Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/Y2yhhGzl5q-tqW1_wS5nLebcoSs.roa
File:                     Y2yhhGzl5q-tqW1_wS5nLebcoSs.roa (raw, json)
Hash identifier:          m3fn3MITauHKJN/cGGoYAJwWCZr24CVsNXUP3Z7DMis=
Subject key identifier:   63:6C:A1:84:6C:E5:E6:AF:AD:A9:6D:7F:C1:2E:67:2D:E6:DC:A1:2B
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       0118
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/Y2yhhGzl5q-tqW1_wS5nLebcoSs.roa
Signing time:             Tue 31 Mar 2026 08:17:21 +0000
ROA not before:           Tue 31 Mar 2026 08:17:21 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2514
IP address blocks:        160.248.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 280 (0x118)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Mar 31 08:17:21 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=636CA1846CE5E6AFADA96D7FC12E672DE6DCA12B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:9c:eb:d2:12:10:7d:9f:2a:04:2b:8d:22:12:
                    cb:2c:65:e9:5f:80:28:3e:db:9d:1d:e1:0c:d7:d1:
                    af:7a:6e:22:93:19:41:5f:b2:62:b7:e3:44:b0:56:
                    75:79:ce:fe:50:df:b5:49:01:db:19:28:93:ca:3f:
                    fb:ad:76:fd:7a:1c:ca:cd:70:3d:6a:11:39:aa:4b:
                    55:57:95:5d:58:91:07:a5:e6:c6:2e:93:83:ea:3c:
                    03:e2:34:37:f6:3a:86:16:ff:e7:8b:6b:82:32:a4:
                    9f:96:dc:8e:0b:9f:a4:46:97:67:66:77:f9:15:28:
                    8e:73:f5:5b:76:04:b7:c7:0a:b1:70:90:c7:4a:d0:
                    0d:f4:b8:44:5c:cb:c8:cb:17:93:20:20:3a:71:c0:
                    b0:41:58:d6:9f:0c:d7:a1:b2:cf:fe:25:74:67:05:
                    70:c8:6d:b9:5a:74:4a:0b:cf:86:36:a4:3f:fb:a7:
                    23:15:46:77:a8:fe:bc:85:1b:d0:ab:66:34:6e:1a:
                    4b:3c:4f:bc:9e:e1:94:02:36:f4:14:3a:02:25:35:
                    10:27:61:bb:16:f3:a8:07:ac:7f:b0:e2:87:a3:14:
                    c4:40:9c:ed:a0:bb:ec:e1:68:84:d2:bb:ce:34:81:
                    13:7d:6a:f8:e9:2a:c7:36:52:71:79:bf:21:f1:17:
                    aa:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:6C:A1:84:6C:E5:E6:AF:AD:A9:6D:7F:C1:2E:67:2D:E6:DC:A1:2B
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/Y2yhhGzl5q-tqW1_wS5nLebcoSs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.248.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:de:fb:8a:d6:10:0e:1f:08:42:b1:1a:84:33:88:e4:9c:9f:
         93:f6:2f:45:15:66:95:2f:04:c8:74:d0:8d:93:fb:f7:8f:07:
         52:bb:aa:0b:05:8a:0b:a7:fa:b8:46:98:ed:43:04:6a:c3:09:
         3d:d6:f5:fc:6f:ea:74:b7:17:79:80:62:d1:c8:e6:24:f7:56:
         ae:b8:2f:d0:f3:04:ea:82:2e:e3:24:dc:4d:ca:7c:fc:4a:b1:
         57:ad:25:03:f7:65:35:5a:09:3c:f6:be:f3:84:9a:91:a2:79:
         d7:c5:fa:88:ab:09:c0:eb:40:44:df:a0:de:5a:00:fd:c4:78:
         3a:9b:6e:61:de:20:50:cd:87:fb:dc:b1:36:b5:98:08:ff:f9:
         e5:17:86:16:eb:b1:07:71:9d:6b:71:0b:65:6b:58:31:99:a4:
         57:9a:3f:22:f3:83:ae:6c:4e:7a:af:21:87:e4:f5:f1:41:fe:
         21:6a:4e:5c:f4:20:05:f7:8d:8e:21:56:3a:ce:fa:13:36:9c:
         5b:0b:97:86:e8:47:0f:db:93:d1:3f:4b:b0:88:f4:75:ca:03:
         18:2f:6f:65:15:1a:33:7d:19:d9:0d:30:60:c1:78:43:41:f3:
         e2:a5:8e:b4:a4:f5:96:79:4f:75:90:59:76:30:db:ed:0c:93:
         96:1d:30:9c
-----BEGIN CERTIFICATE-----
MIIEuzCCA6OgAwIBAgICARgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRDE0
MDBBQjg5QjZENzJGN0RCNDI0RjRBQUE4Q0NGRjY0MzhEM0Q0QTAeFw0yNjAzMzEw
ODE3MjFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDYzNkNBMTg0NkNFNUU2
QUZBREE5NkQ3RkMxMkU2NzJERTZEQ0ExMkIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDdnOvSEhB9nyoEK40iEsssZelfgCg+250d4QzX0a96biKTGUFf
smK340SwVnV5zv5Q37VJAdsZKJPKP/utdv16HMrNcD1qETmqS1VXlV1YkQel5sYu
k4PqPAPiNDf2OoYW/+eLa4IypJ+W3I4Ln6RGl2dmd/kVKI5z9Vt2BLfHCrFwkMdK
0A30uERcy8jLF5MgIDpxwLBBWNafDNehss/+JXRnBXDIbbladEoLz4Y2pD/7pyMV
Rneo/ryFG9CrZjRuGks8T7ye4ZQCNvQUOgIlNRAnYbsW86gHrH+w4oejFMRAnO2g
u+zhaITSu840gRN9avjpKsc2UnF5vyHxF6oxAgMBAAGjggHXMIIB0zAdBgNVHQ4E
FgQUY2yhhGzl5q+tqW1/wS5nLebcoSswHwYDVR0jBBgwFoAU0UAKuJttcvfbQk9K
qozP9kONPUowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzI5LzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtPTlBVby5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzBVQUt1SnR0Y3ZmYlFrOUtxb3pQOWtP
TlBVby5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF
BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC8yOS9ZMnloaEd6bDVxLXRxVzFfd1M1bkxlYmNvU3Mucm9hMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCoPj0MA0GCSqGSIb3DQEBCwUAA4IBAQAX
3vuK1hAOHwhCsRqEM4jknJ+T9i9FFWaVLwTIdNCNk/v3jwdSu6oLBYoLp/q4Rpjt
QwRqwwk91vX8b+p0txd5gGLRyOYk91auuC/Q8wTqgi7jJNxNynz8SrFXrSUD92U1
Wgk89r7zhJqRonnXxfqIqwnA60BE36DeWgD9xHg6m25h3iBQzYf73LE2tZgI//nl
F4YW67EHcZ1rcQtla1gxmaRXmj8i84OubE56ryGH5PXxQf4hak5c9CAF942OIVY6
zvoTNpxbC5eG6EcP25PRP0uwiPR1ygMYL29lFRozfRnZDTBgwXhDQfPipY60pPWW
eU91kFl2MNvtDJOWHTCc
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:50:58 2026 by rpki-client