Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/wkk-YTZrvT_TAp5ZbRFLgsa-i8M.roa
File:                     wkk-YTZrvT_TAp5ZbRFLgsa-i8M.roa (raw, json)
Hash identifier:          p6QTLMDqw74K6Zsz1qXVu8ohlLHnbGAR6AfmAAMC/54=
Subject key identifier:   C2:49:3E:61:36:6B:BD:3F:D3:02:9E:59:6D:11:4B:82:C6:BE:8B:C3
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       0119
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/wkk-YTZrvT_TAp5ZbRFLgsa-i8M.roa
Signing time:             Tue 31 Mar 2026 08:17:21 +0000
ROA not before:           Tue 31 Mar 2026 08:17:21 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2514
IP address blocks:        160.248.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 281 (0x119)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Mar 31 08:17:21 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C2493E61366BBD3FD3029E596D114B82C6BE8BC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:94:45:a2:d2:ac:9d:aa:6f:78:c9:92:00:2a:
                    c9:7b:47:4c:be:aa:51:82:a5:c1:b7:5b:d3:c4:30:
                    30:25:52:11:c6:16:a4:c5:80:6c:20:bb:15:ba:ba:
                    c1:e4:1b:4d:f7:4b:e6:6d:9c:63:8f:64:34:b5:53:
                    21:b4:ac:eb:cc:de:19:f8:a6:38:e5:44:ff:c9:9d:
                    41:06:b3:bb:1f:5f:e2:83:a9:fe:1b:2a:5f:bc:0a:
                    96:04:2c:1b:63:34:b0:1b:d9:2f:b4:16:7c:04:e1:
                    8b:17:29:47:f7:b6:2e:d6:94:c1:f7:4e:dd:22:1f:
                    5a:70:af:7e:56:5e:2e:1a:eb:f5:ea:b6:4f:fe:8a:
                    d3:a5:00:80:3c:53:2f:20:bc:54:26:cc:e4:83:de:
                    7c:d8:b2:4f:8c:f4:d4:54:47:05:ba:9e:88:c8:58:
                    05:91:84:10:a6:ac:42:a9:a6:ef:d2:11:82:67:08:
                    a0:5d:88:af:e2:6b:3a:5d:b4:d4:65:84:df:6a:bf:
                    e2:3e:95:c9:83:f9:ed:d4:27:10:10:33:b8:c7:40:
                    d4:ea:d5:24:9f:07:b4:93:af:f7:d3:dd:cc:cb:cc:
                    6e:a1:db:5d:62:fc:c7:d2:67:d5:e7:88:a7:94:fe:
                    05:57:3e:37:ad:d7:a7:6c:0b:8b:35:8e:77:3e:fa:
                    9b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:49:3E:61:36:6B:BD:3F:D3:02:9E:59:6D:11:4B:82:C6:BE:8B:C3
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/wkk-YTZrvT_TAp5ZbRFLgsa-i8M.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.248.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:bc:2b:65:f5:69:43:01:61:30:ed:1b:03:e9:f4:90:31:75:
         36:69:0e:5c:fe:b0:ba:3c:cb:df:69:36:09:72:11:87:ff:56:
         68:f6:6d:c2:d5:d5:8c:c3:bc:dc:9a:38:58:de:50:0e:44:3e:
         d6:df:92:fc:59:bd:3f:58:a9:c1:85:a5:ad:9c:16:d5:6b:83:
         17:c4:b4:38:cb:16:48:4d:04:a3:2b:bd:2c:d5:c2:79:84:fa:
         97:92:4c:79:ec:5a:11:d6:97:6a:ca:3d:14:eb:13:6a:cb:ae:
         b1:d8:83:72:2c:91:a0:6e:20:b6:db:b6:81:3e:19:56:aa:3c:
         1d:3a:7f:7f:e7:c9:04:23:3a:dc:1b:e2:0a:b7:97:c6:6e:c0:
         6b:65:e6:d7:86:6e:24:57:ad:b6:bb:a0:a9:73:6f:9a:e1:92:
         09:d0:5f:cb:59:28:ec:f2:91:39:58:25:f0:99:ca:77:99:a0:
         47:04:85:60:14:a5:ba:f1:a3:ea:bc:0b:75:b6:43:2d:59:6d:
         f8:53:81:af:0e:bf:63:6e:38:2b:4b:5b:82:bf:c5:5f:b8:35:
         51:a2:be:75:f0:b5:0f:1e:e2:01:46:d1:9c:94:82:c8:f0:50:
         44:60:06:38:b6:96:cc:3b:76:a7:60:ee:dd:86:bf:11:c7:b6:
         fa:a0:38:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:02:13 2026 by rpki-client