Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/462/K_N29B009wRFLm1iwsByoYbwP7A.roa
File:                     K_N29B009wRFLm1iwsByoYbwP7A.roa (raw, json)
Hash identifier:          9xf2iiiH8dldteixMcwJLWtiQjLtLn2MJhX+RaD5g1U=
Subject key identifier:   2B:F3:76:F4:1D:34:F7:04:45:2E:6D:62:C2:C0:72:A1:86:F0:3F:B0
Certificate issuer:       /CN=43917B23074524E9E6EA8E40FA4A0672C9620318
Certificate serial:       94
Authority key identifier: 43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/K_N29B009wRFLm1iwsByoYbwP7A.roa
Signing time:             Tue 31 Mar 2026 07:47:25 +0000
ROA not before:           Tue 31 Mar 2026 07:47:25 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10019
IP address blocks:        175.28.16.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 148 (0x94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43917B23074524E9E6EA8E40FA4A0672C9620318
        Validity
            Not Before: Mar 31 07:47:25 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=2BF376F41D34F704452E6D62C2C072A186F03FB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b3:4f:1c:16:83:12:05:c3:dd:51:3e:9b:80:
                    84:bc:0a:61:6d:d0:fa:de:6c:57:7d:01:0b:65:0a:
                    0c:b2:be:e1:91:21:ea:fe:97:a0:bf:fe:4f:3b:b1:
                    27:f7:c0:78:f4:49:40:a0:3a:b1:18:4a:73:e2:c7:
                    3e:b5:95:66:50:76:ab:f5:02:ca:1c:ac:65:33:21:
                    cd:6a:ac:ff:65:5c:a7:ed:bc:66:5d:b9:57:ac:3d:
                    15:a8:15:cc:f9:01:89:b5:74:36:8a:2c:55:37:50:
                    18:29:46:ef:e2:48:11:35:28:01:47:59:e9:9a:db:
                    31:64:f2:ba:31:d2:2d:7b:ab:db:01:7c:4a:50:cf:
                    13:b1:34:85:6f:66:e7:c8:2b:b7:26:1f:51:1b:2e:
                    e5:83:21:a3:42:a2:fb:0b:2b:d6:ce:e5:7d:93:54:
                    2b:96:a8:87:f5:44:a9:2e:72:aa:3b:fe:8a:09:39:
                    80:88:df:81:b7:7d:c5:2e:b5:3d:30:45:87:06:90:
                    62:2f:52:f6:69:0b:36:c8:09:1b:15:b4:4b:0f:a0:
                    09:b7:da:c3:47:5c:a4:66:f0:78:2b:af:79:dd:c6:
                    34:80:32:00:aa:07:41:d1:42:75:8d:60:0c:83:e1:
                    f6:04:36:ea:ca:88:73:97:55:71:e7:c8:91:dd:67:
                    63:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:F3:76:F4:1D:34:F7:04:45:2E:6D:62:C2:C0:72:A1:86:F0:3F:B0
            X509v3 Authority Key Identifier:
                keyid:43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/K_N29B009wRFLm1iwsByoYbwP7A.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.28.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2a:f6:7c:00:76:15:51:80:dd:fd:cb:20:87:3f:a1:8d:f6:0b:
         9c:9f:b7:80:20:58:d0:8d:cd:57:0f:c7:d6:6a:c6:8a:7e:82:
         48:03:2f:e1:74:0e:66:9a:e3:4d:7a:e0:f7:03:c4:04:33:cf:
         0b:7d:bf:a6:b6:8e:12:d9:5c:4f:e2:c5:11:14:18:1d:8e:5d:
         3f:7f:3a:b7:c9:ac:69:81:b7:67:d2:55:db:3e:ce:d7:84:3e:
         c5:66:26:8f:ab:bb:f5:0f:2f:1d:15:03:d2:2b:e0:7e:4f:20:
         c0:9e:a4:42:8d:0a:9b:49:de:cf:07:61:1f:11:cd:63:98:53:
         d5:b1:e5:9a:5e:e6:5b:43:9b:bc:7f:55:df:d5:da:c6:25:bc:
         9e:2d:60:c8:f5:fa:9a:08:b9:59:0e:d4:fd:29:b0:c3:af:48:
         13:3c:d5:e9:db:6a:a3:22:16:0a:e8:c8:de:71:6d:97:cc:85:
         ca:1c:73:ac:b4:49:6b:cd:b0:45:11:41:91:df:2e:38:47:52:
         71:06:9d:6b:60:de:76:44:57:f8:b8:cf:65:58:43:8e:7e:2e:
         5b:17:65:ef:c2:58:c8:04:5b:d0:59:a8:30:e1:fd:bb:af:c4:
         64:ae:ee:0f:c0:bd:fe:bb:5d:92:54:a2:7d:5e:f6:6e:09:37:
         9d:55:4d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:35:07 2026 by rpki-client