Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/kGyuSK02kz90wPFZ_8e4M8VRPLg.roa
File:                     kGyuSK02kz90wPFZ_8e4M8VRPLg.roa (raw, json)
Hash identifier:          vQUvds4SQg5+s3OcZa0Ncq4kxFOsU95pkyY7p6AcmNw=
Subject key identifier:   90:6C:AE:48:AD:36:93:3F:74:C0:F1:59:FF:C7:B8:33:C5:51:3C:B8
Certificate issuer:       /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial:       CD
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/kGyuSK02kz90wPFZ_8e4M8VRPLg.roa
Signing time:             Tue 31 Mar 2026 08:17:52 +0000
ROA not before:           Tue 31 Mar 2026 08:17:52 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2514
IP address blocks:        219.102.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 205 (0xcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
        Validity
            Not Before: Mar 31 08:17:52 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=906CAE48AD36933F74C0F159FFC7B833C5513CB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d0:03:a6:71:d9:3d:1d:1f:29:eb:33:91:96:
                    03:73:9c:8c:8f:96:52:9e:da:bf:64:c2:18:03:10:
                    58:c3:10:ce:82:20:09:f9:c3:87:d4:1c:7e:f9:21:
                    5f:9f:13:cf:be:75:fa:7f:16:cd:14:6a:66:27:51:
                    76:d1:fc:33:81:2d:34:09:d2:5b:f4:b6:90:bf:74:
                    ec:9a:ac:b1:c6:4c:e1:68:8c:09:8f:cf:34:87:68:
                    b3:91:62:ca:39:49:e7:c6:c5:73:de:50:26:70:e1:
                    02:f6:2f:42:81:fa:7e:c5:b8:b9:4b:9d:c6:85:46:
                    91:9b:0d:7f:f0:1f:54:af:75:ed:dc:25:7b:88:f3:
                    61:26:9e:ad:f5:71:52:91:86:46:0d:a9:68:a4:b8:
                    a8:a4:7a:05:5b:bd:bc:d9:92:8f:b2:28:48:0c:4f:
                    77:f7:0f:4f:bd:57:d3:40:4f:73:57:8c:e5:77:7b:
                    bb:b5:b5:41:9a:3f:28:d5:6b:a0:be:8d:b6:da:9c:
                    c6:bf:0e:15:69:3b:90:2c:c1:86:35:32:02:bb:9d:
                    57:65:41:d1:b7:9a:ea:a1:c5:6b:57:3d:2c:c2:3c:
                    da:1f:16:97:39:38:ee:44:b6:d5:9f:11:4c:8b:3f:
                    09:4f:3c:5f:6d:ee:63:16:47:20:42:e4:ce:98:b3:
                    ec:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:6C:AE:48:AD:36:93:3F:74:C0:F1:59:FF:C7:B8:33:C5:51:3C:B8
            X509v3 Authority Key Identifier:
                keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/kGyuSK02kz90wPFZ_8e4M8VRPLg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.102.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         14:7c:96:6a:ef:42:b4:6e:1b:97:17:bf:c2:40:c9:0d:24:27:
         87:cb:82:8f:c7:e5:5e:44:54:80:1e:14:92:64:b7:91:c5:15:
         d0:03:7f:a5:9e:7d:21:2f:87:a3:2c:b9:ec:4e:84:91:83:8a:
         c6:84:88:f1:e0:b3:be:55:99:16:18:f3:d1:53:5d:2f:93:95:
         51:05:fc:60:f5:97:aa:43:16:db:10:83:a2:4a:0b:fe:2f:76:
         bc:91:ad:fe:af:7c:88:59:a9:e9:b6:08:02:74:43:30:a8:81:
         10:18:91:c3:73:87:a6:dd:88:79:21:f6:9e:40:60:41:17:33:
         92:83:a5:1f:7e:bd:55:30:61:3e:45:2b:74:05:53:4a:d5:64:
         46:07:60:80:a8:c5:40:38:56:de:95:bd:94:e7:75:b0:57:51:
         ce:6b:73:e6:d0:22:4b:1f:d2:b6:5e:e4:ad:d3:aa:c4:5d:a3:
         e6:7d:a7:d0:0a:2d:cf:ff:40:b7:8a:30:f7:be:61:06:4a:9a:
         7f:60:0a:b1:81:55:03:25:59:f0:ff:c6:4f:d7:12:75:45:ea:
         3b:d5:60:c5:11:fb:79:f4:25:c0:f8:44:49:f0:70:88:83:b8:
         80:aa:a9:75:d7:e4:65:21:e6:91:f0:1d:34:cd:a0:b7:8a:8b:
         bd:02:43:e6
-----BEGIN CERTIFICATE-----
MIIEujCCA6KgAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDZG
QTY2MjE5NEZDRjFFQjk4M0FCNDRDQzkxMzAwNDE4MDc3MEQxODAeFw0yNjAzMzEw
ODE3NTJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDkwNkNBRTQ4QUQzNjkz
M0Y3NEMwRjE1OUZGQzdCODMzQzU1MTNDQjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDE0AOmcdk9HR8p6zORlgNznIyPllKe2r9kwhgDEFjDEM6CIAn5
w4fUHH75IV+fE8++dfp/Fs0UamYnUXbR/DOBLTQJ0lv0tpC/dOyarLHGTOFojAmP
zzSHaLORYso5SefGxXPeUCZw4QL2L0KB+n7FuLlLncaFRpGbDX/wH1Svde3cJXuI
82Emnq31cVKRhkYNqWikuKikegVbvbzZko+yKEgMT3f3D0+9V9NAT3NXjOV3e7u1
tUGaPyjVa6C+jbbanMa/DhVpO5AswYY1MgK7nVdlQdG3muqhxWtXPSzCPNofFpc5
OO5EttWfEUyLPwlPPF9t7mMWRyBC5M6Ys+xZAgMBAAGjggHWMIIB0jAdBgNVHQ4E
FgQUkGyuSK02kz90wPFZ/8e4M8VRPLgwHwYDVR0jBBgwFoAUBvpmIZT88euYOrRM
yRMAQYB3DRgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzI5L0J2cG1JWlQ4OGV1WU9yUk15Uk1BUVlCM0RSZy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0J2cG1JWlQ4OGV1WU9yUk15Uk1BUVlC
M0RSZy5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF
BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC8yOS9rR3l1U0swMmt6OTB3UEZaXzhlNE04VlJQTGcucm9hMB4GCCsG
AQUFBwEHAQH/BA8wDTALBAIAATAFAwMA22YwDQYJKoZIhvcNAQELBQADggEBABR8
lmrvQrRuG5cXv8JAyQ0kJ4fLgo/H5V5EVIAeFJJkt5HFFdADf6WefSEvh6MsuexO
hJGDisaEiPHgs75VmRYY89FTXS+TlVEF/GD1l6pDFtsQg6JKC/4vdryRrf6vfIhZ
qem2CAJ0QzCogRAYkcNzh6bdiHkh9p5AYEEXM5KDpR9+vVUwYT5FK3QFU0rVZEYH
YICoxUA4Vt6VvZTndbBXUc5rc+bQIksf0rZe5K3TqsRdo+Z9p9AKLc//QLeKMPe+
YQZKmn9gCrGBVQMlWfD/xk/XEnVF6jvVYMUR+3n0JcD4REnwcIiDuICqqXXX5GUh
5pHwHTTNoLeKi70CQ+Y=
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:11:20 2026 by rpki-client