Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2490/rSqQRUFxo3-OUk8x2uJW-67BbEU.roa
File:                     rSqQRUFxo3-OUk8x2uJW-67BbEU.roa (raw, json)
Hash identifier:          DD32DwCICKYFhZA6iSmhhGnI4v7wd1P/tROnD1hEHPk=
Subject key identifier:   AD:2A:90:45:41:71:A3:7F:8E:52:4F:31:DA:E2:56:FB:AE:C1:6C:45
Certificate issuer:       /CN=B8E53C5244B7F9A76D5F9DF9FBAF61E57B2EA93B
Certificate serial:       7E
Authority key identifier: B8:E5:3C:52:44:B7:F9:A7:6D:5F:9D:F9:FB:AF:61:E5:7B:2E:A9:3B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uOU8UkS3-adtX535-69h5XsuqTs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/rSqQRUFxo3-OUk8x2uJW-67BbEU.roa
Signing time:             Tue 31 Mar 2026 07:29:16 +0000
ROA not before:           Tue 31 Mar 2026 07:29:16 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     7687
IP address blocks:        160.246.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uOU8UkS3-adtX535-69h5XsuqTs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8E53C5244B7F9A76D5F9DF9FBAF61E57B2EA93B
        Validity
            Not Before: Mar 31 07:29:16 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=AD2A90454171A37F8E524F31DAE256FBAEC16C45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7f:24:d6:5c:ff:76:c9:f1:04:91:8b:9a:1a:
                    6c:5f:bb:2b:2c:d6:9b:03:8e:35:b5:ec:e6:fe:a9:
                    23:96:75:84:d6:7d:5e:e5:dc:f2:c0:99:c9:7f:b9:
                    07:8b:61:45:92:4e:7a:3e:6c:5a:e7:e7:dc:14:b0:
                    6f:3b:b5:52:b3:17:8e:e6:94:d5:08:e2:02:45:2e:
                    cd:75:5d:f3:9e:2b:f3:a6:76:0d:c7:73:f7:cc:dd:
                    de:cc:25:b7:0c:33:4c:74:33:40:7e:6f:63:43:7d:
                    69:9f:3a:a2:72:29:31:70:84:a7:6e:9d:74:a2:f3:
                    74:74:8b:72:94:ef:2b:89:f4:b1:fc:8c:29:e8:27:
                    52:7c:81:c6:9b:15:74:d7:ef:ce:6b:e7:16:33:0c:
                    fa:ec:42:a3:fb:dc:69:80:c3:f8:3b:4e:52:73:23:
                    e3:c1:b3:df:6c:c2:4d:ff:61:15:d3:d0:9f:3c:9f:
                    65:d8:27:84:d2:99:35:a3:95:9a:53:3c:f4:85:bd:
                    d5:fa:91:67:0d:3d:4e:b2:51:5d:63:66:6b:ff:1f:
                    0f:81:c1:25:f4:03:45:33:0e:e2:86:e8:50:34:68:
                    31:be:8b:03:34:5d:06:e0:eb:3d:16:5e:ca:82:f4:
                    70:c2:23:f1:2c:41:da:f4:2f:5e:d9:2c:0e:3a:c9:
                    e8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:2A:90:45:41:71:A3:7F:8E:52:4F:31:DA:E2:56:FB:AE:C1:6C:45
            X509v3 Authority Key Identifier:
                keyid:B8:E5:3C:52:44:B7:F9:A7:6D:5F:9D:F9:FB:AF:61:E5:7B:2E:A9:3B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uOU8UkS3-adtX535-69h5XsuqTs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/rSqQRUFxo3-OUk8x2uJW-67BbEU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.246.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         74:62:1d:78:41:76:74:a0:e6:f9:0f:66:70:e2:0f:97:d2:77:
         31:2d:03:e0:cb:85:19:bd:d5:a0:5b:ee:7a:30:e7:0d:17:72:
         de:db:fa:7b:39:40:d3:d6:57:bc:e2:a7:a2:ee:52:55:7b:8a:
         87:18:9d:0d:ee:cd:97:1a:d8:4d:5d:64:a5:b6:d5:78:33:28:
         ec:40:3a:97:95:9c:75:0d:61:35:b0:f8:36:bc:60:4b:b4:f4:
         ea:1c:80:2e:f7:7c:09:c6:0f:23:ec:de:87:df:11:94:93:a2:
         6b:94:26:ac:1f:c3:14:e9:83:c1:59:27:27:0d:ea:b1:e0:84:
         b3:4f:7c:b7:49:58:d9:d5:20:df:ac:49:43:47:45:45:66:d3:
         0d:8e:50:54:2a:0a:22:0a:72:b6:91:8d:98:13:99:96:1f:3b:
         eb:a9:50:56:4e:a7:b1:44:32:95:f0:6b:03:b9:d0:e2:89:ae:
         8f:08:fd:a2:51:36:96:f6:8f:7c:6f:ef:45:ec:7b:47:87:e2:
         b8:3f:f7:54:57:59:3c:1d:ac:5c:95:c1:33:0e:fc:cc:5d:f4:
         1f:46:07:4b:17:48:6e:73:eb:2b:fa:ab:6d:39:87:f5:00:53:
         85:0b:df:b9:a9:48:2e:f5:a0:be:ae:1c:26:80:0a:98:5c:4a:
         85:e1:89:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:18:50 2026 by rpki-client