Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/XGgXbog27m21n6fXamqFJXeL-ak.roa
File:                     XGgXbog27m21n6fXamqFJXeL-ak.roa (raw, json)
Hash identifier:          1RYGF0mwMlT909lxaN6x55ZckJeuLTdvmuiKrwWP/5U=
Subject key identifier:   5C:68:17:6E:88:36:EE:6D:B5:9F:A7:D7:6A:6A:85:25:77:8B:F9:A9
Certificate issuer:       /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial:       B6
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/XGgXbog27m21n6fXamqFJXeL-ak.roa
Signing time:             Tue 31 Mar 2026 08:17:41 +0000
ROA not before:           Tue 31 Mar 2026 08:17:41 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2514
IP address blocks:        202.239.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 182 (0xb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
        Validity
            Not Before: Mar 31 08:17:41 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=5C68176E8836EE6DB59FA7D76A6A8525778BF9A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:9d:1c:2f:b1:ed:7a:17:43:a8:bc:8e:40:9b:
                    05:c4:a7:b1:18:76:83:40:e1:41:98:8c:6e:6b:78:
                    44:16:1c:2f:6b:1f:cb:4a:b0:03:e5:ab:70:d9:c7:
                    d9:4e:fe:33:aa:fb:e7:16:47:3a:af:45:19:2d:51:
                    70:ac:88:fd:14:99:d7:a4:53:72:4b:1b:90:9b:55:
                    2a:c3:86:28:83:1d:18:7f:65:52:d1:37:b0:04:65:
                    83:44:36:92:1c:57:31:85:3e:14:3d:c1:09:9a:1b:
                    36:37:d3:5e:e5:c1:3d:0e:49:5c:12:86:3f:11:ab:
                    90:ef:95:b9:cd:09:2d:7f:3c:f0:75:38:2c:64:c1:
                    f4:cb:df:fa:f9:d6:10:b9:bf:f8:a8:0d:09:25:92:
                    b2:b8:1a:03:2c:90:65:c5:ae:de:86:4c:6d:2f:1f:
                    7b:72:b2:66:0a:18:72:bf:a5:d7:90:ac:bf:dd:14:
                    5c:4c:bb:7d:76:e3:46:71:62:ed:db:40:77:54:a5:
                    3c:dd:26:92:15:de:e2:1d:ed:8a:da:3f:fe:9d:8d:
                    6a:74:01:e3:72:dd:6a:5c:1b:b0:5e:fa:dc:c8:71:
                    3d:6e:c9:6b:3d:47:a2:e2:8e:2b:dd:67:64:90:d1:
                    46:69:dd:8b:dd:9f:76:99:9b:df:8d:d0:cb:2c:88:
                    a2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:68:17:6E:88:36:EE:6D:B5:9F:A7:D7:6A:6A:85:25:77:8B:F9:A9
            X509v3 Authority Key Identifier:
                keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/XGgXbog27m21n6fXamqFJXeL-ak.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.239.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         84:24:d2:30:49:29:7d:aa:6b:70:92:52:0b:87:6a:21:8c:be:
         ab:f6:ae:6f:a9:cd:a5:f4:69:cc:65:f6:60:f8:77:51:6a:05:
         69:fc:22:9c:2d:a8:d1:69:1f:72:ef:f9:4e:10:32:9f:e0:bc:
         f5:53:89:10:1b:b6:8b:38:c0:a4:96:87:f9:b0:6a:16:38:98:
         25:e1:d8:06:68:3e:66:aa:2c:ff:ba:c1:dc:61:23:c4:6a:14:
         79:f6:0b:b0:82:f3:45:12:58:96:5c:f8:d5:3b:64:27:3e:de:
         e5:64:7e:f6:af:ee:34:23:14:14:2d:6c:dd:ed:3c:14:53:ee:
         05:2e:30:95:28:1b:8d:27:c0:84:84:32:c9:73:b0:f9:80:9b:
         69:3c:1d:20:70:b1:e4:39:b8:b4:c4:2e:aa:6f:16:ab:4f:46:
         25:1b:d0:21:6d:6d:ab:d7:9f:1e:91:40:3b:ae:30:ad:e7:2e:
         65:2e:7a:ea:d9:2d:04:79:2b:f3:a3:4e:35:fa:84:e5:d8:c2:
         93:5a:c6:10:16:2f:35:7a:d9:d6:a7:7b:63:b0:2f:45:d3:03:
         8e:bb:ab:2b:6b:ac:a1:ab:28:1e:4c:64:59:e3:5f:e8:88:5e:
         39:b3:67:1f:a7:ae:61:fa:9c:8e:3d:be:71:c2:5c:68:87:57:
         99:85:02:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:16 2026 by rpki-client