Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20266/wWPL57uUPmGkPs_FunJRV4LwtAk.roa
File:                     wWPL57uUPmGkPs_FunJRV4LwtAk.roa (raw, json)
Hash identifier:          SByeA9WG9SOaUcDlpy0bU4roH+SzKqh2/TzDXO2cXg0=
Subject key identifier:   C1:63:CB:E7:BB:94:3E:61:A4:3E:CF:C5:BA:72:51:57:82:F0:B4:09
Certificate issuer:       /CN=40DACCE2006CE7A6A8C76B5320A0E189845D1560
Certificate serial:       20
Authority key identifier: 40:DA:CC:E2:00:6C:E7:A6:A8:C7:6B:53:20:A0:E1:89:84:5D:15:60
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNrM4gBs56aox2tTIKDhiYRdFWA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20266/wWPL57uUPmGkPs_FunJRV4LwtAk.roa
Signing time:             Tue 31 Mar 2026 08:43:27 +0000
ROA not before:           Tue 31 Mar 2026 08:43:27 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     55395
IP address blocks:        160.25.134.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20266/QNrM4gBs56aox2tTIKDhiYRdFWA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20266/QNrM4gBs56aox2tTIKDhiYRdFWA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNrM4gBs56aox2tTIKDhiYRdFWA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40DACCE2006CE7A6A8C76B5320A0E189845D1560
        Validity
            Not Before: Mar 31 08:43:27 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C163CBE7BB943E61A43ECFC5BA72515782F0B409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e2:d5:ae:f1:59:1d:f6:ab:59:75:83:a4:c7:
                    da:2f:00:ae:50:83:7f:1b:05:f8:49:2e:a9:de:3b:
                    78:e9:05:f1:a5:bc:4f:ff:b6:4d:72:e4:22:3d:a9:
                    7c:04:b2:ff:98:0b:1b:13:4a:29:83:51:04:2b:0f:
                    2a:9f:8d:2e:e5:32:c5:d2:e0:93:86:9c:5d:97:0f:
                    1d:7d:65:23:3a:76:60:43:b0:4a:ed:c2:48:1f:bd:
                    32:2d:22:da:50:47:a3:09:67:30:e9:cd:30:e9:bd:
                    59:2a:b1:19:09:ee:ca:45:89:c8:0d:03:8d:d8:97:
                    ae:28:40:3a:46:6d:ea:6c:0f:23:57:d3:fd:fc:af:
                    87:96:4c:00:cf:35:0c:0e:fe:a1:59:83:45:a0:11:
                    73:1e:c2:04:66:f2:14:91:c4:96:63:92:a2:00:72:
                    85:2d:6a:1e:21:69:ec:e0:b6:70:79:16:6b:1f:4f:
                    d6:c7:9c:74:3e:28:c7:bb:78:21:06:60:4e:ed:66:
                    c1:d5:f6:b2:e8:d7:a3:f5:06:f9:7f:95:d0:e1:24:
                    f8:8c:5c:9c:b3:4f:c8:93:74:f4:d6:d5:e8:20:19:
                    d0:ff:82:5a:16:aa:e9:2c:36:da:74:a9:d2:69:7e:
                    0d:9b:21:9a:38:ff:80:50:58:cf:3b:7b:ce:9e:0a:
                    b0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:63:CB:E7:BB:94:3E:61:A4:3E:CF:C5:BA:72:51:57:82:F0:B4:09
            X509v3 Authority Key Identifier:
                keyid:40:DA:CC:E2:00:6C:E7:A6:A8:C7:6B:53:20:A0:E1:89:84:5D:15:60

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20266/QNrM4gBs56aox2tTIKDhiYRdFWA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNrM4gBs56aox2tTIKDhiYRdFWA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20266/wWPL57uUPmGkPs_FunJRV4LwtAk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         be:a8:9e:e1:cb:81:e2:4a:69:84:a4:57:4e:f9:58:6f:3c:18:
         b0:8e:29:2c:75:88:0c:de:2f:64:09:63:52:79:37:bc:cd:8b:
         6c:2c:45:ca:c3:ed:c9:a9:ad:33:43:e9:09:62:c0:20:70:c0:
         2e:74:5d:c7:14:26:e8:7c:21:20:a3:79:ef:ee:0c:05:8d:83:
         6f:eb:10:1f:d4:e4:13:9e:2f:dd:ea:9b:09:7a:38:e5:cd:ef:
         35:f9:53:86:d8:e3:56:75:2d:fc:f5:98:ff:a4:89:4e:6d:ef:
         47:d9:f8:4f:99:72:cb:2a:6d:fc:30:d6:f7:74:50:0b:73:81:
         bb:dc:7d:45:43:a6:1c:c0:3f:dd:66:aa:84:32:3a:b6:ec:7b:
         c2:b8:2d:0a:4c:3e:f5:97:4f:6e:27:cd:4b:a4:95:e5:ac:f4:
         72:27:2b:8e:70:b6:f9:67:39:b8:43:90:a1:dc:bf:0b:84:d2:
         7c:8b:32:31:65:29:ec:5e:7a:65:62:c3:b0:7f:67:86:f0:6a:
         2e:73:8f:61:41:df:8e:32:2b:9a:e8:10:7b:7d:09:fa:b8:4c:
         16:6f:09:09:5a:6d:de:a8:ac:25:69:70:c4:f4:a3:2a:fc:17:
         a4:c8:6d:45:af:15:f2:a7:65:0d:6e:ee:5b:3c:63:06:23:06:
         3c:f5:f2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:54:09 2026 by rpki-client