Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/20289/Dlb58CmvqF8Wxq9vYUixrlL0VX0.roa
File:                     Dlb58CmvqF8Wxq9vYUixrlL0VX0.roa (raw, json)
Hash identifier:          qGohserCaCBKqkxrbtD/kv8SiNbCsURLvzZKJ2lag/M=
Subject key identifier:   0E:56:F9:F0:29:AF:A8:5F:16:C6:AF:6F:61:48:B1:AE:52:F4:55:7D
Certificate issuer:       /CN=FD640F920FB630F59CE577B5640918AD72D8E933
Certificate serial:       03
Authority key identifier: FD:64:0F:92:0F:B6:30:F5:9C:E5:77:B5:64:09:18:AD:72:D8:E9:33
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_WQPkg-2MPWc5Xe1ZAkYrXLY6TM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20289/Dlb58CmvqF8Wxq9vYUixrlL0VX0.roa
Signing time:             Wed 04 Nov 2026 03:21:05 +0000
ROA not before:           Wed 04 Nov 2026 03:21:05 +0000
ROA not after:            Thu 04 Nov 2027 03:08:29 +0000
asID:                     58791
IP address blocks:        160.251.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20289/_WQPkg-2MPWc5Xe1ZAkYrXLY6TM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20289/_WQPkg-2MPWc5Xe1ZAkYrXLY6TM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_WQPkg-2MPWc5Xe1ZAkYrXLY6TM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 04:25:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD640F920FB630F59CE577B5640918AD72D8E933
        Validity
            Not Before: Nov  4 03:21:05 2026 GMT
            Not After : Nov  4 03:08:29 2027 GMT
        Subject: CN=0E56F9F029AFA85F16C6AF6F6148B1AE52F4557D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b8:7d:1a:47:eb:47:83:fe:7e:98:e9:68:aa:
                    37:0b:2e:0a:73:5e:d6:3e:3e:45:f9:79:0f:3f:82:
                    d3:9c:06:4a:15:69:c5:0b:27:60:13:58:48:9e:89:
                    86:00:aa:a4:97:4b:d8:93:4b:e6:76:cd:5b:51:ae:
                    6a:73:d3:77:37:0f:cc:3e:e8:cb:ba:d3:c3:2c:f4:
                    b2:17:13:9b:fd:84:22:b3:af:19:c7:f1:aa:ec:9c:
                    07:bd:8f:c5:aa:38:ab:03:d1:a5:db:8a:7f:38:b5:
                    eb:6b:45:1d:19:bb:e6:ef:3f:1e:65:89:01:ea:7f:
                    e9:d3:0f:4e:0b:0f:ae:ee:6c:26:96:63:c1:9e:e0:
                    4b:22:ee:96:f4:a6:e9:a7:b4:34:f7:08:ac:c0:29:
                    79:b4:b4:06:2d:07:11:d5:aa:12:17:01:74:18:55:
                    ea:e3:ba:63:46:b5:e1:80:54:79:93:ed:73:cd:dd:
                    46:b2:be:67:b0:42:9e:3b:d4:90:0c:bf:1e:16:cc:
                    1f:61:82:4f:47:57:8f:dd:69:14:44:0b:e4:f6:cb:
                    fc:2b:50:e6:34:00:39:3e:8a:58:0d:35:f9:89:3a:
                    22:9a:58:e9:a6:5f:22:32:76:07:ed:d2:1c:d1:d1:
                    a5:df:43:45:83:79:ca:27:2f:0e:fa:14:e8:79:29:
                    e3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:56:F9:F0:29:AF:A8:5F:16:C6:AF:6F:61:48:B1:AE:52:F4:55:7D
            X509v3 Authority Key Identifier:
                keyid:FD:64:0F:92:0F:B6:30:F5:9C:E5:77:B5:64:09:18:AD:72:D8:E9:33

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20289/_WQPkg-2MPWc5Xe1ZAkYrXLY6TM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_WQPkg-2MPWc5Xe1ZAkYrXLY6TM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20289/Dlb58CmvqF8Wxq9vYUixrlL0VX0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.251.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:58:78:45:88:a6:5e:75:1c:1a:8c:d2:2f:15:b6:44:81:6c:
         4b:69:ca:a0:04:2c:51:2b:d6:34:88:ff:e4:4a:bf:3d:59:e8:
         83:b7:f6:8d:3f:bf:b9:80:ab:49:1e:7e:d5:32:39:bb:6c:7c:
         c2:cc:0d:2e:23:7b:31:53:cb:55:f3:c2:d5:25:17:f8:97:d9:
         35:4a:e9:18:cb:c0:9d:4d:e8:31:5f:a8:42:a0:dc:8e:92:4c:
         1a:3e:57:26:eb:da:e2:aa:b3:e3:ce:0f:69:98:e0:dd:0e:24:
         df:11:65:78:f2:6d:73:7c:3d:3b:ef:22:57:93:20:27:b0:8f:
         9e:a4:b9:16:de:2f:ca:6b:f6:1e:ed:01:eb:3d:08:0d:44:af:
         a5:9e:6b:71:c1:a1:66:85:30:bc:7f:f7:b4:f2:7b:f3:0e:12:
         6b:fa:c2:45:2d:f5:1f:96:0f:c4:f9:25:ad:85:20:8f:99:cb:
         01:0e:ca:16:42:18:55:c1:d3:d2:6c:38:5a:7c:8e:8c:8e:66:
         20:80:68:48:c1:03:66:7f:0b:e2:94:2e:e2:71:d2:fa:92:8c:
         6e:71:d6:57:9c:f2:05:33:7a:61:de:c9:ba:cf:b3:72:72:a7:
         f6:f8:4b:86:e5:8b:bb:21:41:29:93:52:e7:e2:2b:0e:0a:8e:
         c2:18:03:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:23:04 2026 by rpki-client