Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/0BYA3JAWydzqdD00HF8a8N27cNk.roa
File:                     0BYA3JAWydzqdD00HF8a8N27cNk.roa (raw, json)
Hash identifier:          k0AnsXGzAT7PfdiZ+TKQSnceHwQ+XqX61YbTL7LE5so=
Subject key identifier:   D0:16:00:DC:90:16:C9:DC:EA:74:3D:34:1C:5F:1A:F0:DD:BB:70:D9
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       08C0
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/0BYA3JAWydzqdD00HF8a8N27cNk.roa
Signing time:             Tue 31 Mar 2026 07:44:10 +0000
ROA not before:           Tue 31 Mar 2026 07:44:10 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        210.238.0.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2240 (0x8c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:44:10 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=D01600DC9016C9DCEA743D341C5F1AF0DDBB70D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:9e:d7:41:56:f3:52:9a:6a:39:87:93:65:9c:
                    c8:cb:42:4e:5f:d8:2a:80:0b:a6:5b:8c:98:48:9f:
                    57:4b:e5:7a:37:2e:ac:fe:c1:11:33:6c:e1:b1:ea:
                    09:51:08:69:bb:35:e7:2f:b0:78:de:83:d8:43:5c:
                    a0:98:4e:33:8b:dc:6e:3d:02:ed:46:f5:cd:3e:0c:
                    b3:50:45:1a:7a:7e:27:63:c3:9c:77:70:c0:7f:bb:
                    ab:c3:44:3d:10:a6:1c:b2:fd:4d:f3:dc:9f:9a:83:
                    71:6f:c9:7e:7c:4d:9d:89:30:8f:db:8d:83:67:38:
                    28:fc:69:03:fc:54:5c:c1:2d:57:86:71:8c:56:eb:
                    f8:b8:ce:6f:eb:8d:50:91:17:c9:fe:f5:bd:8b:8e:
                    17:18:18:4a:0a:ca:b1:42:8f:8d:63:43:57:10:81:
                    83:47:20:3d:d2:ec:0a:51:10:ac:83:ed:a3:fa:0d:
                    c8:39:bc:23:56:71:b0:e0:d7:a8:78:c8:60:93:65:
                    73:db:a2:14:d5:22:d2:15:43:f1:ef:9e:23:39:9c:
                    d3:ea:a8:a8:bb:7d:5c:be:d7:0b:ae:30:71:61:ec:
                    2e:fe:a0:9a:b5:ee:46:7b:16:14:9c:e0:eb:20:cc:
                    96:9a:96:66:5a:c8:36:69:ee:4b:b9:73:c9:c7:ca:
                    48:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:16:00:DC:90:16:C9:DC:EA:74:3D:34:1C:5F:1A:F0:DD:BB:70:D9
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/0BYA3JAWydzqdD00HF8a8N27cNk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.238.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:0b:d4:82:0b:9c:bc:9e:fc:c2:b4:9b:8c:d6:1e:a5:9e:a8:
         eb:fb:6c:d1:9c:c6:98:a6:ab:c7:15:66:cc:e9:bd:81:4a:9c:
         3f:d2:7a:5d:48:5c:24:ea:02:50:78:13:55:4c:62:76:9d:1d:
         01:45:0c:b1:64:49:1b:53:14:95:1b:31:c2:13:4a:79:69:80:
         09:d6:ba:d2:60:b4:56:15:5b:af:2b:4a:4c:ac:48:0d:56:1c:
         a8:df:89:7d:f3:8a:52:af:30:9e:2a:ef:af:03:b2:a8:0e:dc:
         14:a4:a4:de:cf:08:63:a2:d7:0b:0e:33:19:75:67:bb:53:82:
         d6:98:a7:50:03:02:8c:a6:f1:f2:da:e2:6f:25:b0:f6:ae:ef:
         76:29:b7:34:18:57:7d:81:6c:11:e2:bb:1e:6f:dc:73:71:58:
         be:ee:da:da:93:5c:cd:35:69:c2:e3:b6:23:ed:8c:70:4d:11:
         8a:cd:a0:00:53:81:8c:8e:0f:ce:98:b9:5a:a5:ec:e3:d7:b7:
         82:94:04:dc:7f:47:80:33:b6:f8:85:39:b2:3f:e5:90:58:a0:
         66:57:e0:ab:d0:77:99:78:d9:67:08:ed:e5:0a:85:aa:10:a6:
         1c:c4:f1:81:58:ea:83:e7:56:fe:0b:10:f0:b6:d4:a4:25:a6:
         9e:29:25:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:53:09 2026 by rpki-client