Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/530/dySzQDHBHr53PO6elHa39nuxWVM.roa
File:                     dySzQDHBHr53PO6elHa39nuxWVM.roa (raw, json)
Hash identifier:          JiI9GO9K3+lGRROsqAVpvJDW9JKk4/GRG3GfGufYiyw=
Subject key identifier:   77:24:B3:40:31:C1:1E:BE:77:3C:EE:9E:94:76:B7:F6:7B:B1:59:53
Certificate issuer:       /CN=40D220B9E4A6358E03CD47864517D9D300B06FF0
Certificate serial:       78
Authority key identifier: 40:D2:20:B9:E4:A6:35:8E:03:CD:47:86:45:17:D9:D3:00:B0:6F:F0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/dySzQDHBHr53PO6elHa39nuxWVM.roa
Signing time:             Tue 31 Mar 2026 07:32:15 +0000
ROA not before:           Tue 31 Mar 2026 07:32:15 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131925
IP address blocks:        160.237.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/QNIgueSmNY4DzUeGRRfZ0wCwb_A.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/QNIgueSmNY4DzUeGRRfZ0wCwb_A.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 03:54:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120 (0x78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40D220B9E4A6358E03CD47864517D9D300B06FF0
        Validity
            Not Before: Mar 31 07:32:15 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7724B34031C11EBE773CEE9E9476B7F67BB15953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f9:b1:b7:00:f2:5f:5c:8e:a0:af:ab:5d:73:
                    bc:fd:06:fa:45:d5:24:a0:e6:8f:c7:e1:ef:b1:31:
                    32:d1:08:97:85:d3:2d:45:44:27:58:f8:a2:8d:65:
                    a6:2e:00:07:86:35:0d:9d:1c:72:5c:76:8b:38:4f:
                    0f:dc:db:77:e5:6c:a2:8a:c5:2b:e6:29:3c:21:6a:
                    d6:12:56:9d:95:d4:0b:79:31:1c:54:ab:a9:be:99:
                    cd:c5:ae:21:dc:1b:66:8b:f1:48:05:77:a2:b0:ac:
                    b1:9a:b5:83:ad:ae:a2:1a:fc:61:26:bb:bc:28:b4:
                    0b:1c:3b:f0:bc:5e:ef:82:e0:8c:8a:79:f0:c1:6d:
                    58:87:4b:37:50:87:10:80:9c:33:f8:51:39:c0:02:
                    72:91:d2:bf:db:9d:70:80:2f:2f:50:23:18:72:1e:
                    c7:d4:16:cd:d8:8b:49:54:6f:fa:d5:82:73:63:07:
                    f3:76:e8:12:e6:43:d5:31:76:54:9f:53:29:81:40:
                    1f:7b:e1:3f:71:11:b9:f6:85:4b:7c:e4:eb:3e:ee:
                    4c:22:32:bd:60:64:69:cb:2c:b8:b5:67:0a:18:64:
                    c1:aa:bf:54:b2:73:77:57:c8:7c:30:a4:93:57:b1:
                    ef:99:1a:a1:d2:d6:29:03:a4:b0:aa:47:cd:5f:78:
                    27:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:24:B3:40:31:C1:1E:BE:77:3C:EE:9E:94:76:B7:F6:7B:B1:59:53
            X509v3 Authority Key Identifier:
                keyid:40:D2:20:B9:E4:A6:35:8E:03:CD:47:86:45:17:D9:D3:00:B0:6F:F0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/QNIgueSmNY4DzUeGRRfZ0wCwb_A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/dySzQDHBHr53PO6elHa39nuxWVM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.237.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:54:8a:31:93:c9:d8:03:f1:dc:4c:ef:12:f8:aa:54:b7:62:
         23:eb:c5:d8:4d:ff:fe:09:70:ae:ec:8e:d6:f9:bf:6d:80:2f:
         8f:19:d2:ab:37:fc:80:cf:79:41:e4:56:52:84:ab:6b:2a:f6:
         6c:f8:2c:da:41:97:82:55:97:94:66:2d:d5:e4:b2:61:7a:2c:
         7b:a0:c8:0d:6f:d2:22:cb:e3:65:24:6f:60:aa:56:c9:d2:53:
         9b:92:84:bf:52:07:76:48:57:00:f1:e4:77:7b:75:b2:da:4e:
         c3:81:1e:59:97:72:bc:64:d4:63:16:c0:ff:25:24:62:02:eb:
         e8:b7:db:72:18:d1:65:be:6e:d3:82:c3:c5:c1:01:0c:c3:97:
         db:25:fc:cf:37:74:e1:57:21:42:51:c6:f6:a2:cb:d7:f8:90:
         7d:3e:ae:b7:0b:40:fd:a4:ee:ae:32:ca:e5:95:5b:73:f5:b1:
         4d:44:39:fc:d6:af:69:91:91:2d:fd:f4:03:41:79:5d:57:b4:
         c8:83:30:bb:f4:02:36:2e:5e:e2:e8:85:41:7b:3c:49:38:dc:
         40:76:96:12:5b:c0:67:8d:ee:90:5e:1f:37:c0:ca:0c:86:ba:
         c2:2f:a4:92:98:02:13:21:2e:fe:db:9d:e5:71:53:e3:04:39:
         44:54:34:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 16:28:50 2026 by rpki-client