Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/b0jIICYdwyLpms7EIBiJyQML6oM.roa
File:                     b0jIICYdwyLpms7EIBiJyQML6oM.roa (raw, json)
Hash identifier:          P81M+a+PwDXgw2PJwb2AJdec0XlXPGyCG7MAeHxRelQ=
Subject key identifier:   6F:48:C8:20:26:1D:C3:22:E9:9A:CE:C4:20:18:89:C9:03:0B:EA:83
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       011F
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/b0jIICYdwyLpms7EIBiJyQML6oM.roa
Signing time:             Tue 31 Mar 2026 08:17:24 +0000
ROA not before:           Tue 31 Mar 2026 08:17:24 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2514
IP address blocks:        128.28.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 287 (0x11f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Mar 31 08:17:24 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=6F48C820261DC322E99ACEC4201889C9030BEA83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:bc:66:4b:77:64:47:24:cb:ac:b6:9c:ac:a8:
                    71:cd:f0:3b:56:40:42:cc:c1:b6:61:c2:6b:a8:d8:
                    5e:59:6c:25:02:11:86:cc:98:05:02:b7:9d:40:73:
                    6c:9a:de:da:65:b2:a6:62:7c:1c:64:54:60:d8:da:
                    72:e5:1d:84:3e:8e:82:dd:7a:30:61:d9:df:5a:3e:
                    fb:aa:c0:08:2a:7b:04:fc:58:0d:9f:21:b3:6a:4c:
                    48:ea:1a:32:ed:3f:01:f2:91:8d:64:5a:e8:d4:60:
                    fe:49:66:68:42:4e:9a:40:77:6e:26:32:a9:fa:1f:
                    af:2e:10:97:42:f4:69:1f:21:51:b1:d4:0c:5a:4f:
                    a3:58:b8:af:76:48:37:e8:ba:5b:f4:da:2c:54:bf:
                    38:37:28:28:71:f8:d1:0b:d1:ca:78:d7:43:6b:18:
                    90:27:b9:86:5d:ab:d7:58:39:1e:46:c7:71:21:11:
                    b6:3a:6e:c2:84:45:6d:97:70:10:59:a6:37:8c:2d:
                    cd:d3:a6:db:78:44:0b:8f:09:12:9c:a7:51:54:c6:
                    60:cf:1c:20:cd:e8:b7:c1:88:11:f5:ec:28:bb:40:
                    61:10:aa:fb:aa:6a:a8:55:25:ff:07:73:dc:68:3e:
                    08:4e:e3:ff:c9:eb:25:0d:18:2c:98:70:94:15:48:
                    ae:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:48:C8:20:26:1D:C3:22:E9:9A:CE:C4:20:18:89:C9:03:0B:EA:83
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/b0jIICYdwyLpms7EIBiJyQML6oM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.28.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a7:74:e7:09:fa:ff:28:23:76:81:79:18:49:da:67:ac:93:e3:
         9c:a0:47:48:99:0e:c4:f4:a9:bf:cd:0a:b3:1c:22:34:07:09:
         1e:5e:1a:05:8c:24:f7:62:8b:c1:76:ab:71:94:52:72:61:e0:
         7f:fd:f7:20:b3:bc:b4:56:f4:55:4e:de:fb:af:09:c3:5b:45:
         49:9b:7b:4e:3c:5e:fd:a3:cd:b8:a8:43:93:03:32:4b:c8:92:
         b0:04:53:49:ac:30:a6:d5:48:27:97:cd:1d:1b:c7:4b:69:5f:
         9c:2e:d4:fa:a4:6c:8e:e1:8a:bd:d6:45:61:ba:6e:88:6c:33:
         4f:15:ca:cc:7c:46:d8:f4:62:ad:1b:20:22:6a:5e:bf:9b:ea:
         84:0e:63:8a:10:aa:42:e1:90:da:88:02:0a:1f:51:61:3f:31:
         2e:41:be:00:dd:56:7e:ee:22:c9:23:2a:1e:9b:20:ec:2d:ca:
         f2:f3:6d:3c:81:ad:ca:98:b8:8c:ad:d4:0c:fb:02:e3:39:7a:
         1d:0c:98:d8:68:30:ec:1b:99:06:e1:e2:6e:a2:1a:6f:2b:9e:
         29:e0:71:5e:03:d0:df:48:2c:90:a5:71:f3:75:9a:a2:3d:4e:
         72:32:52:79:24:82:f0:45:08:3e:a3:8b:5a:85:69:32:3b:54:
         1e:36:0e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:02:23 2026 by rpki-client