Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/1rjTNLRo9kPxbxPb8HkKXpm_DdA.roa
File:                     1rjTNLRo9kPxbxPb8HkKXpm_DdA.roa (raw, json)
Hash identifier:          294sgrXm/0N+BK54imEKQSq8Q6SUrSoi1NZ3A+DVwC0=
Subject key identifier:   D6:B8:D3:34:B4:68:F6:43:F1:6F:13:DB:F0:79:0A:5E:99:BF:0D:D0
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       F7
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/1rjTNLRo9kPxbxPb8HkKXpm_DdA.roa
Signing time:             Tue 31 Mar 2026 08:17:01 +0000
ROA not before:           Tue 31 Mar 2026 08:17:01 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2514
IP address blocks:        157.65.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 247 (0xf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Mar 31 08:17:01 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=D6B8D334B468F643F16F13DBF0790A5E99BF0DD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5b:12:4a:70:c8:db:13:b8:1d:77:9b:0d:50:
                    89:d0:5a:c7:c2:b5:d4:22:45:03:6e:f1:d3:d0:7a:
                    e9:7c:d0:23:28:d0:e2:55:12:b0:19:67:95:25:ab:
                    99:b2:5e:ed:dd:94:fd:b4:bf:68:78:47:95:8e:2a:
                    47:b2:73:11:e0:43:9e:49:db:05:be:93:85:bb:59:
                    ec:ea:13:c4:9c:49:8e:5e:27:30:4d:35:ff:f3:1d:
                    78:3d:45:02:41:44:4b:e4:91:ca:37:2c:9d:08:85:
                    6c:c0:d9:a3:5b:f3:82:25:18:c8:71:bc:d4:51:28:
                    ff:cb:79:3a:ac:9b:31:51:3d:ba:d8:39:be:b9:45:
                    6e:9a:4f:66:bb:c6:58:64:ca:48:b1:ca:ed:ce:63:
                    f9:c5:15:48:1c:33:fd:75:7d:96:ca:d5:04:d7:32:
                    15:a0:ff:60:31:69:cb:4d:da:85:55:3b:94:c1:78:
                    9e:af:3d:89:2b:c3:b7:7d:d1:e9:20:99:e5:fa:6b:
                    5f:07:83:27:9e:85:26:64:0a:b0:ca:da:2e:84:7e:
                    eb:eb:73:29:65:cc:96:7a:23:bd:46:5e:38:70:e9:
                    63:c2:66:c1:17:5f:b4:ef:d7:02:7c:c4:0e:26:09:
                    7c:6c:1e:4c:51:03:a8:cd:e1:d7:6c:45:94:7c:45:
                    6e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:B8:D3:34:B4:68:F6:43:F1:6F:13:DB:F0:79:0A:5E:99:BF:0D:D0
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/1rjTNLRo9kPxbxPb8HkKXpm_DdA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.65.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         46:74:7d:93:81:04:3e:2a:7a:32:65:c7:4d:d4:de:db:5e:2c:
         59:9b:a1:9e:fe:3e:18:fe:e8:a7:e4:d3:b8:f9:b6:b8:fd:4b:
         5e:cf:6a:43:24:be:cf:82:60:be:57:6c:cb:06:79:26:92:c3:
         87:2a:18:e8:a7:bc:58:42:d7:7d:99:93:ef:27:39:b2:e8:5c:
         50:6f:69:3c:9a:3e:85:0d:fd:f8:29:43:f3:e9:d5:46:47:88:
         4c:37:fb:8f:d2:4f:06:63:51:69:a1:ff:6e:64:32:4b:9e:bb:
         27:42:bb:88:27:00:e7:02:16:f6:df:4b:af:76:b7:0c:05:9c:
         de:9c:59:b5:7b:ce:ac:b8:d5:c6:8d:de:02:c2:16:d8:19:19:
         c9:d3:93:e4:a7:9d:3c:33:a0:60:03:0a:e5:74:8b:11:93:1d:
         10:00:5c:cb:a0:58:d2:7a:a0:fc:c0:e1:45:b3:f7:f1:2e:df:
         bf:98:05:fa:a3:78:77:5f:7f:eb:68:45:48:28:eb:a4:93:36:
         a0:00:d9:e1:29:a3:74:16:45:1a:af:45:cb:cd:8f:cb:d4:93:
         9c:2c:6d:ef:9b:ff:30:5c:c9:fa:ca:b7:4d:00:fc:53:4b:84:
         4d:1f:45:8b:bf:e2:4a:82:c6:e8:94:a9:0b:14:97:13:cd:02:
         2f:ff:47:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:02:23 2026 by rpki-client