Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/XJK-AHHugu1wKZ7A27uYiwz-xkM.roa
File:                     XJK-AHHugu1wKZ7A27uYiwz-xkM.roa (raw, json)
Hash identifier:          bvKY6GPLULnfh2IbDiGG+SPgVfAW7xclBShpSxW6KUc=
Subject key identifier:   5C:92:BE:00:71:EE:82:ED:70:29:9E:C0:DB:BB:98:8B:0C:FE:C6:43
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       0108
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/XJK-AHHugu1wKZ7A27uYiwz-xkM.roa
Signing time:             Tue 31 Mar 2026 08:17:14 +0000
ROA not before:           Tue 31 Mar 2026 08:17:14 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2514
IP address blocks:        160.248.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 264 (0x108)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Mar 31 08:17:14 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=5C92BE0071EE82ED70299EC0DBBB988B0CFEC643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:59:8d:c1:c3:9f:29:d9:7b:05:f1:05:ff:92:
                    69:6a:86:4f:f1:64:d9:e2:57:73:9a:66:50:b2:72:
                    38:66:d9:de:14:f4:89:d3:70:5e:cd:98:d4:7d:14:
                    c1:c7:64:6b:a7:3b:bd:8d:af:8b:d2:78:a2:ea:2a:
                    2e:bd:d4:4c:f6:ff:b5:dd:ea:a4:7b:d3:04:f6:c3:
                    9c:d9:52:e2:32:1b:33:7c:7b:7b:0a:b7:d3:49:20:
                    4f:80:7d:6a:97:05:90:14:0d:eb:3b:50:08:3c:c1:
                    1e:66:7c:22:ef:7f:ee:5f:7c:ee:01:43:71:c0:0e:
                    45:0d:0b:ff:79:ac:98:cf:17:3f:1d:05:2c:55:59:
                    be:5b:cf:2f:db:10:76:09:5f:f5:a9:0b:89:12:5a:
                    ba:96:b9:8a:34:a1:c7:ff:cc:3b:69:18:a7:3d:6c:
                    9f:00:5f:3c:fb:c0:83:c7:1c:e3:9f:cd:46:e8:e6:
                    b0:a9:a3:f5:98:f0:2c:0f:3e:df:52:c7:d4:c2:4b:
                    d8:ac:20:f5:64:63:f6:c1:c2:12:3c:63:fc:bb:22:
                    02:de:0d:7a:b2:0f:b5:e7:0d:8c:03:83:73:7c:c7:
                    b3:72:fb:62:8c:7f:e1:a8:cd:3d:65:7b:0b:7d:eb:
                    43:f0:58:ec:2e:84:d8:00:2b:05:fc:cb:e6:a7:ea:
                    a6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:92:BE:00:71:EE:82:ED:70:29:9E:C0:DB:BB:98:8B:0C:FE:C6:43
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/XJK-AHHugu1wKZ7A27uYiwz-xkM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.248.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:fd:2d:6e:e1:c4:45:95:db:05:94:27:1c:03:42:fc:dc:0c:
         f5:c2:4d:31:0e:43:c4:d4:18:aa:63:ce:96:d7:8b:83:34:18:
         e6:b2:82:d4:99:4a:b0:e1:fd:cc:93:7d:6c:a7:5f:b7:81:cb:
         54:8c:66:c5:b8:70:45:79:0f:e9:cc:22:97:c8:21:cb:22:38:
         d7:c6:53:59:95:d0:58:f6:06:dc:dd:63:cd:c8:b7:8a:4f:b9:
         46:4e:d7:e8:2f:2c:6c:c0:7d:a6:b6:98:91:5b:5f:62:14:22:
         dd:94:2a:87:a4:4a:81:9a:3f:8d:b4:ee:27:8f:45:e0:9f:68:
         e7:f5:eb:71:01:78:81:b6:a0:ba:d1:8c:d3:13:de:c2:53:0a:
         a9:f5:a1:48:d4:a6:20:a3:17:8f:3a:a6:51:c5:ae:f5:62:b7:
         f8:10:ad:7b:10:1d:8d:e5:fd:27:d0:2f:1e:5d:0a:41:81:02:
         87:d5:f9:73:af:06:6d:19:0a:7c:cb:02:d3:34:cb:a1:0b:dd:
         dc:ee:3c:0b:01:4b:3f:3c:e5:ee:e1:d9:a4:87:21:de:0b:60:
         ad:58:6c:01:01:78:aa:0a:03:d1:fe:a2:04:24:24:a6:2a:25:
         77:17:1c:cd:9a:f1:21:44:3e:34:ac:d8:da:20:fa:b5:bc:1a:
         07:98:5b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:00:26 2026 by rpki-client