Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/0md-_JwlZla89USlvpeuBsBzwUw.roa
File:                     0md-_JwlZla89USlvpeuBsBzwUw.roa (raw, json)
Hash identifier:          RFjlBvpApTjeKkVBfRu+LXdWo5mj3UdHeFVapTWyrKs=
Subject key identifier:   D2:67:7E:FC:9C:25:66:56:BC:F5:44:A5:BE:97:AE:06:C0:73:C1:4C
Certificate issuer:       /CN=296966DD720C30575F62D8FD4149458A90AACAA4
Certificate serial:       94
Authority key identifier: 29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/0md-_JwlZla89USlvpeuBsBzwUw.roa
Signing time:             Tue 31 Mar 2026 07:35:32 +0000
ROA not before:           Tue 31 Mar 2026 07:35:32 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2497
IP address blocks:        160.13.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 03:54:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 148 (0x94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296966DD720C30575F62D8FD4149458A90AACAA4
        Validity
            Not Before: Mar 31 07:35:32 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=D2677EFC9C256656BCF544A5BE97AE06C073C14C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b5:a6:06:6f:bb:8d:a8:6d:c0:a6:4b:db:13:
                    fe:0f:19:cd:d8:ec:e9:0e:b4:ff:c7:39:f8:bf:da:
                    9a:e4:04:ef:d8:8e:cf:ee:ab:c7:6f:4a:26:65:48:
                    8b:6b:94:54:24:02:65:29:fb:a4:fd:74:1d:5b:69:
                    57:22:93:1c:57:d9:3f:21:3c:c7:5d:c6:18:73:d6:
                    a7:51:ce:fe:8b:53:bd:09:4b:37:38:22:74:7a:63:
                    c4:5f:cc:a3:6e:d6:41:71:90:63:77:56:3d:66:46:
                    23:89:f7:f9:66:1d:a5:21:c7:f8:b2:87:97:2f:2d:
                    b1:76:7c:37:4a:ea:e4:0a:43:52:c1:a2:07:cc:79:
                    9b:3f:55:34:c1:7d:f6:ff:b1:8a:05:83:fb:5a:b0:
                    97:3b:8e:18:5d:31:3d:ae:8c:aa:23:7f:b7:29:44:
                    a4:2f:14:bf:ca:3c:88:4c:3a:f3:04:c9:d2:06:47:
                    29:c5:10:ce:0c:92:b9:f2:4a:7b:46:a5:ed:50:6b:
                    10:94:24:43:82:57:d0:9f:10:97:2a:65:ef:4d:00:
                    08:26:71:bd:88:fc:6c:63:19:8a:10:c3:cf:99:e5:
                    f3:e4:83:12:25:c6:ee:7c:41:c5:47:a2:4b:2e:f6:
                    02:f9:42:47:0b:65:d8:12:f2:b8:b5:59:6c:fc:4b:
                    03:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:67:7E:FC:9C:25:66:56:BC:F5:44:A5:BE:97:AE:06:C0:73:C1:4C
            X509v3 Authority Key Identifier:
                keyid:29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/0md-_JwlZla89USlvpeuBsBzwUw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.13.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7e:42:88:62:b8:24:71:ea:39:55:ed:04:aa:3a:da:d4:07:a8:
         b7:81:8e:d4:ab:00:0e:da:ba:55:ca:a0:97:40:c4:81:12:48:
         a6:4c:28:49:3a:e6:a2:f6:89:47:a4:8f:a5:4f:ff:3a:af:ef:
         80:f5:a2:5b:d2:02:da:49:2f:ef:5e:06:99:29:72:25:6f:cb:
         2a:4e:17:60:30:7d:00:40:f8:21:5a:20:0a:b8:4e:62:39:55:
         a9:e4:c6:44:f4:0b:13:4e:12:72:fd:54:42:5e:c7:ca:00:36:
         74:68:bf:e4:71:f1:ee:96:e8:f0:07:b0:92:39:3f:ee:d0:f1:
         e9:5d:e1:ad:bb:8b:4a:8c:c0:c5:56:ed:e9:25:c8:c3:8e:a9:
         74:ac:4b:12:04:33:b8:1f:7b:13:39:42:c5:a0:ea:f3:e5:0e:
         c3:9a:ea:4f:69:ab:75:74:04:50:3a:cd:0f:39:29:95:d8:db:
         78:c6:66:c6:49:8b:9d:af:94:99:41:4e:9e:6c:73:f0:06:80:
         9e:26:fb:99:d9:a4:c6:e3:f2:b7:62:9c:18:15:11:a5:90:2b:
         f4:4a:21:a2:ca:9c:4b:44:29:c3:c6:1c:f1:f3:c7:e1:98:51:
         0f:44:e6:11:bf:72:72:7b:cb:c0:69:56:54:ee:94:38:4a:8d:
         34:73:4b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 16:28:53 2026 by rpki-client