Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/A4ST_Vw4gUVamauLKIK8gFj7sQE.roa
File:                     A4ST_Vw4gUVamauLKIK8gFj7sQE.roa (raw, json)
Hash identifier:          fwZTd+UMxpG1NSoC+GZfMKLSYm8M3RJlN0TFSWfrnkM=
Subject key identifier:   03:84:93:FD:5C:38:81:45:5A:99:AB:8B:28:82:BC:80:58:FB:B1:01
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       0100
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/A4ST_Vw4gUVamauLKIK8gFj7sQE.roa
Signing time:             Tue 31 Mar 2026 08:17:11 +0000
ROA not before:           Tue 31 Mar 2026 08:17:11 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2514
IP address blocks:        160.248.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 256 (0x100)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Mar 31 08:17:11 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=038493FD5C3881455A99AB8B2882BC8058FBB101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:12:d2:57:5d:94:7f:a1:b0:0d:cd:20:7d:8a:
                    1b:34:67:61:4b:8b:be:88:f4:db:90:61:22:32:c7:
                    b0:6a:83:f1:80:de:b9:52:67:81:69:65:7d:80:ce:
                    f7:70:3c:a7:02:86:cd:56:19:1b:b3:05:71:e0:a8:
                    97:f8:72:57:21:06:5e:c8:c8:17:73:a6:03:26:ef:
                    1a:12:ae:4f:2a:74:53:e6:5c:42:f1:58:0c:b0:07:
                    0b:8b:43:55:c2:ac:4e:5b:43:94:3a:6a:76:ac:b9:
                    a2:43:aa:84:33:0d:a6:40:05:59:84:10:88:be:9d:
                    c0:d5:a8:be:64:63:89:34:6a:6c:1a:23:34:ae:1f:
                    53:b2:43:10:51:bf:22:b5:20:de:f6:83:be:81:45:
                    b1:58:1a:e3:f0:87:80:ee:df:1b:8a:f7:5d:20:2e:
                    ed:f5:53:d6:f5:87:61:f7:60:c1:2f:d3:79:ef:d3:
                    67:76:60:24:76:9e:55:84:82:01:b4:fe:67:1e:0f:
                    28:68:ab:c3:b1:51:1a:e3:a5:c5:2f:6e:bd:31:5e:
                    c1:1f:64:52:12:93:fd:7b:fd:88:c0:1f:6c:f3:f3:
                    9f:12:96:c1:90:6c:0f:52:88:4e:c5:6f:6f:7f:99:
                    3b:5d:b6:6f:84:29:da:98:ce:92:db:79:73:fa:71:
                    98:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:84:93:FD:5C:38:81:45:5A:99:AB:8B:28:82:BC:80:58:FB:B1:01
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/A4ST_Vw4gUVamauLKIK8gFj7sQE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.248.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:29:86:5d:cd:ee:de:3f:62:b3:07:dc:e2:cf:28:a6:08:4c:
         fa:cd:41:55:9b:16:f3:55:53:f8:d6:71:f6:09:30:83:61:5c:
         90:f1:35:c8:69:78:ed:d8:a1:22:48:b1:de:95:88:09:bb:b8:
         92:3d:da:93:5e:38:0f:8c:4c:1a:9d:a9:13:9d:75:b6:ba:2f:
         46:b6:24:64:44:d0:eb:98:d1:eb:69:32:75:ef:57:86:9c:e0:
         1c:c4:3b:b3:ed:68:d5:90:6b:97:ef:b6:8f:d7:4f:3a:a9:15:
         61:0e:e0:2c:d5:bf:0f:d0:a0:7c:57:d8:4d:c5:77:f9:ff:a1:
         a3:a7:c5:4a:12:70:1e:8b:8c:db:68:3d:ec:c2:08:12:97:20:
         a3:fd:50:fb:17:1b:d4:b5:ce:0b:9b:85:48:83:aa:cc:c8:7f:
         60:ed:01:2b:5f:67:83:80:a6:86:2c:2b:10:3e:01:3b:85:a6:
         7e:d2:a8:20:ac:9f:9e:1e:d1:b1:6c:cd:ac:5e:95:c9:b6:a8:
         53:e0:f6:a0:57:75:09:3c:e7:fd:22:28:e6:ba:d2:88:7a:b8:
         14:0a:f2:2f:b9:29:66:30:db:2b:45:14:f2:46:e3:3c:5e:43:
         e2:89:75:df:0d:2f:9f:d6:c3:a6:15:49:74:87:3d:cd:93:88:
         bd:9e:76:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:02:20 2026 by rpki-client