Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/-1Neglp0vEsPfYUh0HWWWG7S15M.roa
File:                     -1Neglp0vEsPfYUh0HWWWG7S15M.roa (raw, json)
Hash identifier:          0b4ET5JI3nSbLQ+YrTuT2ZKnCazwzzDRxxoFLyaE8Lc=
Subject key identifier:   FB:53:5E:82:5A:74:BC:4B:0F:7D:85:21:D0:75:96:58:6E:D2:D7:93
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       08AA
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/-1Neglp0vEsPfYUh0HWWWG7S15M.roa
Signing time:             Tue 31 Mar 2026 07:44:00 +0000
ROA not before:           Tue 31 Mar 2026 07:44:00 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        211.7.150.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2218 (0x8aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:44:00 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=FB535E825A74BC4B0F7D8521D07596586ED2D793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a2:25:f6:4b:76:a0:68:ca:7d:06:84:cc:fa:
                    16:af:b7:97:23:70:ca:6a:f8:7e:dd:8c:17:dc:59:
                    e3:3c:2c:1e:e2:19:7b:6d:e2:6e:fc:68:bf:25:24:
                    85:67:33:7a:b6:38:9c:cb:01:37:7e:25:26:fd:a6:
                    a5:36:3f:30:1f:6a:77:44:12:3f:e7:a2:40:0e:34:
                    3f:17:2f:88:26:e2:4b:ae:97:42:88:7b:fa:8e:31:
                    4c:c4:e2:68:75:5d:be:1c:f5:2f:01:4e:b2:ea:71:
                    af:b8:8b:5c:05:df:5b:60:9a:0e:cd:cc:86:fd:7e:
                    dc:27:31:5f:5b:ac:f6:16:d3:dd:59:7e:bc:b5:49:
                    b1:cd:12:c7:6a:2a:d6:04:a5:99:e6:77:3f:de:fd:
                    ea:73:b2:8a:a3:a5:0b:c2:47:6e:9f:8a:44:28:07:
                    6f:ba:e7:21:ca:b2:cd:fe:ce:77:db:28:85:cd:a3:
                    99:e2:eb:88:25:41:32:a2:d2:0b:5d:18:bd:13:50:
                    91:a4:0d:67:49:48:db:8e:af:48:d0:26:b0:8d:55:
                    30:04:70:e8:3d:90:89:4b:d4:4c:7a:ee:e7:73:54:
                    f2:b4:30:24:d4:d3:a0:36:af:4c:d0:6b:e4:90:96:
                    cd:93:34:8a:95:99:02:ef:27:32:d4:75:19:a3:b6:
                    dd:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:53:5E:82:5A:74:BC:4B:0F:7D:85:21:D0:75:96:58:6E:D2:D7:93
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/-1Neglp0vEsPfYUh0HWWWG7S15M.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.7.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:20:40:e7:d2:e9:f7:83:82:c8:f6:d3:76:6e:53:a4:2a:3c:
         78:d3:e2:46:08:cb:cb:fc:59:f5:0e:61:69:ae:a1:48:9f:51:
         65:74:e8:49:a6:e0:d5:1c:3c:61:73:2e:37:be:d5:ce:e2:63:
         ef:63:bb:6a:ec:f3:e8:8b:73:c6:cb:ba:e0:40:1c:40:70:3a:
         88:93:9d:42:4f:a0:6b:bd:50:7d:30:49:82:00:c9:a4:2d:34:
         d1:d9:63:f7:cf:1b:0e:4c:ec:a2:57:c8:7b:e8:c8:de:08:0a:
         3b:b9:5e:29:43:3d:1a:11:8a:fe:ee:9c:25:10:20:db:c1:df:
         4e:f6:8c:f8:b4:a8:a6:3e:5f:5c:9b:49:b7:38:94:88:4e:ed:
         7b:c2:b5:62:0c:3b:29:d0:a2:bb:48:3c:34:64:84:ca:f8:a4:
         ac:20:84:fa:eb:ba:e3:d5:dd:56:be:17:3e:53:b0:17:09:87:
         d3:27:f6:b7:bd:57:7b:0c:a6:d4:a4:a2:62:59:24:e5:b3:26:
         a5:9b:67:a0:72:63:c0:c5:01:28:59:ec:c6:3b:74:75:6f:89:
         0e:4e:da:47:f4:6c:2a:81:ab:4b:95:66:1f:dd:9d:39:2a:a9:
         55:69:52:3d:50:e0:35:d6:02:65:4f:df:8f:8e:22:86:bb:01:
         08:a0:c0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:27:48 2026 by rpki-client