Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/vqM5t2dS4o0t54f53Dn2zFK2Ub8.roa
File:                     vqM5t2dS4o0t54f53Dn2zFK2Ub8.roa (raw, json)
Hash identifier:          o/cdEWvazBbdQv8jCK4/gl35xRhcoPqNE2Ucq9/jZDg=
Subject key identifier:   BE:A3:39:B7:67:52:E2:8D:2D:E7:87:F9:DC:39:F6:CC:52:B6:51:BF
Certificate issuer:       /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial:       AB
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/vqM5t2dS4o0t54f53Dn2zFK2Ub8.roa
Signing time:             Tue 31 Mar 2026 08:17:36 +0000
ROA not before:           Tue 31 Mar 2026 08:17:36 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2514
IP address blocks:        116.80.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171 (0xab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
        Validity
            Not Before: Mar 31 08:17:36 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=BEA339B76752E28D2DE787F9DC39F6CC52B651BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6b:b8:a3:4e:15:c6:1a:4a:ab:ed:f6:22:6f:
                    61:b3:68:4e:e7:28:08:97:d6:d5:fd:8b:39:a8:5b:
                    b2:d3:4b:eb:12:62:84:2f:b3:cf:6e:a7:2b:10:e4:
                    70:be:2e:87:55:75:d8:cc:94:87:88:9c:5b:bd:a5:
                    77:fd:79:95:d4:a5:8a:14:56:f6:5f:fd:01:a2:84:
                    d2:b3:5d:e1:14:69:9b:48:70:1d:e3:a2:f6:f9:68:
                    53:f8:0a:98:83:51:1b:b1:4d:9f:46:57:66:31:64:
                    6d:3e:b8:41:83:0d:55:81:17:8b:79:5c:d0:78:23:
                    5e:ad:fc:d4:c7:22:f5:36:78:bb:08:7c:2f:21:b8:
                    7f:a4:2c:82:c2:65:d1:6e:51:f9:12:20:76:55:a1:
                    7d:de:45:ee:95:d4:46:05:ec:84:37:1e:3a:82:6b:
                    eb:e4:b1:e1:0a:b4:f5:14:53:56:25:9f:d5:3f:c5:
                    e7:9a:d5:f5:18:32:b1:e7:7e:b0:37:58:a8:f1:c3:
                    15:c9:02:92:d3:99:a9:f0:02:89:57:57:94:61:a7:
                    02:0e:e1:71:07:a2:ba:f8:21:ed:98:b5:4a:5e:6d:
                    81:51:cf:1b:32:ca:d8:61:7e:39:ab:bb:20:58:43:
                    e6:e7:5c:5f:16:ce:0e:b4:21:11:68:9e:ac:d2:8e:
                    17:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:A3:39:B7:67:52:E2:8D:2D:E7:87:F9:DC:39:F6:CC:52:B6:51:BF
            X509v3 Authority Key Identifier:
                keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/vqM5t2dS4o0t54f53Dn2zFK2Ub8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.80.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         50:92:37:bc:b8:a3:fc:29:22:9f:f6:aa:cc:45:38:20:ea:8b:
         32:56:93:05:0b:5c:c6:71:78:03:e6:d3:67:5a:ee:01:f0:59:
         b6:e3:d6:3d:32:3d:02:26:bd:3a:6c:4f:82:a0:5e:02:f9:8d:
         c0:ff:e1:72:9e:bc:4a:78:28:be:fe:ad:f4:61:01:4c:1a:fe:
         33:63:39:b5:34:ec:87:a6:5e:3a:58:b6:2f:a4:8a:06:ff:15:
         0e:87:f5:7b:76:5a:d7:68:36:45:fe:9d:77:c6:08:c5:e8:69:
         6a:c9:c0:4b:c9:c4:f2:2b:86:2a:9b:c1:69:fd:f7:3e:4a:70:
         98:82:fe:fb:aa:17:0d:74:f4:67:5d:23:3f:a7:d5:66:48:5c:
         5e:7a:3e:e2:4f:be:88:8e:16:46:63:92:f3:04:ea:4a:80:47:
         26:50:5f:ee:a9:a7:e9:23:42:5f:78:63:85:68:19:5a:1e:f4:
         09:92:1d:e5:2f:8a:01:fb:79:7d:c1:7d:1e:25:da:4d:b5:81:
         46:1b:fe:bf:a8:81:e6:38:05:8f:8f:70:e0:96:d0:00:8a:09:
         d6:a8:d9:49:50:b9:d0:b8:89:4b:9d:37:cd:f7:64:dd:34:5b:
         2e:6c:b2:b4:84:d3:0f:88:c3:1c:26:56:cd:9b:de:35:0d:11:
         03:a3:4a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:15 2026 by rpki-client