Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/-yT47HsIe6o5MOUJ9pAgu-vdjdA.roa
File:                     -yT47HsIe6o5MOUJ9pAgu-vdjdA.roa (raw, json)
Hash identifier:          ZiQA/mc/V2aGF+bHcVSALfp6OSzNvZez3u/7tIOnHro=
Subject key identifier:   FB:24:F8:EC:7B:08:7B:AA:39:30:E5:09:F6:90:20:BB:EB:DD:8D:D0
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       08C6
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/-yT47HsIe6o5MOUJ9pAgu-vdjdA.roa
Signing time:             Tue 31 Mar 2026 07:44:14 +0000
ROA not before:           Tue 31 Mar 2026 07:44:14 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        210.254.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2246 (0x8c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:44:14 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=FB24F8EC7B087BAA3930E509F69020BBEBDD8DD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e8:63:dd:84:90:44:e1:2d:8e:c8:60:81:15:
                    1b:9e:a1:f5:e3:93:28:90:ba:2c:ad:84:ca:58:08:
                    7e:98:91:df:3a:9d:98:c4:e0:ab:7c:14:44:0c:e5:
                    06:c5:e7:27:c2:2e:51:8c:77:58:5c:c1:61:d9:fb:
                    54:d0:a6:f4:11:56:45:a8:58:a7:0f:e0:9b:bf:d2:
                    fe:ce:0d:c9:d4:de:e9:cc:f6:06:e8:2b:2a:d7:5f:
                    ff:d6:7b:80:11:1c:e0:33:35:83:00:bc:cf:48:8e:
                    ed:18:f7:f2:ae:9a:74:95:82:bc:27:45:ac:1a:25:
                    77:88:dc:1a:39:10:47:85:22:dd:7b:58:54:2b:25:
                    e0:08:39:f6:6f:86:cb:bf:d9:39:ee:c8:8b:5e:88:
                    b0:e1:44:a2:2b:db:14:4d:6f:f5:e0:8d:7a:a8:28:
                    af:6f:bd:3f:42:ad:cc:3a:04:0f:90:b8:03:3f:54:
                    ae:d0:7e:ec:41:91:94:62:dd:87:27:a5:4e:43:4d:
                    b5:25:ea:7c:b1:03:fe:47:35:14:87:26:dd:86:be:
                    dd:28:57:bb:9e:71:ed:ac:81:e8:22:48:12:a5:41:
                    55:cd:77:8b:ca:e8:54:d4:e8:66:ce:93:98:f4:59:
                    1b:f6:58:42:2f:31:19:8e:49:dd:59:f5:64:b5:98:
                    93:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:24:F8:EC:7B:08:7B:AA:39:30:E5:09:F6:90:20:BB:EB:DD:8D:D0
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/-yT47HsIe6o5MOUJ9pAgu-vdjdA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.254.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:16:02:2e:f1:c9:02:dc:56:eb:57:80:74:38:8e:a2:a6:08:
         e4:06:35:f8:a1:df:00:5e:76:87:72:97:07:83:e1:fc:e2:e2:
         ef:5e:f7:10:12:24:f1:f1:e2:6d:61:c2:01:ba:07:a3:25:67:
         59:e0:dd:14:8f:64:04:37:0a:c7:57:ff:e1:ce:73:d3:51:8e:
         91:df:09:e7:7c:dc:9d:d4:92:71:4f:d6:de:dc:4b:fc:79:40:
         f2:cb:4a:4c:98:47:fb:f3:00:27:53:a7:de:2d:e9:d5:07:40:
         78:27:66:31:5e:6d:9a:35:cc:b6:63:32:fa:53:ff:85:f7:37:
         df:f9:a2:c4:a3:ab:31:61:1a:3b:db:0b:3a:a2:16:29:a9:d0:
         78:af:55:a2:fb:e1:cb:5a:5f:7c:e0:4f:de:48:a1:15:36:f0:
         4a:60:47:8e:12:d3:c5:8c:75:ee:cf:0d:15:cb:34:6f:f7:5b:
         c1:60:46:fc:d3:8e:35:e0:f8:f8:00:6a:30:21:fe:08:67:09:
         ce:04:45:ee:a3:d4:49:ad:92:d3:0e:13:07:07:8d:2b:5a:5d:
         a7:5f:0c:81:a6:67:96:5e:51:fe:20:f0:29:20:c4:c8:2e:38:
         d2:87:95:4b:b7:08:f9:e6:a2:05:18:ce:f1:41:2f:21:ed:69:
         22:6b:aa:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:47 2026 by rpki-client