Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/XA5VdVJVWolS2TowsMSg3fwy8A8.roa
File:                     XA5VdVJVWolS2TowsMSg3fwy8A8.roa (raw, json)
Hash identifier:          xPSlkQeSuY15CTSG5IBzi0EMCL3Kckp/dlHWVMt6TT0=
Subject key identifier:   5C:0E:55:75:52:55:5A:89:52:D9:3A:30:B0:C4:A0:DD:FC:32:F0:0F
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       0103
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/XA5VdVJVWolS2TowsMSg3fwy8A8.roa
Signing time:             Tue 31 Mar 2026 08:17:13 +0000
ROA not before:           Tue 31 Mar 2026 08:17:13 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2514
IP address blocks:        160.248.76.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 259 (0x103)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Mar 31 08:17:13 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=5C0E557552555A8952D93A30B0C4A0DDFC32F00F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:be:67:fd:22:50:7d:85:96:2e:37:d7:e6:1e:
                    72:5a:be:07:b6:83:28:2b:56:38:b5:b6:e7:41:ee:
                    73:fe:e6:d9:c4:b5:3b:65:bd:32:26:50:a4:14:3f:
                    f4:08:d0:4d:4a:5a:44:88:09:f1:fa:1b:bf:9b:e8:
                    97:9c:64:ad:ea:e2:50:bf:cb:b4:4d:ad:0f:15:bb:
                    af:93:0a:bd:f8:20:08:9f:49:0a:b6:f3:3b:aa:88:
                    05:bd:da:e7:9d:34:3a:ca:d4:8f:2b:fe:23:09:82:
                    2b:e9:75:6c:74:66:f5:cc:7e:55:d8:ba:ca:45:61:
                    19:a0:11:d4:60:a9:ba:37:9e:57:55:a3:c3:2b:ac:
                    79:ec:3b:7d:fd:d1:bb:ac:fb:86:7e:7f:4c:5b:27:
                    db:fd:52:3a:31:c2:de:7d:59:01:2b:9d:a5:04:79:
                    bc:9a:d9:66:8c:f6:70:4b:c5:79:ac:8a:96:ca:e1:
                    19:6f:74:39:38:03:9f:7f:b8:51:58:43:2e:20:e4:
                    05:1f:4c:aa:de:34:1c:f8:0a:87:9d:95:20:43:80:
                    a1:f1:f8:d4:04:04:4c:f5:2c:02:cf:0f:ae:35:91:
                    af:e7:39:71:c3:b0:81:34:0b:ad:fc:a2:87:ae:17:
                    5f:8f:4c:5c:58:75:8a:00:c2:40:0a:dd:bd:b0:26:
                    0e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:0E:55:75:52:55:5A:89:52:D9:3A:30:B0:C4:A0:DD:FC:32:F0:0F
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/XA5VdVJVWolS2TowsMSg3fwy8A8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.248.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:cf:fc:fb:76:4d:60:a2:76:4a:ee:66:74:b9:0d:68:dc:6b:
         67:b7:d9:bd:b9:02:78:f5:00:45:f3:7b:51:28:a7:80:86:77:
         20:43:fb:41:1b:3b:d3:59:31:1e:c8:f8:b1:50:2c:5c:14:b2:
         e8:6e:e0:e8:89:47:ab:55:ef:eb:c5:ae:51:9c:e5:c4:23:2b:
         d6:32:f7:31:64:06:64:8b:53:19:a2:10:92:e8:c1:c6:53:18:
         23:cf:79:c2:d4:37:b4:a8:84:1e:65:d5:bf:14:ae:cf:f1:58:
         a8:99:3d:93:8a:f1:c0:05:b5:44:b4:2e:a9:d7:f9:1a:f5:15:
         5f:30:ea:6e:94:b0:66:74:c9:d7:7c:e2:d7:ed:4e:a4:65:d3:
         f8:96:1f:81:a5:09:64:9d:e3:ad:5f:36:b5:2e:8a:af:a2:3a:
         ef:f1:81:33:cb:a0:c2:49:06:18:bd:70:80:32:bb:7e:1b:a7:
         87:cd:d1:b4:ca:42:28:a2:46:98:ec:b9:36:91:9b:10:1d:82:
         d5:a9:3a:68:08:a5:17:1c:2f:bf:5e:3d:a0:e7:28:fc:13:ba:
         5c:03:fc:da:f0:bc:19:a2:67:f7:48:11:2d:78:b0:87:7b:83:
         7c:38:17:e2:94:93:ad:6a:19:d1:53:82:00:95:9b:50:a8:d0:
         6d:f7:a9:87
-----BEGIN CERTIFICATE-----
MIIEuzCCA6OgAwIBAgICAQMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDE0
MDBBQjg5QjZENzJGN0RCNDI0RjRBQUE4Q0NGRjY0MzhEM0Q0QTAeFw0yNjAzMzEw
ODE3MTNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDVDMEU1NTc1NTI1NTVB
ODk1MkQ5M0EzMEIwQzRBMERERkMzMkYwMEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDSvmf9IlB9hZYuN9fmHnJavge2gygrVji1tudB7nP+5tnEtTtl
vTImUKQUP/QI0E1KWkSICfH6G7+b6JecZK3q4lC/y7RNrQ8Vu6+TCr34IAifSQq2
8zuqiAW92uedNDrK1I8r/iMJgivpdWx0ZvXMflXYuspFYRmgEdRgqbo3nldVo8Mr
rHnsO3390bus+4Z+f0xbJ9v9Ujoxwt59WQErnaUEebya2WaM9nBLxXmsipbK4Rlv
dDk4A59/uFFYQy4g5AUfTKreNBz4CoedlSBDgKHx+NQEBEz1LALPD641ka/nOXHD
sIE0C638ooeuF1+PTFxYdYoAwkAK3b2wJg5bAgMBAAGjggHXMIIB0zAdBgNVHQ4E
FgQUXA5VdVJVWolS2TowsMSg3fwy8A8wHwYDVR0jBBgwFoAU0UAKuJttcvfbQk9K
qozP9kONPUowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzI5LzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtPTlBVby5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtP
TlBVby5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF
BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC8yOS9YQTVWZFZKVldvbFMyVG93c01TZzNmd3k4QTgucm9hMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCoPhMMA0GCSqGSIb3DQEBCwUAA4IBAQCN
z/z7dk1gonZK7mZ0uQ1o3Gtnt9m9uQJ49QBF83tRKKeAhncgQ/tBGzvTWTEeyPix
UCxcFLLobuDoiUerVe/rxa5RnOXEIyvWMvcxZAZki1MZohCS6MHGUxgjz3nC1De0
qIQeZdW/FK7P8ViomT2TivHABbVEtC6p1/ka9RVfMOpulLBmdMnXfOLX7U6kZdP4
lh+BpQlkneOtXza1Loqvojrv8YEzy6DCSQYYvXCAMrt+G6eHzdG0ykIookaY7Lk2
kZsQHYLVqTpoCKUXHC+/Xj2g5yj8E7pcA/za8LwZomf3SBEteLCHe4N8OBfilJOt
ahnRU4IAlZtQqNBt96mH
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:02:22 2026 by rpki-client