Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/br-29AWB_zXXo-i8bSZGqvQzOMw.roa
File:                     br-29AWB_zXXo-i8bSZGqvQzOMw.roa (raw, json)
Hash identifier:          /rwai59S+cglkep7mxJzaW/2pA9rRmZVEndyHMkPFdg=
Subject key identifier:   6E:BF:B6:F4:05:81:FF:35:D7:A3:E8:BC:6D:26:46:AA:F4:33:38:CC
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       01E5
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/br-29AWB_zXXo-i8bSZGqvQzOMw.roa
Signing time:             Tue 31 Mar 2026 07:39:54 +0000
ROA not before:           Tue 31 Mar 2026 07:39:54 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2527
IP address blocks:        202.223.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 485 (0x1e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Mar 31 07:39:54 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=6EBFB6F40581FF35D7A3E8BC6D2646AAF43338CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:df:06:47:bf:de:e6:9f:f2:76:39:3b:cb:a8:
                    a7:e2:00:c8:f8:26:05:33:2b:d1:d9:35:94:82:e1:
                    72:ce:44:aa:bd:f1:91:0f:79:67:f4:fd:74:b6:f6:
                    cd:aa:2c:8b:99:06:25:9f:74:09:fd:70:8f:e7:ab:
                    51:69:50:9d:06:49:c3:e3:9d:27:34:5a:17:b3:3e:
                    90:0d:2d:6d:04:99:00:b6:65:30:73:34:c6:d3:a2:
                    2d:35:54:45:40:b6:4e:13:3b:76:43:37:78:5e:e1:
                    54:07:b4:58:73:4c:7b:8f:31:11:07:50:48:7a:7c:
                    77:a8:70:50:2d:6f:16:0c:3b:41:89:86:7d:0c:2a:
                    eb:ad:4e:47:9e:61:43:bb:dd:ff:15:5b:53:24:d7:
                    6a:7a:f2:c5:94:fb:09:1b:5b:87:1b:83:2c:de:53:
                    1f:e0:66:2f:0d:02:d2:51:25:a3:4f:dc:aa:5e:10:
                    9a:49:64:85:da:cc:20:4b:ad:af:83:1f:f1:f0:03:
                    42:eb:2b:75:8f:de:40:83:f6:57:f2:6a:43:f2:ef:
                    a0:54:62:02:57:a1:de:93:85:5d:01:c4:e9:c0:0a:
                    1c:3c:27:d9:f1:2c:d4:42:04:bf:62:24:01:01:15:
                    2d:e3:17:43:f1:90:03:14:1a:fd:c2:9b:0f:96:10:
                    11:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:BF:B6:F4:05:81:FF:35:D7:A3:E8:BC:6D:26:46:AA:F4:33:38:CC
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/br-29AWB_zXXo-i8bSZGqvQzOMw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.223.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         26:0e:1c:b4:35:68:8e:a0:ad:a4:4b:c2:71:03:42:85:e0:cc:
         ac:5b:58:b8:b4:26:86:c4:e0:f8:79:71:ac:b6:96:39:68:3e:
         3f:d3:b9:81:ab:1c:84:77:dd:a9:2e:91:5f:02:aa:2b:88:1f:
         44:42:21:3b:c3:ab:58:9a:0c:92:99:0c:98:87:8d:46:aa:c2:
         73:f5:04:65:69:a8:44:8d:72:92:24:66:2c:7d:e4:dc:f4:82:
         b1:62:fe:d2:4f:1b:6b:9f:2f:7c:7d:d5:84:8d:50:62:71:a8:
         16:9d:f6:f1:57:3c:8b:e3:56:26:13:0b:31:e9:2b:da:0e:65:
         59:94:94:e2:a1:f9:9f:e2:50:0a:5b:d6:70:e2:d8:0e:0a:34:
         1b:12:aa:23:d5:a2:3c:4d:5a:55:26:05:7c:7e:7f:09:74:d1:
         fc:4d:0c:90:c7:cb:d6:7a:4c:76:db:52:40:88:36:f8:f1:29:
         c6:ae:f5:7a:f4:da:55:a5:de:5c:15:03:64:56:80:70:a6:a7:
         9c:6f:d2:46:1e:a9:9d:10:2c:71:f0:3c:91:b9:a1:c7:1c:a9:
         f4:21:84:95:da:85:32:8d:73:b2:97:7c:08:62:e2:c0:3a:33:
         17:37:25:61:b4:13:fa:1b:c5:1f:48:9d:a5:96:ea:29:44:2e:
         e5:87:05:81
-----BEGIN CERTIFICATE-----
MIIEuzCCA6OgAwIBAgICAeUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDk1
QTE4MkZBMThENDU4MjMzMjg0QUE4REM4OEJEMDc1RTVENzAyRDAeFw0yNjAzMzEw
NzM5NTRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDZFQkZCNkY0MDU4MUZG
MzVEN0EzRThCQzZEMjY0NkFBRjQzMzM4Q0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDC3wZHv97mn/J2OTvLqKfiAMj4JgUzK9HZNZSC4XLORKq98ZEP
eWf0/XS29s2qLIuZBiWfdAn9cI/nq1FpUJ0GScPjnSc0WhezPpANLW0EmQC2ZTBz
NMbToi01VEVAtk4TO3ZDN3he4VQHtFhzTHuPMREHUEh6fHeocFAtbxYMO0GJhn0M
KuutTkeeYUO73f8VW1Mk12p68sWU+wkbW4cbgyzeUx/gZi8NAtJRJaNP3KpeEJpJ
ZIXazCBLra+DH/HwA0LrK3WP3kCD9lfyakPy76BUYgJXod6ThV0BxOnAChw8J9nx
LNRCBL9iJAEBFS3jF0PxkAMUGv3Cmw+WEBGHAgMBAAGjggHXMIIB0zAdBgNVHQ4E
FgQUbr+29AWB/zXXo+i8bSZGqvQzOMwwHwYDVR0jBBgwFoAUCVoYL6GNRYIzKEqo
3Ii9B15dcC0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQzL0NWb1lMNkdOUllJektFcW8zSWk5QjE1ZGNDMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NWb1lMNkdOUllJektFcW8zSWk5QjE1
ZGNDMC5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF
BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC80My9ici0yOUFXQl96WFhvLWk4YlNaR3F2UXpPTXcucm9hMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGyt9AMA0GCSqGSIb3DQEBCwUAA4IBAQAm
Dhy0NWiOoK2kS8JxA0KF4MysW1i4tCaGxOD4eXGstpY5aD4/07mBqxyEd92pLpFf
AqoriB9EQiE7w6tYmgySmQyYh41GqsJz9QRlaahEjXKSJGYsfeTc9IKxYv7STxtr
ny98fdWEjVBicagWnfbxVzyL41YmEwsx6SvaDmVZlJTiofmf4lAKW9Zw4tgOCjQb
Eqoj1aI8TVpVJgV8fn8JdNH8TQyQx8vWekx221JAiDb48SnGrvV69NpVpd5cFQNk
VoBwpqecb9JGHqmdECxx8DyRuaHHHKn0IYSV2oUyjXOyl3wIYuLAOjMXNyVhtBP6
G8UfSJ2lluopRC7lhwWB
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:51:12 2026 by rpki-client