Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/530/FDIWukXiu-plioIsyAb-dJZtNnM.roa
File:                     FDIWukXiu-plioIsyAb-dJZtNnM.roa (raw, json)
Hash identifier:          Pdy55HFxrd8yxnxPQVUA2FXK4OYL+F7I44zaNfhe+aM=
Subject key identifier:   14:32:16:BA:45:E2:BB:EA:65:8A:82:2C:C8:06:FE:74:96:6D:36:73
Certificate issuer:       /CN=40D220B9E4A6358E03CD47864517D9D300B06FF0
Certificate serial:       71
Authority key identifier: 40:D2:20:B9:E4:A6:35:8E:03:CD:47:86:45:17:D9:D3:00:B0:6F:F0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/FDIWukXiu-plioIsyAb-dJZtNnM.roa
Signing time:             Tue 31 Mar 2026 07:32:10 +0000
ROA not before:           Tue 31 Mar 2026 07:32:10 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     59125
IP address blocks:        160.237.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/QNIgueSmNY4DzUeGRRfZ0wCwb_A.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/QNIgueSmNY4DzUeGRRfZ0wCwb_A.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 03:54:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 113 (0x71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40D220B9E4A6358E03CD47864517D9D300B06FF0
        Validity
            Not Before: Mar 31 07:32:10 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=143216BA45E2BBEA658A822CC806FE74966D3673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:b8:56:0c:63:6f:e8:48:3a:f5:3b:0d:5d:b1:
                    ec:02:5b:4c:00:f0:e3:30:8c:ab:04:26:be:60:e6:
                    e0:8b:60:da:86:5d:5c:53:f7:07:1d:da:bc:de:aa:
                    ba:36:11:83:4f:04:c5:ce:ee:f9:f1:e2:ab:1b:d2:
                    23:8e:48:e2:bc:44:92:b0:ec:4a:08:0f:a0:f9:0b:
                    49:59:93:b2:7b:87:1f:22:99:a2:07:b9:1f:4a:95:
                    c4:11:03:db:db:8d:67:c5:01:ef:0a:59:b2:d2:67:
                    ee:86:3d:23:ab:e5:76:3e:ac:46:ff:e5:6b:87:92:
                    e4:ea:e9:6d:8d:27:2e:5f:bf:a5:ec:2c:c4:19:7a:
                    63:b3:5b:6d:bf:f1:6e:78:78:b9:8a:74:b9:69:b7:
                    7d:04:05:55:7c:75:8c:31:c0:c6:a9:9a:6e:2e:11:
                    95:93:8d:a4:17:ad:ae:0f:9e:0f:52:9e:16:fa:0f:
                    2e:de:81:60:a2:c5:c4:ad:f1:8d:da:d5:4f:b4:6f:
                    52:c7:95:77:49:26:d0:11:4a:da:b2:2d:3d:01:40:
                    27:ac:6a:98:29:ef:61:de:25:33:26:82:da:9c:d8:
                    dc:d6:60:46:14:2b:f6:5b:89:26:8d:4e:e6:5f:65:
                    cc:3b:e7:b2:05:aa:12:eb:1f:cf:b7:1c:ec:e4:b6:
                    b5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:32:16:BA:45:E2:BB:EA:65:8A:82:2C:C8:06:FE:74:96:6D:36:73
            X509v3 Authority Key Identifier:
                keyid:40:D2:20:B9:E4:A6:35:8E:03:CD:47:86:45:17:D9:D3:00:B0:6F:F0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/QNIgueSmNY4DzUeGRRfZ0wCwb_A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/FDIWukXiu-plioIsyAb-dJZtNnM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.237.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ac:88:4c:05:3e:9d:05:93:f2:5c:0d:92:71:4a:28:65:cf:bc:
         f7:f8:fe:fb:31:b7:1e:97:28:d7:7a:55:c1:78:9c:21:5b:04:
         c7:88:d8:12:fd:06:97:bb:fb:97:f8:c8:f2:f1:f9:1a:b4:27:
         a8:1b:d0:06:cf:ec:2f:f8:06:62:cf:a7:4e:14:76:33:04:28:
         5b:51:70:d3:21:d9:70:f0:e0:f1:09:19:2e:e7:c3:d3:70:5a:
         63:91:26:a6:2a:80:ed:56:9f:0a:08:60:c6:5e:0f:33:d2:28:
         7d:8b:2f:76:f0:f3:6f:95:1e:d9:40:23:51:60:24:e4:51:e1:
         07:59:43:0c:8f:2f:52:4c:bc:fd:ac:f4:8a:e0:ac:d5:7e:18:
         04:02:1b:c8:1a:50:61:26:44:f2:17:f3:bb:fb:cb:84:4d:46:
         a5:06:59:e6:30:e9:0d:2e:0c:53:da:12:6c:d2:0c:b8:7a:35:
         5e:1a:35:bb:30:50:6c:cc:ab:c7:1a:48:bf:a5:ba:eb:81:a7:
         17:42:31:66:09:14:ef:c0:74:65:c6:97:d0:4c:c7:96:8b:48:
         8c:70:9c:b1:b0:be:48:74:9a:a4:fa:c2:d1:38:fa:21:2c:ef:
         81:9c:f4:1f:ad:52:1e:ca:cc:5e:5d:be:be:eb:61:0c:d2:ea:
         71:1d:23:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 16:34:59 2026 by rpki-client