Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/-5teL1lUFBE7Wkm3kpLLlLXguog.roa
File:                     -5teL1lUFBE7Wkm3kpLLlLXguog.roa (raw, json)
Hash identifier:          UF561Lfa75RvjyOS1H1a3Rd0fR25M31iTiP1Bb+VFB4=
Subject key identifier:   FB:9B:5E:2F:59:54:14:11:3B:5A:49:B7:92:92:CB:94:B5:E0:BA:88
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       08F8
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/-5teL1lUFBE7Wkm3kpLLlLXguog.roa
Signing time:             Tue 31 Mar 2026 07:44:35 +0000
ROA not before:           Tue 31 Mar 2026 07:44:35 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        210.229.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2296 (0x8f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:44:35 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=FB9B5E2F595414113B5A49B79292CB94B5E0BA88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ec:aa:df:1f:a2:14:e1:f2:e7:eb:d9:7a:57:
                    1c:b6:b3:c9:4d:f7:bb:d5:3c:de:cc:42:8f:d8:b4:
                    f6:f3:8f:e5:5d:1a:88:e9:b6:01:61:be:9b:d0:04:
                    96:9a:1f:30:c1:4f:e8:d3:1b:88:ec:61:e7:9f:51:
                    57:08:b0:39:71:9e:d7:ac:fd:8c:b8:7f:92:96:0d:
                    4e:4c:a0:7a:b5:8f:09:2a:4e:5a:76:95:3b:fa:46:
                    7c:68:3b:8c:65:e4:6a:b9:c4:6a:ca:dd:c5:5a:0d:
                    34:21:13:a8:80:9e:78:e0:cc:71:f0:e7:a1:53:f0:
                    8e:f2:38:b9:1d:94:7c:57:ce:4f:e3:32:57:44:6c:
                    38:12:0a:74:74:06:11:74:ac:a3:08:41:ee:66:f9:
                    67:2d:1a:94:af:2c:7f:67:d4:5e:23:1a:18:d9:46:
                    11:13:d3:9a:8c:89:35:a3:ef:d1:69:27:0d:1d:64:
                    f3:0a:fd:48:5c:2d:4e:13:31:6b:b3:58:20:a7:84:
                    b0:43:4c:6a:61:35:20:f3:77:23:27:33:7a:ad:d0:
                    37:d9:c4:99:6b:a0:08:e3:3d:d6:e3:74:0f:f8:51:
                    5b:7c:ff:01:57:a1:2f:96:94:4e:e1:30:b7:89:3f:
                    7f:bf:b9:42:f0:7d:bc:45:bb:13:1f:fa:1e:7f:ef:
                    63:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:9B:5E:2F:59:54:14:11:3B:5A:49:B7:92:92:CB:94:B5:E0:BA:88
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/-5teL1lUFBE7Wkm3kpLLlLXguog.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.229.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:b6:83:5b:ab:1b:c2:2f:85:8e:85:2f:23:0b:1e:15:a3:77:
         dc:ee:e0:e4:e6:05:9a:47:bd:6d:7c:9f:30:e9:1e:c7:6a:fe:
         0b:ee:43:35:3d:a5:c8:e8:fa:d0:76:aa:4e:74:8b:00:cb:f2:
         1a:f0:db:90:01:80:5a:7b:28:bc:22:52:c0:61:b9:63:60:fa:
         89:89:1f:97:cd:35:1c:3a:cb:55:25:10:ed:4d:a4:0b:12:8a:
         de:63:51:e3:1d:c2:99:f1:93:bb:6d:be:f3:ce:ae:ee:b0:60:
         ec:cf:d6:c8:19:30:be:f1:e3:41:82:5b:37:ec:c8:b3:6f:0d:
         ae:7b:b0:6c:58:24:ec:54:a7:1f:bd:70:c2:67:6d:fd:be:1c:
         ac:6f:b1:93:06:ad:2b:7b:57:56:8b:68:ab:8c:c3:92:1d:c6:
         aa:76:ae:48:d7:76:cc:fe:2d:6b:9e:87:a1:3b:42:28:09:b5:
         43:28:63:5c:db:c8:96:cb:2b:6c:83:8c:8e:d0:c4:7a:bd:3e:
         90:4a:28:f0:35:86:3a:d3:87:46:d9:a6:4a:7e:19:14:20:82:
         30:6f:ca:39:07:32:d7:6b:14:ec:6d:b5:71:78:6d:1f:b1:42:
         f1:6e:c4:bd:fc:9c:dd:c0:15:f6:74:37:a5:6a:d6:1c:16:2e:
         a7:39:e8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:23:29 2026 by rpki-client