Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/frTWC3LVdnNZcMTVvdWkedRNjBE.roa
File:                     frTWC3LVdnNZcMTVvdWkedRNjBE.roa (raw, json)
Hash identifier:          kyofZlTsWNS3sVKmJ3H/69CYBSHnzj0vbIwr4g6yph0=
Subject key identifier:   7E:B4:D6:0B:72:D5:76:73:59:70:C4:D5:BD:D5:A4:79:D4:4D:8C:11
Certificate issuer:       /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial:       B7
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/frTWC3LVdnNZcMTVvdWkedRNjBE.roa
Signing time:             Tue 31 Mar 2026 08:17:41 +0000
ROA not before:           Tue 31 Mar 2026 08:17:41 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2514
IP address blocks:        203.138.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 183 (0xb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
        Validity
            Not Before: Mar 31 08:17:41 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7EB4D60B72D576735970C4D5BDD5A479D44D8C11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ad:ac:9c:bb:c7:0a:71:b9:be:24:81:f5:af:
                    00:93:a5:74:49:72:68:e5:5f:d1:15:45:e5:91:e3:
                    3f:d0:4a:ed:a8:c1:45:fd:17:cd:8d:a3:dc:27:61:
                    58:b0:f1:8f:f7:d8:e1:ed:20:de:54:51:97:cc:ec:
                    8e:b0:5a:a4:75:8f:17:66:49:38:c4:7b:dc:b7:1f:
                    96:1c:3b:d0:75:c8:96:54:24:fe:c9:f6:5a:17:a7:
                    cc:4e:da:58:67:ff:c8:2c:e9:35:4e:ac:f2:5b:51:
                    d2:ff:22:5d:93:9f:30:06:40:ae:46:1e:ff:5a:af:
                    fa:c8:8b:d3:d4:37:91:e8:ab:6e:b5:4f:04:5b:ca:
                    36:86:24:90:64:3c:30:9e:33:98:f7:b0:6a:62:fc:
                    bf:59:40:4f:43:3f:cd:3b:6a:72:ed:94:95:b2:90:
                    35:40:69:38:3f:b7:90:85:d0:c9:70:76:f0:cd:fc:
                    d4:25:49:cb:8f:1a:a8:11:1e:56:b5:e7:0a:f6:96:
                    b4:ce:fc:93:64:13:7b:c1:d1:12:95:44:04:89:13:
                    d5:3d:e4:f5:96:e2:6c:3f:38:a0:b7:f8:d7:e6:8a:
                    fb:e9:02:71:f5:6e:33:9c:fe:78:9b:e5:66:fb:76:
                    ae:73:2f:37:d7:e0:78:05:41:7e:81:cb:fa:2d:a1:
                    bf:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B4:D6:0B:72:D5:76:73:59:70:C4:D5:BD:D5:A4:79:D4:4D:8C:11
            X509v3 Authority Key Identifier:
                keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/frTWC3LVdnNZcMTVvdWkedRNjBE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.138.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         77:0e:0c:da:81:8c:96:d1:0d:f6:e3:67:34:e3:e0:5f:2b:05:
         a9:42:bf:9b:d8:6a:e3:40:6b:14:36:3f:f8:b2:c2:24:b5:9e:
         e6:4d:4f:d7:09:90:67:8d:e4:c0:28:42:1a:2d:5b:f8:2f:05:
         09:84:7a:53:49:30:b5:80:92:a9:38:77:7c:b6:61:cd:da:a6:
         8e:b2:87:d9:07:ed:60:fb:8a:45:2c:4c:e8:4d:ec:29:dc:a4:
         cf:fa:b8:cb:ea:9a:4d:f9:96:26:30:91:52:60:df:c7:6d:9b:
         b7:9d:1d:39:ff:94:52:bd:85:e4:4a:e6:76:c8:ba:56:57:fe:
         19:70:b2:9c:02:64:7b:0f:98:93:81:8d:81:fc:b0:10:9b:20:
         68:89:dd:9a:34:42:12:40:42:a6:35:04:9c:bd:f2:91:a6:c7:
         60:03:e3:12:78:de:eb:c4:8e:00:d2:14:f8:f4:7c:ef:3d:0f:
         59:e5:b1:09:99:8d:52:62:ea:df:4e:f2:67:58:a8:65:8c:cd:
         1c:62:a2:c8:51:24:d2:c0:c8:ab:ea:39:ed:81:d0:db:e3:65:
         94:ee:b6:c0:4e:b8:ff:11:7f:19:14:ae:5e:6e:ea:d5:fc:71:
         5c:c0:f7:9e:a4:52:39:fb:9a:15:ec:12:28:fd:e7:63:92:5f:
         d9:48:9c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:49:25 2026 by rpki-client