSN8bvWmNTEs.roa
File:                     UxeqcdYETGG2CuDXSN8bvWmNTEs.roa (raw, json)
Hash identifier:          SYdto571pZH6Sp0aGW1pWR18BvnYR77iLgYwhqOj0WI=
Subject key identifier:   53:17:AA:71:D6:04:4C:61:B6:0A:E0:D7:48:DF:1B:BD:69:8D:4C:4B
Certificate issuer:       /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial:       B8
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/UxeqcdYETGG2CuDXSN8bvWmNTEs.roa
Signing time:             Tue 31 Mar 2026 08:17:42 +0000
ROA not before:           Tue 31 Mar 2026 08:17:42 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2514
IP address blocks:        210.136.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184 (0xb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
        Validity
            Not Before: Mar 31 08:17:42 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=5317AA71D6044C61B60AE0D748DF1BBD698D4C4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9f:6c:18:96:df:ee:c4:9b:19:b9:03:06:28:
                    07:2c:f3:79:cf:78:67:a6:c4:2a:58:67:c5:e1:a2:
                    ed:87:5d:48:6a:82:3f:9a:8f:3f:e7:3c:04:a0:e1:
                    3d:9a:11:0a:81:95:f2:c3:0c:78:43:e0:e7:f5:cc:
                    85:9c:2d:6d:6d:9f:19:bd:be:06:b5:db:81:55:bb:
                    43:67:74:52:39:b7:f8:8c:b9:9b:bc:cf:65:33:c7:
                    7c:33:38:dd:f6:32:55:6b:0a:95:9c:4b:11:c2:89:
                    70:57:e7:4d:35:8c:86:32:c3:97:1b:18:2f:e5:7d:
                    e9:cb:4c:7d:f7:38:f4:6a:4b:16:a0:fb:27:8d:18:
                    f6:4a:d7:53:06:fb:ac:a9:b2:82:38:70:b4:85:7e:
                    47:c3:e6:a8:a7:2a:8b:90:e3:19:3e:0d:eb:02:4b:
                    10:a6:8a:dd:a1:ca:97:39:9a:ae:0b:5f:3d:27:32:
                    e1:d4:bd:15:75:36:b6:05:eb:ca:c6:55:68:fa:15:
                    11:d7:64:01:2b:cf:6c:7b:ec:c3:f2:18:c0:91:d5:
                    9f:44:4f:d5:ee:40:50:ed:21:6e:7b:38:2a:b1:b2:
                    f1:45:8d:dc:bb:1d:9b:06:f3:45:b3:05:3e:bd:ec:
                    c4:d8:19:ea:1e:86:d6:fb:7e:12:3e:0a:b4:4e:68:
                    4a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:17:AA:71:D6:04:4C:61:B6:0A:E0:D7:48:DF:1B:BD:69:8D:4C:4B
            X509v3 Authority Key Identifier:
                keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/UxeqcdYETGG2CuDXSN8bvWmNTEs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.136.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         82:ed:c0:bc:55:88:5a:a2:55:9c:33:94:78:59:11:8e:86:8e:
         2f:31:71:ff:45:0d:5b:01:f8:fb:7e:12:49:7a:23:59:34:6b:
         14:c9:22:ec:ec:be:63:69:61:ff:6e:1b:e3:d1:d6:93:ea:e0:
         b3:25:6a:08:11:fc:b2:82:75:1f:62:1f:15:c4:48:be:7c:0f:
         02:44:f3:b4:55:ba:cb:d2:8b:07:35:42:4b:a3:a2:80:cf:9d:
         6b:38:15:fd:bc:1a:e5:0e:1b:49:22:a0:7f:48:6c:4d:1c:cf:
         1d:a1:94:1d:bf:fb:63:1d:c6:21:46:d6:fe:b2:ac:36:b3:d0:
         f5:0b:e3:4d:42:b3:25:95:2a:4c:44:e9:ed:d4:c4:63:2d:3c:
         0e:4d:49:c3:3d:e9:22:f5:37:e6:ef:ae:68:db:ba:cf:7d:02:
         5d:55:7b:0f:52:98:ee:f4:37:46:8e:ab:bb:d3:04:d7:12:33:
         72:d3:a1:d1:ad:3d:1a:30:5a:65:9d:55:20:44:8f:f5:73:5b:
         e1:15:dc:cd:44:c9:d5:ac:f8:e7:e4:8f:8d:9c:4a:10:bc:de:
         ee:88:ba:78:42:56:05:ac:67:b1:5c:bb:f9:3a:b8:14:8a:ab:
         c1:a7:86:a5:e9:3b:21:61:4d:a0:0e:db:fe:ac:d4:cf:4f:32:
         f8:b2:56:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:11:26 2026 by rpki-client