Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/jYrcY1hykQH7YJ4mBJJ_13Zqmds.roa
File:                     jYrcY1hykQH7YJ4mBJJ_13Zqmds.roa (raw, json)
Hash identifier:          57x/zF5D2gJTEWKq066ytp98AOxUEEoAKb6ByVOUCns=
Subject key identifier:   8D:8A:DC:63:58:72:91:01:FB:60:9E:26:04:92:7F:D7:76:6A:99:DB
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       0105
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/jYrcY1hykQH7YJ4mBJJ_13Zqmds.roa
Signing time:             Tue 31 Mar 2026 08:17:13 +0000
ROA not before:           Tue 31 Mar 2026 08:17:13 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2514
IP address blocks:        160.248.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 261 (0x105)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Mar 31 08:17:13 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=8D8ADC6358729101FB609E2604927FD7766A99DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f3:52:28:86:cb:ef:68:4d:49:4a:a1:b6:f3:
                    4e:df:c0:1f:40:9a:74:70:9f:f8:f4:e0:9a:28:92:
                    60:26:5a:b4:a7:46:6d:91:2e:3f:ea:7b:bc:2e:ff:
                    7e:00:97:70:05:83:87:ed:51:b0:96:4a:6b:21:12:
                    46:73:e9:e2:c9:15:cb:c6:68:27:9c:5b:f7:2e:c8:
                    ff:d4:35:62:0a:a8:1f:3b:8d:c4:8a:7a:f8:c5:44:
                    08:4c:3f:d6:a7:cc:d3:be:93:18:b8:25:09:c8:f0:
                    e1:97:14:f0:43:18:88:fe:b8:65:90:7f:c9:2b:ae:
                    3e:35:82:86:9e:7d:3f:68:a2:fd:7b:ee:6b:03:99:
                    de:ed:45:67:97:dc:86:40:4d:96:85:ae:ad:89:c3:
                    d7:11:9d:ab:59:d5:e9:80:76:17:9c:a9:4e:1d:8a:
                    11:ef:5a:02:65:ad:7c:74:02:33:21:f1:29:f6:7e:
                    34:d9:44:27:7e:4e:2e:8b:e5:7e:e8:b5:d5:2b:83:
                    0e:61:33:93:65:12:86:a7:a0:05:db:a7:00:69:47:
                    0e:a7:e9:5e:b2:df:27:7d:e2:84:e2:23:4a:5b:69:
                    e9:45:65:e9:02:ac:28:7a:66:cb:c8:5b:57:f1:91:
                    d4:dd:84:66:f5:99:1b:04:6a:cf:af:b9:5e:35:1e:
                    94:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:8A:DC:63:58:72:91:01:FB:60:9E:26:04:92:7F:D7:76:6A:99:DB
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/jYrcY1hykQH7YJ4mBJJ_13Zqmds.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.248.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:89:64:ec:df:4d:9c:75:0d:d6:85:ed:48:a2:71:c8:61:91:
         5b:09:5d:56:cb:f2:72:cb:fb:66:63:19:6b:f1:27:70:54:55:
         3f:2c:50:ad:c0:9f:af:ae:28:dd:41:15:e6:b5:aa:f2:71:85:
         22:72:0d:ae:8f:48:80:c6:b6:2c:18:7c:26:46:7e:fd:be:81:
         a6:ad:72:43:51:1a:3f:77:1d:ad:ef:19:1b:3b:ff:d9:29:e9:
         7b:b3:4e:77:5d:cd:6a:0a:d0:5e:e0:e4:8e:a2:40:4e:d8:48:
         c5:41:7a:b7:7a:18:bc:48:5d:7e:dc:a3:ef:39:a7:25:87:12:
         6b:f8:b2:6a:95:76:f6:60:0b:d3:f1:58:be:ff:d5:22:65:88:
         88:6b:35:b9:bb:5f:30:e0:8b:ca:37:a2:54:70:39:0e:1c:80:
         cb:24:b0:85:7e:2a:56:d8:9d:12:cb:87:f7:33:ba:9e:64:7f:
         fd:57:20:cd:12:fa:a5:53:98:72:7d:4c:d9:f8:4e:4c:08:85:
         c5:61:28:ba:69:c3:09:75:a4:cd:e1:52:e9:64:0f:86:20:c8:
         29:d1:ee:61:6e:6a:08:f0:03:6b:8c:16:bb:6f:48:15:11:bd:
         8e:74:b6:2d:81:c6:e5:b0:eb:48:bc:69:f2:1b:20:2d:b7:f0:
         88:c5:af:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:02:48 2026 by rpki-client