Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/uD-IwzFo9I3XgFvp_FXXlCrJFcI.roa
File:                     uD-IwzFo9I3XgFvp_FXXlCrJFcI.roa (raw, json)
Hash identifier:          Zxbto6gP9fAFBBX+S7qefMhqNM7xmJgc0HchopuU2zo=
Subject key identifier:   B8:3F:88:C3:31:68:F4:8D:D7:80:5B:E9:FC:55:D7:94:2A:C9:15:C2
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       0116
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/uD-IwzFo9I3XgFvp_FXXlCrJFcI.roa
Signing time:             Tue 31 Mar 2026 08:17:20 +0000
ROA not before:           Tue 31 Mar 2026 08:17:20 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2514
IP address blocks:        160.248.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 278 (0x116)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Mar 31 08:17:20 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B83F88C33168F48DD7805BE9FC55D7942AC915C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:37:7b:8d:f0:03:fd:49:ca:68:6e:07:98:73:
                    ff:cb:42:9b:99:0a:8b:9f:3d:93:b6:c1:6e:d8:19:
                    11:93:fd:48:e7:99:a0:39:a2:2b:12:43:06:57:41:
                    4c:fd:6e:c3:50:59:7d:70:ed:1b:50:4b:8d:0e:c2:
                    56:80:14:1d:e5:17:ce:35:b0:a8:40:74:76:45:2a:
                    e2:42:54:87:c7:c7:83:3f:62:77:b2:e8:04:82:64:
                    1a:96:99:08:46:8e:30:66:60:2f:e8:c2:12:14:e3:
                    94:1a:7b:4a:08:77:4e:8b:2c:fb:23:f9:0f:37:3e:
                    58:88:b6:1e:50:c1:8f:18:99:95:8e:9d:77:9c:5b:
                    69:1f:10:55:ac:ce:b1:ff:e6:76:5d:27:3b:34:d8:
                    7f:d4:14:32:55:50:d0:0f:82:09:12:c5:99:4a:a9:
                    03:48:06:6f:1c:0a:9d:6c:39:62:29:6d:f9:07:3a:
                    43:f2:24:7e:17:13:ff:7b:92:9d:df:2a:e8:b0:a2:
                    3a:7c:c5:39:38:3f:8a:69:11:d0:0c:48:66:56:c0:
                    e4:46:77:3f:d3:f3:ab:d3:c1:15:43:af:90:63:1e:
                    27:64:77:94:28:6b:38:a7:df:a4:d8:36:e3:2b:39:
                    5a:f0:94:f5:98:82:62:1d:28:9e:53:54:c9:50:eb:
                    f9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:3F:88:C3:31:68:F4:8D:D7:80:5B:E9:FC:55:D7:94:2A:C9:15:C2
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/uD-IwzFo9I3XgFvp_FXXlCrJFcI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.248.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:4a:13:e7:51:c8:bd:58:71:7d:50:39:71:ff:b9:75:c1:21:
         27:3f:a5:dd:56:1c:a7:64:88:89:4c:58:c0:97:d8:f0:53:a5:
         9a:6e:13:c8:6c:83:59:ee:b1:e5:e4:e5:03:cb:b5:93:ed:88:
         29:2e:98:4c:17:ad:5a:a5:e4:86:47:97:fa:8d:95:71:82:35:
         6e:a7:18:8c:f9:e7:e6:64:6f:4f:63:b3:c5:4c:c8:c3:80:2f:
         4f:10:5f:11:71:d4:16:d7:cb:49:81:03:e7:ab:ec:5f:70:00:
         ab:c4:2a:a3:cc:fc:87:b3:c4:16:7c:b9:9a:2d:b2:32:6c:98:
         39:85:84:56:52:0d:89:d8:c9:a1:ec:08:3a:a0:3b:6a:44:2f:
         e6:2a:85:c3:50:c7:f5:9f:a4:3f:64:7d:03:2c:e2:d4:a5:ef:
         70:58:b3:22:77:05:1e:a8:e0:2c:47:41:35:c1:3b:5b:d3:cd:
         b8:59:4d:ad:65:8a:25:ef:b4:b3:3b:bf:bc:40:77:2c:61:59:
         d5:9a:ec:3e:a5:9d:2b:c9:9d:ea:01:99:68:e8:88:de:3d:c2:
         a5:a6:6b:32:0c:65:28:0d:89:51:73:96:9c:e6:e0:c1:ba:f0:
         79:c1:8a:18:81:89:0a:1d:ef:41:12:ce:30:c2:02:88:10:3c:
         e5:fd:68:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:02:16 2026 by rpki-client