Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/0iLTNTJqgyp-IWOCsUddA0jCw9I.roa
File:                     0iLTNTJqgyp-IWOCsUddA0jCw9I.roa (raw, json)
Hash identifier:          vhGw7KdlwQq9P958q8WzlJxv0OmRgvdE7yB7GvQUfco=
Subject key identifier:   D2:22:D3:35:32:6A:83:2A:7E:21:63:82:B1:47:5D:03:48:C2:C3:D2
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       08EB
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/0iLTNTJqgyp-IWOCsUddA0jCw9I.roa
Signing time:             Tue 31 Mar 2026 07:44:29 +0000
ROA not before:           Tue 31 Mar 2026 07:44:29 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        210.238.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2283 (0x8eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:44:29 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=D222D335326A832A7E216382B1475D0348C2C3D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:44:a6:43:87:e8:b8:02:8c:b0:f0:30:40:e8:
                    50:bc:b5:8a:5f:e2:33:6e:78:0c:c7:1f:68:35:e8:
                    5c:86:46:fa:0e:8b:39:19:1b:35:8f:dc:e2:a0:67:
                    f9:46:60:cb:28:df:ff:c6:bf:74:34:11:2f:ef:de:
                    c3:f4:de:e4:48:df:46:23:c1:77:ed:58:a8:4e:63:
                    f5:56:84:31:f2:2e:a1:32:8b:58:e2:4d:e7:38:84:
                    3d:be:67:3c:f9:6a:ef:91:9f:9e:23:a3:cc:07:d7:
                    19:7a:89:25:8b:52:70:13:0a:da:9f:04:da:ca:ec:
                    b2:6f:62:9a:84:5c:41:4b:cf:d5:18:61:92:57:8b:
                    40:89:54:80:1b:fa:e8:e5:76:ec:4b:9a:9d:9d:cd:
                    1f:e9:92:bc:7a:e4:1f:a2:d5:7a:c2:bd:fd:82:46:
                    96:25:84:42:cf:82:6a:72:21:10:5b:47:3f:58:e6:
                    67:59:2e:fb:c7:96:38:51:6d:05:34:81:fc:4d:cf:
                    ed:ef:87:08:97:27:aa:41:3c:ce:28:97:01:95:30:
                    0f:ce:eb:55:dc:76:bf:6f:4b:70:8f:bc:55:8a:c8:
                    03:f3:82:4a:c6:b4:96:d7:50:a6:7d:73:b9:6c:ee:
                    48:bd:50:5b:d3:15:c4:cb:ca:f8:77:3c:08:7c:cd:
                    31:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:22:D3:35:32:6A:83:2A:7E:21:63:82:B1:47:5D:03:48:C2:C3:D2
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/0iLTNTJqgyp-IWOCsUddA0jCw9I.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.238.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:5d:3b:97:89:1e:31:8c:69:67:2c:c1:04:25:15:f5:a2:51:
         bf:28:37:d9:62:ac:8b:82:f8:6a:a7:31:9a:2d:fd:3f:66:ed:
         55:06:01:1e:2f:97:48:2b:4f:2e:66:e9:24:95:3a:52:56:3e:
         ee:7b:fb:cf:f6:29:91:74:5a:65:a1:5c:75:40:03:f9:55:a7:
         0f:db:03:b5:fe:ce:4d:16:fd:46:0e:93:c6:f8:75:e4:7a:3e:
         f0:0a:fb:38:c6:81:95:df:5f:ae:c2:d0:2b:7f:22:cb:e3:ed:
         df:f8:c3:93:01:8e:f8:a4:f8:0b:2f:de:a8:9b:cb:58:d3:1f:
         4c:b6:ab:a4:44:40:db:a2:ca:78:97:22:55:a2:6f:07:d5:11:
         dd:e7:33:a6:b6:ca:86:95:c0:a8:7b:16:08:6f:52:da:73:b6:
         72:21:4a:83:11:4f:81:08:17:33:df:21:08:c1:50:2b:4a:c4:
         33:06:51:e7:05:ca:ce:3a:6a:b5:c0:0f:bf:14:b5:d4:22:d9:
         d2:84:9c:02:4d:2d:c1:9a:af:ff:16:6f:a8:d1:9a:ba:45:4c:
         e6:8d:ef:b6:f7:b1:90:5f:62:44:df:16:24:21:ba:43:f6:98:
         3c:c4:00:49:c1:51:37:91:16:25:25:16:ee:c2:20:8a:72:24:
         43:97:7a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:18:15 2026 by rpki-client