Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/BjinQjPb8MleSQHHF3Ypiud40Eo.roa
File:                     BjinQjPb8MleSQHHF3Ypiud40Eo.roa (raw, json)
Hash identifier:          jyn50fv17ktZTTrXd5JADg0bdbM9UALt9a1ryIfUX9I=
Subject key identifier:   06:38:A7:42:33:DB:F0:C9:5E:49:01:C7:17:76:29:8A:E7:78:D0:4A
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       0109
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BjinQjPb8MleSQHHF3Ypiud40Eo.roa
Signing time:             Tue 31 Mar 2026 08:17:15 +0000
ROA not before:           Tue 31 Mar 2026 08:17:15 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2514
IP address blocks:        160.248.90.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 265 (0x109)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Mar 31 08:17:15 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=0638A74233DBF0C95E4901C71776298AE778D04A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8c:22:3f:a6:d2:65:a3:97:d0:0c:4c:93:c6:
                    9e:b5:c5:3b:f9:3c:15:8a:1e:f6:a6:81:fe:6f:09:
                    cc:85:42:b5:12:88:5f:fa:13:c6:3a:47:0b:f1:8e:
                    3e:34:92:85:fb:bc:6c:e7:d6:05:2f:ae:20:82:e1:
                    06:80:51:4e:06:34:b2:42:5c:63:96:f6:a2:9f:1f:
                    56:48:b0:fc:f8:ff:26:99:38:64:36:de:99:02:2b:
                    ff:47:67:9d:4d:aa:e6:c5:cc:8a:1d:a5:b3:43:02:
                    35:52:8b:d2:bb:b5:9a:96:e9:fe:03:a2:47:e3:c1:
                    07:4c:04:0b:8d:12:39:9c:6a:fd:03:24:f9:7f:73:
                    44:b5:51:61:43:55:11:9a:d8:00:11:d9:fb:ce:be:
                    da:55:7c:cc:b2:54:2c:80:5d:1d:4e:a8:16:54:c6:
                    a1:16:8a:13:4c:80:14:05:0b:93:3f:69:24:a9:98:
                    62:fb:98:d0:b7:07:d1:2e:67:b0:ce:a1:b7:45:15:
                    90:95:2b:87:5a:41:f1:51:9e:a5:0a:70:95:61:a4:
                    db:31:76:e6:91:79:df:aa:77:9f:a0:4b:8c:9c:d1:
                    71:1e:5a:d4:fc:b8:18:ab:02:a0:84:c9:05:62:53:
                    46:e9:c7:fb:2b:d6:e1:34:fe:63:8e:63:06:8f:9c:
                    43:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:38:A7:42:33:DB:F0:C9:5E:49:01:C7:17:76:29:8A:E7:78:D0:4A
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BjinQjPb8MleSQHHF3Ypiud40Eo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.248.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:33:ab:83:c1:16:c0:ba:94:8c:4e:2b:bc:d3:95:07:87:7e:
         dd:b3:48:a3:4e:94:d3:4b:86:13:e7:ca:75:e6:16:3f:e6:bf:
         1b:54:92:df:e2:88:14:9e:be:91:f0:c8:94:5a:1c:36:78:74:
         c2:72:32:f7:22:57:cf:c9:59:ac:83:07:6a:26:a8:97:3d:4c:
         62:e8:09:59:b4:9f:1e:1f:8c:2d:d3:f9:f1:a0:1d:a6:41:8e:
         c7:38:0a:9a:b1:55:72:bf:6f:0e:9b:63:3b:3b:21:e5:25:c4:
         66:3a:c2:e6:47:d7:79:75:1b:a5:21:9c:b1:ca:40:b6:54:30:
         84:08:4a:f4:00:58:f0:ba:49:4b:69:cf:86:6e:b3:2e:6b:45:
         de:87:d0:b9:3f:d6:45:b0:b7:d1:92:1b:43:4d:97:c7:4f:ff:
         4e:b6:30:26:40:e2:f9:db:3d:60:28:1f:bc:2e:ae:52:b4:92:
         d3:fb:85:4f:20:bd:bb:21:c9:cd:09:39:73:c5:2e:cd:48:c2:
         d2:87:27:de:32:5b:d1:f0:ac:37:dc:b2:8d:57:5a:22:9c:4d:
         b7:40:03:e9:e2:9e:1f:ce:ef:7b:48:8c:f6:5b:24:90:6b:3c:
         98:2b:cc:75:d3:da:6d:ad:36:21:54:b2:b8:c6:c5:14:7f:ef:
         18:0c:52:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:02:25 2026 by rpki-client