Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/k1NpVmiw9IHh7pEk60Of4hyMARY.roa
File:                     k1NpVmiw9IHh7pEk60Of4hyMARY.roa (raw, json)
Hash identifier:          WSRQXDZt+rts4oHY02NcifqQh2AFwkWipjdj2UwhXKU=
Subject key identifier:   93:53:69:56:68:B0:F4:81:E1:EE:91:24:EB:43:9F:E2:1C:8C:01:16
Certificate issuer:       /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial:       B3
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/k1NpVmiw9IHh7pEk60Of4hyMARY.roa
Signing time:             Tue 31 Mar 2026 08:17:39 +0000
ROA not before:           Tue 31 Mar 2026 08:17:39 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2514
IP address blocks:        202.212.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179 (0xb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
        Validity
            Not Before: Mar 31 08:17:39 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=9353695668B0F481E1EE9124EB439FE21C8C0116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0a:88:2c:fe:cc:0f:36:33:10:a5:5f:bc:84:
                    e7:4b:6f:44:ab:ae:e1:9e:c8:5c:d9:ec:1a:6c:be:
                    eb:78:fa:f2:22:68:82:9c:fc:7e:b0:af:e4:8e:d6:
                    4b:4b:bd:f5:99:45:35:92:ed:d4:6c:90:6d:aa:82:
                    5b:1d:aa:ff:94:27:e9:c2:3b:1f:cb:b2:a2:3c:51:
                    f8:85:83:cc:09:8b:20:2d:ee:dc:b9:99:b8:76:ea:
                    44:de:4f:ef:ac:36:65:66:bf:c0:33:b0:eb:31:d5:
                    55:82:79:c8:74:76:63:07:20:c6:14:30:80:37:31:
                    e3:fa:a2:a8:39:bf:19:18:3d:b8:14:5d:be:c2:1d:
                    2d:80:6f:88:e8:81:84:fa:ca:49:dd:a1:97:84:99:
                    00:a9:ce:02:20:0c:db:a3:fc:59:61:bd:3d:2b:ed:
                    88:94:1c:70:5d:02:8a:c8:d5:d8:6d:bb:0f:f6:fc:
                    c6:d3:54:67:8e:d6:0c:6f:66:49:da:83:e3:d3:9b:
                    e9:32:d9:31:d9:9c:20:b3:47:8a:a1:ec:e6:d7:7f:
                    74:4b:59:ba:b2:e6:78:be:3a:62:27:15:58:27:9b:
                    65:ce:c7:fe:53:ed:f4:3b:20:7e:49:ee:8e:44:db:
                    90:12:a2:0e:47:13:3b:1d:65:4f:34:48:1a:17:9a:
                    11:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:53:69:56:68:B0:F4:81:E1:EE:91:24:EB:43:9F:E2:1C:8C:01:16
            X509v3 Authority Key Identifier:
                keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/k1NpVmiw9IHh7pEk60Of4hyMARY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.212.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         08:48:30:59:b6:0c:91:c4:45:88:13:38:9e:42:f5:18:25:09:
         d1:54:88:80:40:02:13:79:18:42:5a:64:2a:4e:5a:2c:01:e1:
         ca:70:e9:38:66:76:4a:2e:7a:17:b2:37:68:52:07:38:6b:f1:
         1c:87:dd:89:cc:b4:cb:18:a4:a2:37:57:ca:8c:c2:6f:0a:f1:
         65:b1:4d:02:04:54:e0:69:4c:6f:92:40:01:4a:27:0f:8a:5b:
         49:ee:f7:c4:af:8b:15:4e:ef:1d:32:05:31:ce:59:e0:d3:90:
         41:7c:8e:1b:37:a7:0f:67:29:c9:e9:e9:cf:dd:e9:06:64:68:
         47:13:11:50:2f:98:73:9f:a4:49:ac:01:8e:89:27:69:83:93:
         13:77:68:ea:44:43:8f:aa:d4:12:77:46:08:2a:42:2a:8b:f1:
         a3:83:ab:5c:71:71:4c:e6:f8:c2:7f:96:98:45:7b:a5:b7:22:
         52:a4:1a:a4:3e:19:c5:18:4b:c2:b2:51:f6:c8:16:35:6f:89:
         b8:24:78:06:d8:00:9c:62:38:07:07:bc:d2:a0:97:c0:ff:e8:
         b4:e4:50:d1:24:4b:ad:9e:8a:96:34:3d:a4:3a:21:76:5b:f2:
         7a:f2:28:a4:cf:c3:c1:24:9a:87:86:ac:b4:f0:96:52:fb:d7:
         d7:70:3d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:51 2026 by rpki-client