Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/xyFSAIeKc2HkaDUdFWDIf8NQ2Yk.roa
File:                     xyFSAIeKc2HkaDUdFWDIf8NQ2Yk.roa (raw, json)
Hash identifier:          Z4v9a12A97qaGI7RGiBUNhmp96AMNUEvpyd5qjlVuL0=
Subject key identifier:   C7:21:52:00:87:8A:73:61:E4:68:35:1D:15:60:C8:7F:C3:50:D9:89
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       010B
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/xyFSAIeKc2HkaDUdFWDIf8NQ2Yk.roa
Signing time:             Tue 31 Mar 2026 08:17:16 +0000
ROA not before:           Tue 31 Mar 2026 08:17:16 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2514
IP address blocks:        160.248.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 267 (0x10b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Mar 31 08:17:16 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C7215200878A7361E468351D1560C87FC350D989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1f:3a:ad:ce:6f:12:92:1f:25:4b:69:f0:f2:
                    8e:60:82:bb:bc:2b:fd:92:15:e0:04:c1:4f:33:82:
                    82:d9:b9:12:66:dd:d6:06:f0:ba:c2:99:62:f0:c6:
                    c6:40:5b:22:66:6d:51:7c:9b:c6:35:66:6f:c0:cd:
                    86:a8:56:e3:9b:9a:7b:42:3f:4a:f0:90:92:25:c2:
                    34:f9:97:f1:c7:e7:87:34:ea:8f:03:dc:2f:81:4e:
                    25:65:e7:48:bd:83:2b:35:af:65:45:cb:19:ad:01:
                    e7:e6:b2:cc:9f:47:59:cb:2e:86:ed:e1:52:9c:7e:
                    5b:fa:9e:e4:57:b4:2a:64:29:6d:f9:33:1d:47:fd:
                    7a:90:fe:1a:69:8d:7e:39:f0:e8:e1:1a:9b:3b:4a:
                    3b:30:4d:a2:a0:38:a9:9f:16:2e:a1:ff:7f:a2:6d:
                    9e:80:2d:dd:93:6d:e7:d0:9f:c6:a6:48:10:8f:a5:
                    65:c2:e7:c7:20:fb:d4:6f:1a:93:32:8c:ef:81:d6:
                    0a:fb:f6:3c:f9:c9:4a:57:d7:e6:d4:c1:f6:90:0d:
                    26:6c:98:62:cb:56:3a:77:2e:c7:ab:82:88:a4:e9:
                    72:ac:aa:8f:39:6b:50:f7:e1:e7:81:c1:49:3e:5b:
                    36:e6:da:1a:68:a2:3a:73:fc:89:e8:52:64:e4:20:
                    d4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:21:52:00:87:8A:73:61:E4:68:35:1D:15:60:C8:7F:C3:50:D9:89
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/xyFSAIeKc2HkaDUdFWDIf8NQ2Yk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.248.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         52:5e:75:3f:dc:0f:6a:0c:99:19:1b:05:92:ce:4e:b8:02:83:
         ea:e2:7b:4c:61:62:74:03:8c:ce:86:09:6a:cd:8d:35:2f:b4:
         f9:18:1b:bf:86:e5:1e:a1:70:41:cc:4f:ab:d5:6e:bf:a8:c0:
         c1:be:bd:0c:1a:c0:03:14:5b:7a:00:06:46:cf:82:c9:25:c2:
         d7:67:57:2c:fa:81:f3:99:82:fc:36:71:7c:ce:16:26:89:2d:
         54:bc:bb:69:6e:4f:1c:47:44:0e:bd:6f:4f:d7:7f:aa:cd:9d:
         27:40:b1:bb:e4:69:db:7f:b5:71:69:56:8a:73:22:86:44:03:
         44:87:67:80:cf:ac:1e:42:44:74:e1:8e:0a:b6:38:7a:b1:d0:
         1f:02:56:f8:bd:b6:13:cc:97:14:a0:30:2b:c2:6c:ad:dc:a7:
         19:ce:f2:eb:44:7b:3d:34:f6:eb:8d:be:5b:bb:17:d6:7d:c3:
         e9:6a:0a:77:95:1d:4a:24:c6:ee:19:d8:66:c1:4b:a1:81:38:
         e7:69:37:ef:9a:24:b9:40:35:08:ab:63:c7:ff:92:ad:a8:6c:
         11:ef:37:ee:51:d2:29:84:2d:22:66:0e:57:00:a0:50:a9:df:
         96:9b:6e:4c:1d:56:9b:c8:80:a0:7f:c0:38:6c:30:d0:19:ea:
         64:0f:d2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:02:26 2026 by rpki-client