Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/wyikIJhzX4wYDxXLk4EmzRkDzMg.roa
File:                     wyikIJhzX4wYDxXLk4EmzRkDzMg.roa (raw, json)
Hash identifier:          fd3MjydKk9RC6HMJtXngNfW846WX32EcJCuNj7cx3lI=
Subject key identifier:   C3:28:A4:20:98:73:5F:8C:18:0F:15:CB:93:81:26:CD:19:03:CC:C8
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       0127
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/wyikIJhzX4wYDxXLk4EmzRkDzMg.roa
Signing time:             Tue 31 Mar 2026 08:17:28 +0000
ROA not before:           Tue 31 Mar 2026 08:17:28 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2514
IP address blocks:        160.248.192.0/21 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 295 (0x127)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Mar 31 08:17:28 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C328A42098735F8C180F15CB938126CD1903CCC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c1:35:01:c7:1c:87:e9:ec:fd:82:19:33:d8:
                    e5:45:97:7f:1d:c4:37:4f:af:8c:ad:19:31:da:27:
                    f9:a3:16:ff:0b:92:2b:a6:d7:84:ac:a3:d1:4c:90:
                    11:3b:85:b9:54:ac:99:f4:71:91:06:24:c0:c3:01:
                    36:87:2a:49:53:55:ed:6a:fa:b8:dc:e7:7f:dd:95:
                    da:11:3c:47:25:db:d1:3a:31:b6:a1:5a:12:65:ab:
                    40:50:47:ca:18:07:1d:97:1d:23:b8:5f:00:8a:46:
                    30:fb:91:15:5e:90:c8:7e:65:c2:11:ba:4b:e5:b7:
                    a3:0a:34:b6:0e:c6:8f:c1:83:d5:a8:75:72:6a:b6:
                    67:91:f4:de:a8:9d:e9:10:6d:af:0e:a8:b8:2e:23:
                    bd:6d:f5:39:c2:c3:bf:ce:e1:c4:85:51:8d:be:1e:
                    27:23:92:7e:8e:ed:de:6b:dc:89:13:98:5a:9f:b7:
                    fa:c7:8a:c8:8b:68:e8:e0:39:4f:73:27:a2:97:58:
                    a9:bf:a8:57:c3:37:82:ec:c6:ae:32:1d:72:f5:c3:
                    c0:2f:47:48:3e:7a:af:bf:de:0f:ad:eb:f8:8b:01:
                    bb:0b:0a:6f:ae:62:16:ef:68:dd:99:bf:50:55:6f:
                    3b:bf:bf:02:dc:63:47:29:8f:34:21:0e:4f:e2:eb:
                    f3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:28:A4:20:98:73:5F:8C:18:0F:15:CB:93:81:26:CD:19:03:CC:C8
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/wyikIJhzX4wYDxXLk4EmzRkDzMg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.248.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         34:d3:ee:0e:82:33:32:cb:cd:2b:04:0b:6e:b3:04:7f:08:01:
         b8:af:10:d3:6a:04:1a:6b:63:8a:f1:33:6e:2b:1a:1c:c4:2e:
         00:73:1a:46:a0:10:7b:dd:3f:db:dc:ba:58:bc:66:c0:ec:49:
         1e:5f:55:a4:7a:2f:0e:98:65:f3:01:37:3a:f5:dd:9e:39:df:
         2c:a6:55:b1:93:2c:a8:9e:ea:ee:de:65:37:00:24:27:6b:e8:
         da:87:4d:61:dc:90:12:e2:6c:73:90:97:48:07:9b:80:5e:06:
         f1:fd:a3:d2:a9:5f:ef:f8:33:ec:fc:da:85:eb:58:ab:78:48:
         08:07:3f:fb:dc:28:fd:b2:6c:0f:8b:17:62:4d:60:04:cd:d2:
         d8:24:2e:f0:74:ce:94:c4:a1:55:66:bb:ab:ac:8e:11:75:39:
         6f:cd:d3:b9:66:75:93:ec:7d:e1:c7:49:43:67:73:9f:00:b4:
         2c:5b:ec:03:3e:ce:02:46:7c:45:f1:14:61:b7:ae:6d:82:78:
         9f:b1:57:01:81:4b:5f:54:c3:44:d8:7b:8c:7b:e1:0a:64:45:
         a4:f5:d7:be:4c:2a:ad:27:39:92:6b:eb:0b:4b:35:18:94:eb:
         a6:03:b3:0e:c6:c0:2e:61:99:bb:bc:bc:ec:69:4c:2c:57:dd:
         a3:d2:32:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:11:50 2026 by rpki-client