Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2490/_DUAxEKheHjDzurxrIO8TMCuOJ4.roa
File:                     _DUAxEKheHjDzurxrIO8TMCuOJ4.roa (raw, json)
Hash identifier:          ADjKB4HvbG78CzuUPNYE3ikMOvoia9Lfbx9SSEkpS0A=
Subject key identifier:   FC:35:00:C4:42:A1:78:78:C3:CE:EA:F1:AC:83:BC:4C:C0:AE:38:9E
Certificate issuer:       /CN=B8E53C5244B7F9A76D5F9DF9FBAF61E57B2EA93B
Certificate serial:       79
Authority key identifier: B8:E5:3C:52:44:B7:F9:A7:6D:5F:9D:F9:FB:AF:61:E5:7B:2E:A9:3B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uOU8UkS3-adtX535-69h5XsuqTs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/_DUAxEKheHjDzurxrIO8TMCuOJ4.roa
Signing time:             Tue 31 Mar 2026 07:29:14 +0000
ROA not before:           Tue 31 Mar 2026 07:29:14 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7687
IP address blocks:        160.246.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uOU8UkS3-adtX535-69h5XsuqTs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121 (0x79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8E53C5244B7F9A76D5F9DF9FBAF61E57B2EA93B
        Validity
            Not Before: Mar 31 07:29:14 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=FC3500C442A17878C3CEEAF1AC83BC4CC0AE389E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d8:00:d6:02:4d:41:b8:fc:b9:21:5c:68:a5:
                    1c:1a:bd:57:1e:f6:6b:20:7c:6c:8f:60:e3:b0:7f:
                    dd:01:c9:70:c4:f9:42:05:53:ac:eb:43:af:0f:2a:
                    33:77:0f:e2:cc:8f:7c:12:25:a9:a0:b3:3d:bd:e4:
                    e7:6a:0b:f0:16:50:d5:6a:14:46:7e:86:4c:ce:6a:
                    c2:f4:34:48:a5:fb:16:73:17:d2:dc:3b:eb:96:77:
                    c1:dd:2d:e8:5e:ba:3b:5b:2f:55:8b:ea:7d:78:9b:
                    91:a7:9f:23:5c:ba:2e:4b:17:99:51:51:a4:ab:d8:
                    1b:ee:61:1d:74:1b:88:03:90:45:80:7c:af:81:b9:
                    ae:61:b3:8c:16:a9:ae:08:30:6a:06:35:12:b4:df:
                    e6:d5:93:45:be:c7:fe:52:cb:53:83:31:33:3d:78:
                    93:62:24:6b:0f:94:3d:b5:e9:ce:c7:69:3f:6a:0b:
                    e9:b5:03:63:ee:08:86:ca:93:40:ba:06:73:42:26:
                    5d:33:59:4e:12:7b:55:c4:0f:bd:5e:14:27:03:07:
                    1f:c7:44:04:e9:2c:38:6a:65:1a:53:4a:01:14:9a:
                    cc:41:f0:a3:4a:b2:bd:95:5e:c9:19:61:64:51:24:
                    2b:37:83:94:53:05:6f:be:85:76:f3:b8:c6:24:97:
                    26:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:35:00:C4:42:A1:78:78:C3:CE:EA:F1:AC:83:BC:4C:C0:AE:38:9E
            X509v3 Authority Key Identifier:
                keyid:B8:E5:3C:52:44:B7:F9:A7:6D:5F:9D:F9:FB:AF:61:E5:7B:2E:A9:3B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uOU8UkS3-adtX535-69h5XsuqTs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/_DUAxEKheHjDzurxrIO8TMCuOJ4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.246.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3a:9b:ce:51:31:34:96:aa:5c:08:2d:f4:2b:67:63:9b:14:47:
         bb:06:3f:5f:a6:00:ba:2f:34:d8:9d:44:b2:c3:e8:ed:80:40:
         c9:f3:c6:67:5b:ca:9b:2c:69:7a:42:bf:79:1f:ec:c1:94:45:
         88:45:5c:81:1d:ce:b8:a2:fe:16:df:c5:46:31:3a:63:41:63:
         bd:5e:d4:ef:02:1b:10:85:38:f1:08:a7:61:af:69:b2:c8:e6:
         18:d1:17:1d:37:f1:5a:dc:4f:5f:c2:ab:42:39:37:04:0c:6d:
         23:fb:03:19:9d:ce:5d:6c:b2:16:3f:68:c4:dc:ce:ac:07:d5:
         b6:68:2e:08:ae:a3:2e:7d:19:0c:ad:ae:aa:05:0b:c0:f3:87:
         a2:9d:9c:c6:3a:5a:39:dd:ac:21:02:e9:25:9f:58:1e:48:ca:
         71:52:a5:50:15:5b:6f:bf:45:76:36:94:24:5e:b9:46:9d:10:
         9b:39:21:aa:d0:65:26:b8:78:1a:77:e4:ee:ff:0e:b3:ff:b6:
         7f:f8:e9:e3:c8:99:04:b6:56:c8:ef:af:2a:8e:82:d5:76:c0:
         3b:7c:23:05:d2:84:c9:0e:dc:31:78:11:fd:c0:71:33:20:26:
         df:f6:c4:39:65:f4:6f:71:d5:ba:a1:f2:37:76:a8:f5:1a:2f:
         a5:ed:7e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:38:27 2026 by rpki-client