Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/q-QFQNRovyPTXD_RQ2n-b3gDEjw.roa
File:                     q-QFQNRovyPTXD_RQ2n-b3gDEjw.roa (raw, json)
Hash identifier:          xVwP3OwrBFkH6oSJ6grRCTYsNQ4hWPXuMnlGk7K4mjo=
Subject key identifier:   AB:E4:05:40:D4:68:BF:23:D3:5C:3F:D1:43:69:FE:6F:78:03:12:3C
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       F2
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/q-QFQNRovyPTXD_RQ2n-b3gDEjw.roa
Signing time:             Tue 31 Mar 2026 08:16:59 +0000
ROA not before:           Tue 31 Mar 2026 08:16:59 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2514
IP address blocks:        143.125.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 242 (0xf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Mar 31 08:16:59 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=ABE40540D468BF23D35C3FD14369FE6F7803123C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d6:cc:72:03:1b:0f:11:29:03:cd:64:f0:9b:
                    1a:6b:a7:4e:6e:49:c2:d1:28:a4:7a:b2:b5:81:ab:
                    3f:7b:5e:08:46:07:46:1b:b1:10:50:6e:f3:42:b4:
                    90:e5:19:32:53:b0:0d:66:92:f0:ba:9d:c7:6c:24:
                    9e:75:30:d1:7d:f9:f8:ef:8f:a1:d9:83:0a:65:00:
                    e6:c6:78:fd:93:dc:42:80:ac:bb:09:19:50:ac:ec:
                    e3:78:5e:b7:96:05:81:2b:79:6d:21:26:34:f9:29:
                    0f:c8:31:17:83:2b:be:a0:87:42:3b:fc:17:ff:f0:
                    47:b9:d2:76:73:f7:a9:22:6d:7a:2f:d4:90:40:01:
                    25:2a:a9:7c:f8:26:b5:c7:d0:46:48:83:9c:d5:3e:
                    32:2d:54:90:58:82:69:08:2a:a4:f5:08:df:b0:91:
                    30:aa:36:2d:05:11:36:22:bc:ed:93:3f:f1:0d:95:
                    5f:18:33:9d:4a:ea:08:fc:28:76:19:af:95:4c:cc:
                    fa:9e:19:fa:46:eb:1e:45:c9:b0:db:ff:16:78:ba:
                    70:80:48:3e:4e:b5:09:e6:da:3a:08:a7:e8:4a:58:
                    95:66:ab:97:a6:06:16:95:c1:59:39:9d:67:2a:e0:
                    a0:c0:1b:89:18:44:8d:e8:cc:84:44:ee:45:97:3a:
                    f2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:E4:05:40:D4:68:BF:23:D3:5C:3F:D1:43:69:FE:6F:78:03:12:3C
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/q-QFQNRovyPTXD_RQ2n-b3gDEjw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.125.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         18:d2:3b:cb:4f:e6:2d:fd:e1:c3:db:11:a2:48:c4:b0:a9:b6:
         e0:25:fe:8a:25:ba:db:f2:af:02:07:19:1a:c5:f2:ec:a7:f7:
         a3:6f:06:0a:7b:cd:f4:ad:09:b5:31:4d:29:86:4b:ce:83:dc:
         0b:23:f7:ed:23:25:d7:e9:4c:3a:90:cf:48:da:49:9b:c4:f2:
         9c:04:17:1d:ea:9c:32:6d:a0:63:7d:c0:ca:81:df:60:0b:cc:
         ab:43:73:65:ce:a8:f8:8c:75:6d:ee:cd:b8:74:e3:c8:66:83:
         7c:b4:4a:26:d1:0e:5b:8d:17:c6:80:11:eb:9c:ca:7b:11:7e:
         9c:ca:68:13:b7:fc:68:c1:5e:0c:5c:98:1c:d2:6b:b2:a9:01:
         e5:cc:72:84:39:28:e9:7d:7d:f6:de:74:38:42:6d:35:5e:c0:
         f2:10:3b:7a:bb:70:e4:8e:3a:bf:8e:e2:a9:7c:f3:e2:1e:91:
         27:6a:3c:f7:47:7d:6c:96:44:e1:8b:1e:27:a6:92:2e:e3:07:
         c3:a6:11:40:f0:38:8a:f6:e4:c5:df:9c:27:21:19:b9:59:c7:
         04:93:58:d8:c6:bf:33:23:07:f7:d8:16:65:a6:a1:80:58:48:
         4e:3a:61:01:bb:28:35:42:75:72:cd:40:24:38:db:20:9d:5e:
         65:c6:8e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:02:15 2026 by rpki-client