Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/prQ5xXk0j9oSTIKIifzBrwOWPIg.roa
File:                     prQ5xXk0j9oSTIKIifzBrwOWPIg.roa (raw, json)
Hash identifier:          /iu2irf9SDNake7FN3ILaAFyoFnQoo9vGTbJesA8O7o=
Subject key identifier:   A6:B4:39:C5:79:34:8F:DA:12:4C:82:88:89:FC:C1:AF:03:96:3C:88
Certificate issuer:       /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial:       CB
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/prQ5xXk0j9oSTIKIifzBrwOWPIg.roa
Signing time:             Tue 31 Mar 2026 08:17:52 +0000
ROA not before:           Tue 31 Mar 2026 08:17:52 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2514
IP address blocks:        210.153.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 203 (0xcb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
        Validity
            Not Before: Mar 31 08:17:52 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A6B439C579348FDA124C828889FCC1AF03963C88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2a:f3:12:80:66:be:37:06:62:da:d4:f8:17:
                    15:e7:40:84:bc:f9:d5:59:ef:fe:48:84:bf:fe:ec:
                    38:30:0d:0b:f0:5c:0b:c5:7b:a7:29:a2:62:8a:d4:
                    a5:23:91:c0:f1:4a:d3:fa:a4:c8:52:aa:f5:b7:a0:
                    43:25:f5:47:ae:67:51:94:b4:76:44:30:8d:07:17:
                    9e:3e:f5:fa:58:e9:d6:2d:66:23:cf:92:75:27:da:
                    83:7d:5c:4d:0d:08:87:1c:af:15:58:6e:8c:bb:fd:
                    d8:c0:e6:8d:73:35:52:f0:a9:ce:08:8f:ad:0f:5e:
                    72:e5:cf:3b:89:46:6c:01:fd:fc:5a:29:41:5f:24:
                    90:26:2d:ed:b9:c7:65:08:66:bf:02:45:f7:45:ea:
                    35:05:7f:95:b5:5d:58:81:30:a2:c6:bc:8d:71:b5:
                    0b:bd:03:b7:eb:67:4f:5d:13:40:86:ce:20:a2:cd:
                    05:1e:24:96:ac:0f:c4:e9:c0:6b:7b:80:4c:cb:9b:
                    62:37:4c:23:a1:8c:59:5b:10:fd:3d:44:ef:dd:34:
                    4e:fc:cb:3a:96:22:a5:c4:52:2c:58:28:7a:98:ff:
                    2f:d0:76:59:2a:6a:ca:57:05:22:14:0d:fc:c2:b3:
                    7f:36:47:6f:2c:42:c4:37:51:a3:75:e5:e2:79:c0:
                    6a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:B4:39:C5:79:34:8F:DA:12:4C:82:88:89:FC:C1:AF:03:96:3C:88
            X509v3 Authority Key Identifier:
                keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/prQ5xXk0j9oSTIKIifzBrwOWPIg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.153.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         55:d4:75:17:da:23:a4:db:d8:4b:fc:0f:20:de:5e:56:d3:f8:
         19:06:67:77:6c:e1:11:89:51:63:79:4b:91:e2:c8:93:92:51:
         c3:f6:a6:c2:ee:be:cb:64:a2:d4:ab:fa:d0:09:ed:bb:f3:b4:
         73:4e:0a:f2:6b:2a:cb:dc:65:7a:19:78:89:1e:a1:17:9d:7d:
         b3:8b:7b:fe:a1:96:12:7f:e6:97:74:74:4d:14:97:c4:70:1c:
         82:4c:a8:46:ae:26:2d:85:98:0d:94:2c:6b:95:44:25:ac:38:
         b5:09:0d:59:dc:9a:28:50:e8:e8:47:b4:09:81:ee:95:47:da:
         ba:55:8a:0e:f7:5d:d7:ce:d6:46:1b:e7:d6:17:d6:09:dd:67:
         1e:69:a9:9e:46:f1:61:22:1f:5c:8b:39:f2:af:0e:61:1c:6a:
         59:b3:5b:62:74:24:2e:4d:50:4f:7f:c3:4a:9e:55:d8:bb:90:
         79:fe:37:3a:3d:50:71:0a:99:fc:70:36:60:90:74:f8:4b:37:
         5a:1b:42:35:3a:28:fa:0b:62:ec:02:9d:76:a5:78:9c:c8:d8:
         bc:4f:f7:32:fd:0c:a2:86:66:c3:11:cd:31:57:e7:a6:98:02:
         b9:da:cd:4f:c8:28:58:94:31:9e:59:c2:1b:cb:07:5e:39:6c:
         11:6a:ce:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:53 2026 by rpki-client