Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/Ez5RJ9Qvx4pi2WebxyE1SQu7cyg.roa
File:                     Ez5RJ9Qvx4pi2WebxyE1SQu7cyg.roa (raw, json)
Hash identifier:          4fdWnQx7Qe9c1+iESNed3UXp8yEQAVMb78KO6pTOSx8=
Subject key identifier:   13:3E:51:27:D4:2F:C7:8A:62:D9:67:9B:C7:21:35:49:0B:BB:73:28
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       0106
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/Ez5RJ9Qvx4pi2WebxyE1SQu7cyg.roa
Signing time:             Tue 31 Mar 2026 08:17:14 +0000
ROA not before:           Tue 31 Mar 2026 08:17:14 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2514
IP address blocks:        160.248.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 262 (0x106)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Mar 31 08:17:14 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=133E5127D42FC78A62D9679BC72135490BBB7328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6a:5b:df:5c:9c:df:d7:62:47:23:94:02:17:
                    71:78:13:ee:32:ac:13:6c:65:04:16:33:1e:91:1b:
                    d7:5c:d6:08:d8:c7:03:19:ed:04:52:cf:44:db:53:
                    e1:92:6a:f0:2a:7c:ad:2c:bf:f8:0f:fa:b0:e7:b7:
                    ae:a7:3a:ec:b0:2c:83:0e:c5:69:45:96:4e:a5:7d:
                    4e:8c:18:12:a7:c1:5d:94:d5:3b:6e:5f:db:5b:5e:
                    48:de:37:da:73:db:4d:cc:5d:2c:33:48:75:ca:c8:
                    a2:b9:98:24:a0:f7:4b:13:a9:a8:ba:67:b5:20:23:
                    fc:f5:ff:d5:77:76:4e:38:f6:64:ec:e2:f8:e0:66:
                    64:62:80:07:fe:a8:7e:b5:f8:1e:19:f3:b4:47:05:
                    0e:cc:ab:63:87:f4:0d:93:ac:65:a7:23:db:05:bf:
                    bf:bc:db:8c:05:a2:23:56:fc:4b:0f:3d:e2:f0:b6:
                    29:bb:16:d3:20:cb:d5:87:35:c4:6b:be:0e:ff:56:
                    81:25:96:96:af:db:72:7a:18:81:5e:8e:8e:7c:da:
                    62:ff:a6:29:b7:97:b2:6a:26:aa:6f:69:b7:d1:87:
                    1b:91:84:34:cb:fb:52:73:18:8f:e7:29:3f:14:5c:
                    0b:01:73:c1:7f:af:35:c6:da:32:88:69:42:82:7b:
                    8e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:3E:51:27:D4:2F:C7:8A:62:D9:67:9B:C7:21:35:49:0B:BB:73:28
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/Ez5RJ9Qvx4pi2WebxyE1SQu7cyg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.248.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:4e:bb:2b:5b:0d:9e:93:48:b8:3d:39:63:5b:3b:83:4d:11:
         53:9c:30:9b:b6:d8:7a:6b:b9:1d:1d:d6:a8:0e:b2:41:44:18:
         a0:d8:df:a4:8d:f4:84:46:9d:7c:f3:88:3f:7f:70:f9:2b:71:
         8a:07:9d:b4:4c:f0:c5:cf:a2:69:2d:41:12:db:6e:4d:c8:23:
         a3:02:93:d8:83:4c:90:1b:0d:76:ad:c4:7f:6b:19:8c:af:32:
         b4:26:12:0c:7c:5b:2e:3f:03:73:8b:7c:5f:ee:76:eb:8c:c9:
         36:68:bd:3b:a5:14:b9:27:2f:73:d1:e5:51:54:12:07:e4:7c:
         f0:60:6e:c1:03:ff:f1:22:f4:f0:d1:78:99:34:5b:4e:77:23:
         bc:d4:6f:fa:9f:92:5a:7c:41:4f:12:34:e2:7b:a5:f6:8c:6d:
         b0:2d:6b:62:14:0a:a8:21:96:f9:92:2f:2f:d5:01:02:2e:42:
         19:33:b1:e4:a1:37:dc:e9:eb:e6:0b:99:5c:4e:71:4c:22:ff:
         37:47:39:9e:50:fc:88:9f:91:5f:67:aa:9a:12:69:72:b4:44:
         32:72:1e:da:5a:24:cb:8b:37:04:17:ee:1f:cb:11:30:19:68:
         2d:aa:ec:28:24:ed:63:49:d0:00:bd:c5:cd:11:1d:61:84:f9:
         b0:d4:cd:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:02:25 2026 by rpki-client