Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/XTpGrbgrwYVMQQjU1bIP1OGcAa0.roa
File:                     XTpGrbgrwYVMQQjU1bIP1OGcAa0.roa (raw, json)
Hash identifier:          vmiYW7e0runASanbyA901kbHEtwGiUrsU9C/iVd7HoE=
Subject key identifier:   5D:3A:46:AD:B8:2B:C1:85:4C:41:08:D4:D5:B2:0F:D4:E1:9C:01:AD
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       F3
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/XTpGrbgrwYVMQQjU1bIP1OGcAa0.roa
Signing time:             Tue 31 Mar 2026 08:17:00 +0000
ROA not before:           Tue 31 Mar 2026 08:17:00 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2514
IP address blocks:        157.120.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 243 (0xf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Mar 31 08:17:00 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=5D3A46ADB82BC1854C4108D4D5B20FD4E19C01AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d3:46:cb:8d:f1:d7:9c:8a:90:32:7a:b8:9d:
                    5b:3a:3a:97:96:74:53:43:bb:a0:6d:5c:7d:28:31:
                    16:e3:41:81:65:4f:7f:e5:0d:3f:00:5a:42:b0:ca:
                    e7:c1:3f:a8:59:26:c7:61:d4:c5:d8:87:42:86:56:
                    5c:cf:2b:41:a1:d1:3d:05:fd:c8:30:51:dd:e5:79:
                    09:3d:42:e0:65:ce:06:09:ff:66:3c:50:98:f6:ac:
                    24:a2:08:15:1f:82:f4:03:d6:4a:f2:e1:49:81:1e:
                    3d:09:9a:22:b5:26:da:ef:0b:a8:77:6e:d2:95:bb:
                    08:ba:19:0f:07:fd:02:b6:34:d3:69:80:b7:47:74:
                    76:de:a2:89:63:26:7a:2f:e4:80:3a:16:1d:78:b0:
                    af:0f:8b:c1:5b:aa:51:64:40:1e:e5:9d:45:a8:9f:
                    a5:89:c5:67:04:20:3f:a2:d5:8e:8b:ad:4f:99:06:
                    40:82:7c:78:d1:96:28:e8:25:bc:b7:ff:31:0e:7a:
                    6a:16:1e:63:79:18:7f:a1:19:1b:b3:96:6c:b2:85:
                    3a:fc:ea:d2:ea:3e:85:87:95:63:d2:40:98:bc:fe:
                    e4:8e:3f:87:8c:a0:b5:85:3a:29:48:3d:cf:5a:5c:
                    74:c4:4b:f0:3c:ee:9a:e6:19:34:51:50:31:76:8e:
                    22:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:3A:46:AD:B8:2B:C1:85:4C:41:08:D4:D5:B2:0F:D4:E1:9C:01:AD
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/XTpGrbgrwYVMQQjU1bIP1OGcAa0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.120.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b7:5b:10:2c:ad:9c:d4:10:e1:62:c2:fd:cd:ab:81:83:2c:2d:
         20:f2:78:4f:44:d6:c8:d3:84:d3:ed:90:4a:39:47:bd:e9:32:
         33:f0:8c:1e:3f:8c:d7:34:22:a8:15:3e:ae:f1:bb:b6:34:95:
         4d:45:9a:dd:c5:35:cb:f5:87:b7:45:d2:43:c0:3b:7b:21:33:
         d1:03:63:84:6e:23:60:28:c4:3b:c1:fe:c6:7a:f2:67:d7:ec:
         8a:c1:96:c6:06:89:74:3a:34:bc:24:36:0c:75:e8:5f:58:6b:
         9a:e2:08:ab:3b:46:83:33:06:2e:da:2d:52:e3:b4:18:52:9d:
         22:a9:f3:a2:77:46:51:23:b2:d2:1b:00:95:a3:3c:54:c2:34:
         65:85:6c:6f:ee:36:5a:5c:fb:cc:f5:8f:11:67:87:d4:73:72:
         a5:2d:71:10:31:90:0c:c6:4d:49:2c:f5:7f:d3:e7:7c:80:29:
         09:0d:42:9a:cd:a7:4a:a6:c9:df:d7:b3:45:51:f3:d0:e9:ad:
         88:2b:0d:9a:42:e1:4b:15:dc:6d:bd:62:25:0d:87:70:61:23:
         9d:03:a6:8b:3a:08:67:02:7d:cc:6c:1f:5f:34:c5:46:1e:a5:
         80:a9:48:16:09:c3:66:ec:8d:ce:2b:9e:ed:e5:84:ff:54:9d:
         47:d4:52:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:02:27 2026 by rpki-client