Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/IoT8X1TnkrGIosI3ACp1qvwF71c.roa
File:                     IoT8X1TnkrGIosI3ACp1qvwF71c.roa (raw, json)
Hash identifier:          tQcGY41piSvSCcUnzW+9iMFtBcHfzwcRIwDTtW7aKOs=
Subject key identifier:   22:84:FC:5F:54:E7:92:B1:88:A2:C2:37:00:2A:75:AA:FC:05:EF:57
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       0111
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/IoT8X1TnkrGIosI3ACp1qvwF71c.roa
Signing time:             Tue 31 Mar 2026 08:17:18 +0000
ROA not before:           Tue 31 Mar 2026 08:17:18 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2514
IP address blocks:        160.248.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 273 (0x111)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Mar 31 08:17:18 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=2284FC5F54E792B188A2C237002A75AAFC05EF57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:18:b3:43:5e:b9:ea:f8:37:7c:95:d8:ac:3e:
                    cb:21:e3:f9:bc:e1:f5:d3:24:a6:e6:ab:62:21:c6:
                    50:51:8d:1c:90:48:c9:b2:56:48:54:cd:a1:e7:ac:
                    c1:fe:44:82:91:5f:d3:7c:f2:ef:ac:8e:fc:3f:87:
                    56:15:05:1f:29:94:b9:1e:cf:5f:d5:c9:75:e3:f0:
                    b8:22:13:b9:08:e0:9d:fd:04:d7:59:9b:31:ae:b9:
                    7a:54:80:13:42:4a:ba:9c:61:8e:f1:2f:81:62:26:
                    2c:04:33:b5:13:00:fa:71:cf:82:72:24:cc:69:61:
                    2e:b5:a9:5f:ee:ee:1f:c2:80:81:a9:ce:50:ca:eb:
                    09:ae:f2:3d:4c:85:1b:be:9c:d7:75:15:0a:8d:d7:
                    16:9e:dd:f4:74:0b:2b:b7:06:9e:a5:35:b4:0c:bc:
                    99:fd:8b:4e:5a:df:a8:01:47:c1:4c:5d:d9:a8:80:
                    fa:6a:ca:b7:47:80:3b:b0:61:8d:86:4f:3a:4c:95:
                    50:77:f2:32:17:ef:de:6c:b0:03:de:a8:a8:59:1f:
                    4b:30:14:fd:f0:c4:b4:f9:4f:11:ea:59:34:60:07:
                    b0:6a:f1:00:c5:95:79:24:db:69:30:7d:28:71:ee:
                    49:d9:0f:14:39:8a:f1:bf:c0:84:2b:5f:7d:79:b2:
                    83:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:84:FC:5F:54:E7:92:B1:88:A2:C2:37:00:2A:75:AA:FC:05:EF:57
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/IoT8X1TnkrGIosI3ACp1qvwF71c.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.248.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:1a:a7:e8:a7:1f:7c:3b:d4:0a:88:ec:92:c6:5a:dd:f7:83:
         7c:e3:3c:49:6d:a9:43:33:de:01:97:26:ac:7e:03:3e:cb:da:
         d6:95:2d:51:5e:ce:a6:01:a2:2c:cf:ad:97:6f:be:83:26:ed:
         4e:c0:28:b6:da:c2:58:a1:5f:a8:39:ec:2a:22:7c:76:f8:28:
         b5:43:45:f6:4a:9b:87:ba:cc:13:b6:57:34:f9:ff:39:8b:4f:
         01:a7:b8:96:ba:d4:43:a2:a9:41:92:e9:19:1c:b5:41:27:ac:
         c1:6f:de:b0:ee:3a:e9:41:af:46:b0:e2:3b:c9:63:99:f4:f1:
         ff:5f:98:59:ee:6a:17:dd:ad:48:90:e8:f4:a7:d8:f7:0b:ec:
         d5:f6:16:c1:ea:b0:4e:d2:2c:8f:5e:32:12:85:6e:d2:54:09:
         15:f8:ac:8b:e0:dd:5b:a7:d3:4c:d4:fb:f8:6d:36:f6:27:c2:
         d2:67:be:fe:fa:fa:f1:71:a3:dd:75:9a:87:64:d8:dc:7f:8f:
         a3:18:96:d0:b4:00:f3:f4:8b:88:e2:a4:77:d6:4a:47:00:ab:
         de:1a:62:dc:96:28:ad:05:1c:3e:ff:12:86:17:48:38:a1:dc:
         c0:9e:4b:c8:2d:dd:1a:18:fa:f2:bf:de:6e:a4:1c:bf:63:5c:
         54:cc:e6:50
-----BEGIN CERTIFICATE-----
MIIEuzCCA6OgAwIBAgICAREwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDE0
MDBBQjg5QjZENzJGN0RCNDI0RjRBQUE4Q0NGRjY0MzhEM0Q0QTAeFw0yNjAzMzEw
ODE3MThaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDIyODRGQzVGNTRFNzky
QjE4OEEyQzIzNzAwMkE3NUFBRkMwNUVGNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDXGLNDXrnq+Dd8ldisPssh4/m84fXTJKbmq2IhxlBRjRyQSMmy
VkhUzaHnrMH+RIKRX9N88u+sjvw/h1YVBR8plLkez1/VyXXj8LgiE7kI4J39BNdZ
mzGuuXpUgBNCSrqcYY7xL4FiJiwEM7UTAPpxz4JyJMxpYS61qV/u7h/CgIGpzlDK
6wmu8j1MhRu+nNd1FQqN1xae3fR0Cyu3Bp6lNbQMvJn9i05a36gBR8FMXdmogPpq
yrdHgDuwYY2GTzpMlVB38jIX795ssAPeqKhZH0swFP3wxLT5TxHqWTRgB7Bq8QDF
lXkk22kwfShx7knZDxQ5ivG/wIQrX315soOXAgMBAAGjggHXMIIB0zAdBgNVHQ4E
FgQUIoT8X1TnkrGIosI3ACp1qvwF71cwHwYDVR0jBBgwFoAU0UAKuJttcvfbQk9K
qozP9kONPUowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzI5LzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtPTlBVby5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtP
TlBVby5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF
BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC8yOS9Jb1Q4WDFUbmtyR0lvc0kzQUNwMXF2d0Y3MWMucm9hMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoPjLMA0GCSqGSIb3DQEBCwUAA4IBAQBm
Gqfopx98O9QKiOySxlrd94N84zxJbalDM94BlyasfgM+y9rWlS1RXs6mAaIsz62X
b76DJu1OwCi22sJYoV+oOewqInx2+Ci1Q0X2SpuHuswTtlc0+f85i08Bp7iWutRD
oqlBkukZHLVBJ6zBb96w7jrpQa9GsOI7yWOZ9PH/X5hZ7moX3a1IkOj0p9j3C+zV
9hbB6rBO0iyPXjIShW7SVAkV+KyL4N1bp9NM1Pv4bTb2J8LSZ77++vrxcaPddZqH
ZNjcf4+jGJbQtADz9IuI4qR31kpHAKveGmLcliitBRw+/xKGF0g4odzAnkvILd0a
GPryv95upBy/Y1xUzOZQ
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:02:22 2026 by rpki-client