Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/aWIFEiHhHQdt-OfGkzUhyLtVOZM.roa
File:                     aWIFEiHhHQdt-OfGkzUhyLtVOZM.roa (raw, json)
Hash identifier:          NHKX6ZcOV2U4oTCmIAzZedonPrAQbtge8ci8aYEus5o=
Subject key identifier:   69:62:05:12:21:E1:1D:07:6D:F8:E7:C6:93:35:21:C8:BB:55:39:93
Certificate issuer:       /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial:       AA
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/aWIFEiHhHQdt-OfGkzUhyLtVOZM.roa
Signing time:             Tue 31 Mar 2026 08:17:36 +0000
ROA not before:           Tue 31 Mar 2026 08:17:36 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2514
IP address blocks:        111.89.0.0/16 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 170 (0xaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
        Validity
            Not Before: Mar 31 08:17:36 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=6962051221E11D076DF8E7C6933521C8BB553993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:0b:4e:73:a6:7d:c3:67:ec:1a:dc:ed:81:1e:
                    16:14:44:fb:de:27:fd:e1:8a:53:e8:fb:67:5d:c7:
                    ce:ec:f9:73:6e:51:a0:a1:45:de:38:f0:cb:b7:c1:
                    33:cd:f6:90:27:62:39:53:c2:f9:9e:ea:09:14:01:
                    a1:50:c5:28:6a:56:b7:35:3e:62:c2:67:35:ea:44:
                    61:5e:16:df:63:25:41:d9:a0:6e:37:be:2a:8a:b7:
                    91:a5:28:c9:75:d9:49:0d:7a:7e:51:2e:75:62:37:
                    4c:81:e7:90:52:25:3d:aa:36:89:fa:2c:2d:28:81:
                    e6:44:10:1f:8f:d0:4c:62:37:7b:e7:09:87:54:f2:
                    da:bd:da:d6:fd:30:c3:63:33:d8:0d:96:54:c6:55:
                    41:2f:52:b1:eb:45:cf:33:7d:fc:9b:20:bb:48:0c:
                    2d:79:56:11:65:22:08:a1:33:15:cd:f2:9c:76:c6:
                    a4:f6:4b:ba:d8:34:50:90:5d:1a:a4:8b:97:7a:a2:
                    63:c0:ef:f1:98:ab:d7:8f:bd:22:68:6f:d1:a4:c9:
                    f2:a0:3e:81:e0:5a:e8:b0:bd:89:86:7b:20:d9:97:
                    fa:58:f1:e6:f8:d6:d2:5f:86:1b:e8:8d:6f:8f:ab:
                    f9:3b:6a:0d:3b:5c:23:d1:7c:7c:43:72:da:93:c9:
                    fd:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:62:05:12:21:E1:1D:07:6D:F8:E7:C6:93:35:21:C8:BB:55:39:93
            X509v3 Authority Key Identifier:
                keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/aWIFEiHhHQdt-OfGkzUhyLtVOZM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.89.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6a:2b:33:48:2e:59:0c:b8:ad:39:f6:c5:c3:51:05:bb:42:c8:
         da:d5:ca:c8:aa:8d:79:56:60:bc:e2:fd:6b:89:b0:fc:b4:d0:
         5f:0f:90:7c:99:6f:f9:19:21:3d:b9:95:36:17:9a:59:ee:76:
         17:2a:51:2b:16:54:95:6f:b1:9e:7f:d6:3f:7c:c6:7a:f2:d6:
         a4:07:80:f3:91:a4:76:05:00:d4:7b:c6:e7:2e:30:99:a6:90:
         ed:7c:a5:3f:94:df:66:a9:7e:2b:b2:be:02:4d:3e:d7:28:f2:
         86:fa:f1:c2:89:22:79:3e:d7:77:d7:6a:19:1c:f8:11:69:f1:
         07:24:8f:74:40:cb:fb:04:38:ed:35:ce:2f:eb:2c:26:b3:7d:
         fa:51:68:24:ea:b4:1f:27:25:74:be:d0:f7:89:1a:be:e7:02:
         6a:66:b2:5d:15:24:51:9f:42:02:86:6c:fd:5a:4b:28:06:8c:
         a8:cf:91:07:a8:e6:84:e0:16:96:c4:12:e7:06:67:71:ff:df:
         52:b2:36:22:d6:a0:3b:cf:da:26:1a:98:18:3f:b3:dd:c6:2b:
         b8:88:82:90:5d:9d:61:67:2d:ec:95:57:a6:f6:1e:7d:ae:e4:
         32:62:48:87:39:c9:fd:ca:b1:85:a4:7f:04:a1:50:e6:a2:97:
         65:47:53:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:46 2026 by rpki-client