Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/33/Q_rqcYmFiCn2qp36Ec5VWGQrZdM.roa
File:                     Q_rqcYmFiCn2qp36Ec5VWGQrZdM.roa (raw, json)
Hash identifier:          2em7pbOG79LUZGZIkvuXyMybDJQvYIINcOwEg+hnHuQ=
Subject key identifier:   43:FA:EA:71:89:85:88:29:F6:AA:9D:FA:11:CE:55:58:64:2B:65:D3
Certificate issuer:       /CN=CE05E71ADDEC0F8E361BB55AB103F53D3856C60A
Certificate serial:       2E
Authority key identifier: CE:05:E7:1A:DD:EC:0F:8E:36:1B:B5:5A:B1:03:F5:3D:38:56:C6:0A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zgXnGt3sD442G7VasQP1PThWxgo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/Q_rqcYmFiCn2qp36Ec5VWGQrZdM.roa
Signing time:             Sun 01 Mar 2026 01:35:23 +0000
ROA not before:           Sun 01 Mar 2026 01:35:23 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     17955
IP address blocks:        210.56.160.0/19 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zgXnGt3sD442G7VasQP1PThWxgo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE05E71ADDEC0F8E361BB55AB103F53D3856C60A
        Validity
            Not Before: Mar  1 01:35:23 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=43FAEA7189858829F6AA9DFA11CE5558642B65D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a2:a3:58:d1:1c:f1:39:d7:5d:f0:1c:c4:f9:
                    d8:45:2f:e3:c2:a8:73:f1:a2:48:f1:fe:0b:8f:cd:
                    35:a4:24:2f:e0:96:9a:88:8f:4e:ed:de:04:b0:02:
                    dc:cc:f1:4d:e8:c1:bc:da:26:61:83:dd:5e:5d:f4:
                    50:2c:45:54:60:2b:66:85:83:36:c1:04:33:21:fb:
                    30:ce:f9:04:32:62:c1:71:db:af:97:95:ea:ed:85:
                    17:38:b9:93:61:67:55:46:8f:d3:39:a6:aa:1b:fd:
                    80:b0:10:c8:c9:6e:02:c7:c2:ee:49:32:9d:98:41:
                    fd:07:ba:dc:e1:a4:3b:4a:02:0f:54:44:19:92:98:
                    6e:cb:66:2a:bb:bd:cc:25:72:34:e3:d0:df:11:b9:
                    36:fc:14:84:2e:cd:09:3f:b7:f6:6c:8d:3c:63:fc:
                    7d:9b:6a:c2:48:33:68:12:42:e0:49:9c:85:d0:52:
                    02:9d:69:9a:34:76:eb:61:77:5e:0d:2d:24:45:6a:
                    66:a6:50:28:60:14:05:f6:7b:1b:a7:eb:1e:a1:4b:
                    85:ac:88:ec:c3:06:8d:5a:e5:f1:d8:8c:35:d5:7e:
                    ea:0d:22:a4:18:f9:6f:1a:1d:3f:fb:4e:6c:2d:e7:
                    17:54:a5:f6:aa:b6:69:59:03:5b:e1:b6:bd:f5:67:
                    bd:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:FA:EA:71:89:85:88:29:F6:AA:9D:FA:11:CE:55:58:64:2B:65:D3
            X509v3 Authority Key Identifier:
                keyid:CE:05:E7:1A:DD:EC:0F:8E:36:1B:B5:5A:B1:03:F5:3D:38:56:C6:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zgXnGt3sD442G7VasQP1PThWxgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/Q_rqcYmFiCn2qp36Ec5VWGQrZdM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.56.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         10:a9:05:7d:ec:87:82:36:ea:ba:f7:e2:0f:44:38:45:a3:99:
         a6:d0:e7:84:53:d8:b9:54:aa:be:07:57:b9:7b:6a:6b:9a:1a:
         d1:6d:8a:45:c4:b5:56:20:69:56:77:dc:ce:b0:ae:45:42:45:
         16:46:d4:75:e4:9d:24:b2:23:16:8d:f7:f6:03:60:b6:08:81:
         26:cb:05:7c:fb:d0:4b:7d:8e:43:65:2e:94:1f:85:11:d7:ca:
         70:fb:9a:31:90:ca:32:55:b6:83:a3:e4:4c:93:28:7c:71:af:
         f9:0f:15:29:e5:3e:19:df:1d:27:ec:26:d0:3e:1b:95:0d:12:
         cc:d5:9f:98:67:a7:d4:70:3a:c4:4d:ba:e8:99:54:40:36:a7:
         8b:76:11:53:9b:48:c2:78:7f:07:84:a9:b9:15:82:c5:c6:6d:
         b2:cb:fe:0e:f7:7d:61:32:96:1c:2e:d2:9d:bf:4a:00:8b:c7:
         72:da:8a:3f:6c:3c:08:33:41:e5:d4:c8:ad:31:b5:50:18:85:
         1d:f6:08:6e:19:fc:7a:d1:0c:60:99:67:8f:4c:e3:09:40:48:
         44:91:c5:ad:bd:ac:48:b1:fa:51:a4:a7:9f:88:ea:89:4f:24:
         47:5c:f1:50:6a:fa:05:69:09:3a:a8:9a:0f:de:bb:5b:ad:27:
         d5:1e:3a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:57:18 2026 by rpki-client