Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2490/D8umusVxgIU3dt025Rzv1ROZug0.roa
File:                     D8umusVxgIU3dt025Rzv1ROZug0.roa (raw, json)
Hash identifier:          q4d0U3Qrdz9EU1to95xm7FDvr7KceQnvtxDoGmnPDXE=
Subject key identifier:   0F:CB:A6:BA:C5:71:80:85:37:76:DD:36:E5:1C:EF:D5:13:99:BA:0D
Certificate issuer:       /CN=B8E53C5244B7F9A76D5F9DF9FBAF61E57B2EA93B
Certificate serial:       72
Authority key identifier: B8:E5:3C:52:44:B7:F9:A7:6D:5F:9D:F9:FB:AF:61:E5:7B:2E:A9:3B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uOU8UkS3-adtX535-69h5XsuqTs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/D8umusVxgIU3dt025Rzv1ROZug0.roa
Signing time:             Sun 01 Mar 2026 01:31:01 +0000
ROA not before:           Sun 01 Mar 2026 01:31:01 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     7687
IP address blocks:        160.246.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uOU8UkS3-adtX535-69h5XsuqTs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:22:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114 (0x72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8E53C5244B7F9A76D5F9DF9FBAF61E57B2EA93B
        Validity
            Not Before: Mar  1 01:31:01 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=0FCBA6BAC57180853776DD36E51CEFD51399BA0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fe:27:20:f6:51:5f:4a:4f:83:65:21:f9:39:
                    13:37:37:6f:76:9c:39:c2:df:2e:78:3d:af:80:23:
                    f0:e2:b4:f1:b9:64:ef:2c:59:92:b7:95:28:06:3b:
                    d6:90:24:5c:ef:f4:2e:d7:be:05:a7:73:17:ac:b5:
                    ce:e6:79:bd:54:3b:e5:91:91:1f:64:00:27:ab:7c:
                    88:99:f4:1f:4f:22:5d:4f:d0:ab:70:d6:17:b9:bf:
                    b9:46:a9:9d:36:b7:43:4d:e7:6e:f7:10:92:fd:12:
                    a8:a3:34:a2:5b:57:14:e4:bc:18:85:fa:82:3e:a5:
                    2c:2e:56:6c:fd:e1:e1:7c:8f:89:ae:83:af:89:ac:
                    d6:d4:23:25:2c:4c:af:da:0a:95:91:3f:9c:e2:ca:
                    6c:e7:aa:5f:28:5f:c9:ce:59:f3:06:de:b5:0f:4f:
                    67:5a:37:44:6c:03:d1:05:26:53:0d:38:75:01:32:
                    61:b4:48:a1:cd:bc:a7:a6:b9:73:0f:d2:e8:55:78:
                    85:e1:3f:d6:fb:55:f5:a8:78:1c:4b:4d:ef:94:da:
                    4c:14:0e:9e:4b:07:c5:39:1b:64:13:fd:9a:b6:e6:
                    c2:54:56:68:4e:7d:1c:af:3d:7c:2d:6c:9b:ff:77:
                    cd:0a:18:15:93:84:72:ba:af:fa:21:f6:48:99:16:
                    fb:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:CB:A6:BA:C5:71:80:85:37:76:DD:36:E5:1C:EF:D5:13:99:BA:0D
            X509v3 Authority Key Identifier:
                keyid:B8:E5:3C:52:44:B7:F9:A7:6D:5F:9D:F9:FB:AF:61:E5:7B:2E:A9:3B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uOU8UkS3-adtX535-69h5XsuqTs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/D8umusVxgIU3dt025Rzv1ROZug0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.246.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         6a:b4:6e:43:02:60:8d:60:70:63:30:56:c2:97:76:94:06:7b:
         42:db:b4:d3:54:43:d3:bc:31:5e:7d:95:cb:d3:87:56:f3:eb:
         8a:33:92:d8:6c:5a:21:ab:17:bd:aa:b0:43:c0:81:fe:8e:17:
         09:52:76:84:f5:f4:d0:f0:69:a1:b0:16:84:6f:ca:bd:27:21:
         f4:e9:4a:1e:b6:77:7a:bc:2f:c9:69:2b:00:2e:1c:72:9a:2f:
         44:9d:87:cd:08:5d:7e:60:1a:51:f2:24:bd:27:04:e9:ab:1a:
         d6:40:b1:5e:5c:b1:cd:be:47:da:2a:bf:8f:45:f5:e2:4f:57:
         dd:47:c2:94:fb:70:92:fc:71:1b:ec:37:c1:30:80:4e:30:63:
         f5:8b:6a:12:7f:c7:ce:ec:3d:93:01:18:39:05:7c:9a:2a:a7:
         6c:a5:c1:01:c4:77:af:a1:a2:73:fd:3e:89:c6:4d:c3:20:ec:
         eb:bf:45:48:6e:1f:a8:8b:10:a4:53:61:b1:28:4c:31:87:e6:
         c9:c1:d6:23:b1:d3:cf:1e:9f:28:a5:6e:84:e1:0d:ac:73:56:
         48:29:cb:5c:72:38:39:0f:23:22:1d:04:9d:4b:04:ab:ec:a6:
         d1:b6:8a:56:00:36:4d:56:de:a5:34:c3:16:48:5a:24:88:b5:
         7b:fd:75:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:02:31 2026 by rpki-client