Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/QeXbM2ygHBgU6E53_XYrObgf-X8.roa
File:                     QeXbM2ygHBgU6E53_XYrObgf-X8.roa (raw, json)
Hash identifier:          2FkM0yOT1SNtK5ow5B2BbQSQhxgAUP7D+vIOIpdHHwo=
Subject key identifier:   41:E5:DB:33:6C:A0:1C:18:14:E8:4E:77:FD:76:2B:39:B8:1F:F9:7F
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       0124
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/QeXbM2ygHBgU6E53_XYrObgf-X8.roa
Signing time:             Tue 31 Mar 2026 08:17:27 +0000
ROA not before:           Tue 31 Mar 2026 08:17:27 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2514
IP address blocks:        157.65.224.0/19 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 292 (0x124)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Mar 31 08:17:27 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=41E5DB336CA01C1814E84E77FD762B39B81FF97F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:eb:bd:37:0a:cf:4c:e3:e8:74:de:72:1d:9f:
                    e5:51:ac:25:80:d1:2f:f6:bd:b1:8b:69:1d:d4:cc:
                    16:5f:f0:4f:7c:99:f7:a7:7f:4d:b9:95:f4:65:03:
                    c7:ff:53:be:37:4e:aa:96:16:63:72:4e:9e:89:4b:
                    3e:f4:7f:5a:21:84:01:7e:84:be:66:d5:92:d8:cc:
                    f9:79:ec:75:2c:14:d4:25:dc:5e:23:42:70:43:3e:
                    40:77:fd:53:6a:82:b5:70:bd:52:6c:a9:1c:9b:3c:
                    98:5b:e7:9f:fd:56:01:ec:aa:97:9e:c2:c2:02:b5:
                    01:1c:6a:11:80:6c:e8:1e:7e:dc:d1:18:56:03:ed:
                    47:ed:11:23:e7:87:48:9b:44:80:f6:8d:81:ac:db:
                    b5:11:d0:ad:96:34:2e:84:b1:ea:8b:19:f3:4d:71:
                    4a:7d:e8:f9:b7:ce:30:33:b9:0a:59:f8:4b:4e:76:
                    c4:bb:cd:9a:a4:85:f9:49:7a:3c:a3:fa:2b:ae:d1:
                    da:d4:46:f3:fe:12:c4:02:e3:e2:6f:d1:1a:5d:83:
                    88:6e:8d:04:51:af:f7:fc:43:4a:e9:62:44:80:7f:
                    91:d5:e8:8b:3f:e4:a0:71:e6:08:2c:b4:84:e4:09:
                    b9:a7:1d:b4:2a:07:be:61:a4:9c:6f:15:c1:44:a3:
                    79:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E5:DB:33:6C:A0:1C:18:14:E8:4E:77:FD:76:2B:39:B8:1F:F9:7F
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/QeXbM2ygHBgU6E53_XYrObgf-X8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.65.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         32:a2:6d:d3:de:8d:04:69:6f:82:6b:a9:8e:60:00:87:da:5d:
         08:44:04:16:38:3d:04:69:a0:74:fa:23:00:1c:32:4c:4f:39:
         2e:00:37:9e:ec:57:8d:c2:0d:a4:f9:7b:77:98:6f:9b:b0:75:
         0c:cd:55:12:ad:3f:48:ed:2a:a6:4a:09:f1:be:38:4c:0f:48:
         5d:cb:07:65:3c:ea:e8:7c:09:50:c7:7a:f2:2c:77:e6:8c:d2:
         e5:66:da:a3:8f:15:e0:2e:95:e4:99:09:92:d1:b1:10:df:1f:
         45:2c:3d:2f:89:d2:f4:68:64:59:2e:0a:30:22:8d:48:28:a1:
         70:68:14:69:7b:85:ed:44:1c:e6:7a:fb:c8:e1:4a:82:a2:29:
         f8:97:bf:58:6f:0c:e3:97:b9:b8:52:33:52:98:cf:5a:c7:d2:
         1c:b5:7f:09:08:70:4b:e9:f0:04:da:80:cd:1c:6b:9c:1f:d1:
         2c:ab:50:b4:fd:03:55:5d:71:d0:8a:a6:49:fe:18:8b:8b:7b:
         b5:19:92:71:10:a1:d5:a6:63:0c:d3:16:7a:d8:46:f3:19:19:
         ad:40:00:ec:4d:88:5b:6a:e2:2f:b0:10:ad:5e:fe:be:aa:f5:
         b0:50:61:e1:82:aa:90:52:41:c4:03:f6:ea:0c:a3:43:d6:f5:
         63:33:e2:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:02:27 2026 by rpki-client