Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/JR2T0T079mKgod_GNWsDoHRdfic.roa
File:                     JR2T0T079mKgod_GNWsDoHRdfic.roa (raw, json)
Hash identifier:          CQoJdIKHrqcr2ajSpkDp7Q/yVdXZoL34Bx2mQNMTp68=
Subject key identifier:   25:1D:93:D1:3D:3B:F6:62:A0:A1:DF:C6:35:6B:03:A0:74:5D:7E:27
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       0174
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/JR2T0T079mKgod_GNWsDoHRdfic.roa
Signing time:             Tue 31 Mar 2026 07:48:17 +0000
ROA not before:           Tue 31 Mar 2026 07:48:17 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2914
IP address blocks:        120.29.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Apr 2026 12:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 372 (0x174)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Mar 31 07:48:17 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=251D93D13D3BF662A0A1DFC6356B03A0745D7E27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c9:94:7c:47:0d:f8:8e:81:1a:9c:3e:33:3a:
                    46:be:30:86:d4:12:d1:c9:b6:6e:ab:7e:43:0e:d1:
                    8b:c3:63:36:ea:e5:e8:fe:e6:60:30:c6:67:54:99:
                    bb:d2:ab:8e:20:a4:ee:e0:00:9f:f9:31:78:e4:bc:
                    16:20:82:5e:af:97:83:17:79:9e:4b:2f:c8:99:56:
                    dc:a6:7f:5a:39:59:8f:28:ad:52:f3:24:ee:8e:a0:
                    96:31:1d:ac:03:9e:49:70:b4:d2:ce:8c:46:6f:6a:
                    63:6e:18:52:09:20:46:e0:20:5f:17:4a:d3:f5:7a:
                    71:a9:e3:53:1e:e7:c8:dd:3c:e4:d8:e8:60:5b:14:
                    2c:f9:63:d3:d0:a9:a5:69:53:a4:7e:09:f6:4f:d5:
                    8c:bc:49:3d:69:4d:dd:cf:9f:29:81:cf:ae:6a:f2:
                    37:1c:3b:95:ac:6d:5d:bd:5c:ec:cb:a0:af:dc:75:
                    d3:b6:fe:a6:f1:fc:5f:73:a6:e0:23:da:ef:cc:93:
                    21:0c:d0:bc:d4:25:43:0a:51:9e:a2:e8:8f:81:09:
                    65:a3:a4:d4:f4:3e:c4:17:30:61:4f:64:ad:47:73:
                    27:3a:1e:03:98:fe:58:7d:d4:68:b4:8b:bc:dc:e6:
                    c4:80:85:d8:cf:de:11:78:4e:02:13:d0:ee:c6:e6:
                    c7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:1D:93:D1:3D:3B:F6:62:A0:A1:DF:C6:35:6B:03:A0:74:5D:7E:27
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/JR2T0T079mKgod_GNWsDoHRdfic.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.29.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         55:8b:2a:80:24:04:62:d1:3e:8e:4f:cf:e6:89:de:9e:de:4d:
         bc:05:26:81:63:6b:ae:aa:8e:4d:71:06:16:0e:4e:4f:50:fb:
         44:6e:ad:60:1a:6f:18:62:63:e3:7f:c3:24:a8:e9:34:1b:b4:
         51:45:a3:42:f3:f8:00:55:61:05:18:19:3a:46:26:09:59:8f:
         fc:a3:d9:5a:01:02:62:33:56:99:a7:1e:4c:53:f6:be:bc:9e:
         b4:ff:ae:25:40:72:dd:d2:0d:e5:2b:62:3a:6a:7a:45:c0:7b:
         1f:6b:04:52:9b:d6:02:5c:d9:c8:f2:16:06:23:72:23:9c:7c:
         54:2e:25:e7:25:39:db:56:4e:e5:fe:d9:71:06:9f:7a:a5:f1:
         6d:c4:74:b4:55:96:b3:4f:57:28:6c:4e:03:01:79:24:dc:19:
         70:61:14:11:74:3e:5f:cf:39:f5:e0:47:0e:c0:60:c1:58:2d:
         f5:b1:b1:7c:13:b0:ff:c7:a2:c3:9f:de:51:1c:67:9b:61:3f:
         e3:77:c8:8f:dd:d9:eb:f2:8b:c8:b3:01:e5:a7:9e:47:dd:e2:
         a5:a0:30:30:35:2a:dd:4e:84:94:df:26:56:25:03:69:11:61:
         c2:84:34:02:70:53:fc:f9:bf:74:d3:70:2b:84:60:11:c2:86:
         b3:96:f9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 14:50:15 2026 by rpki-client