Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/Bvggw73BSBDlp6RtUBHwNxhe86E.roa
File:                     Bvggw73BSBDlp6RtUBHwNxhe86E.roa (raw, json)
Hash identifier:          NyZblFZMH0GJ9W6ziz9T/aemWtOkALQN+mGUa/jAVJ4=
Subject key identifier:   06:F8:20:C3:BD:C1:48:10:E5:A7:A4:6D:50:11:F0:37:18:5E:F3:A1
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       010D
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/Bvggw73BSBDlp6RtUBHwNxhe86E.roa
Signing time:             Tue 31 Mar 2026 08:17:16 +0000
ROA not before:           Tue 31 Mar 2026 08:17:16 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2514
IP address blocks:        160.248.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 269 (0x10d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Mar 31 08:17:16 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=06F820C3BDC14810E5A7A46D5011F037185EF3A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c0:80:36:33:93:0c:36:7e:67:be:11:ea:3f:
                    1f:50:37:f4:41:42:d2:14:f3:85:5e:2c:68:d4:19:
                    fb:ff:57:7e:12:ec:b2:f1:73:64:2e:ba:83:58:19:
                    10:f9:31:d6:16:7a:a8:0c:78:36:1b:ae:a1:b3:b4:
                    8a:cf:6c:0d:98:9e:7f:b6:98:d2:97:0f:66:9e:7a:
                    b8:d7:51:b1:b9:bf:17:32:20:f1:45:54:b8:f0:e0:
                    c2:41:3a:f6:b3:c0:63:e9:cc:0f:9e:0a:e2:12:b3:
                    b4:63:8f:f9:1a:d1:06:84:41:ec:11:39:32:42:ef:
                    35:ed:70:95:35:80:a6:00:d2:30:29:02:71:ba:0e:
                    3a:07:28:5c:6d:44:4d:f9:07:38:90:25:22:85:6a:
                    6f:0e:d1:0f:79:1d:0c:fc:af:4d:ee:6b:d1:06:20:
                    fb:63:7e:59:b6:1c:eb:c9:a7:60:96:4f:48:4c:f6:
                    c6:a5:e3:b4:93:93:00:2c:51:d6:f1:34:9d:c2:39:
                    f9:cb:51:91:bc:6f:bc:31:ec:11:fd:04:18:da:a5:
                    65:e2:ab:1c:f4:db:43:db:87:42:6b:9d:06:13:d7:
                    99:9f:cd:bd:07:08:04:c0:42:74:30:59:8b:82:01:
                    6f:b3:5f:f6:e5:f6:fa:2d:d0:8c:52:b6:7b:f7:02:
                    3c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F8:20:C3:BD:C1:48:10:E5:A7:A4:6D:50:11:F0:37:18:5E:F3:A1
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/Bvggw73BSBDlp6RtUBHwNxhe86E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.248.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         aa:d8:e8:07:7a:cc:0c:d7:4d:16:91:c9:28:34:1c:75:c6:6d:
         64:8a:75:74:93:5e:93:62:56:dd:83:e4:e4:31:cd:19:5a:70:
         07:1f:d8:07:32:3c:72:a4:00:9f:e0:7f:b1:30:11:45:2d:65:
         a3:a3:84:de:0b:66:c3:cf:1a:1f:46:13:8b:23:16:13:8b:77:
         b7:dc:92:5b:1c:96:2c:0d:6b:a1:00:ce:98:84:13:17:50:61:
         74:3e:3e:eb:38:35:c0:47:d9:b4:56:ae:9b:55:78:f4:6e:0b:
         99:e1:66:62:be:cd:2b:61:d6:3b:91:b1:2c:54:92:8d:5c:e3:
         af:92:2b:d1:b4:6a:14:a0:a2:39:23:f3:19:42:c2:e7:b6:a4:
         8e:6c:6e:2f:bc:93:2f:52:89:00:5f:d3:c8:86:0c:0d:77:f6:
         62:b0:66:d4:13:3e:2c:0b:b4:50:04:be:c5:5e:60:d4:03:c2:
         46:0f:78:7c:b4:b4:61:45:86:05:8e:74:37:53:0d:b5:5a:bb:
         52:9b:d5:5b:e6:5c:07:71:6c:29:d8:5b:a1:93:fd:31:98:f3:
         18:75:7b:b0:bd:2f:6e:34:36:18:7a:2e:42:37:9f:16:48:31:
         31:81:c5:97:58:91:9a:a3:60:7b:40:15:d8:2a:00:d6:6f:f6:
         93:ac:08:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:02:11 2026 by rpki-client