Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/1O7UXNvMOE0MqVcomV3xjPWXVTI.roa
File:                     1O7UXNvMOE0MqVcomV3xjPWXVTI.roa (raw, json)
Hash identifier:          yomdHJrYu5x+UYwHzLk2pJTmSeXjqnMwKWalymoa34A=
Subject key identifier:   D4:EE:D4:5C:DB:CC:38:4D:0C:A9:57:28:99:5D:F1:8C:F5:97:55:32
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0790
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/1O7UXNvMOE0MqVcomV3xjPWXVTI.roa
Signing time:             Tue 31 Mar 2026 07:41:40 +0000
ROA not before:           Tue 31 Mar 2026 07:41:40 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        119.107.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1936 (0x790)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:41:40 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=D4EED45CDBCC384D0CA95728995DF18CF5975532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f8:a8:ab:7e:10:1e:53:7b:fb:1b:39:a7:4b:
                    97:01:e6:02:17:5e:b7:af:be:e9:16:f4:1c:35:f6:
                    76:f8:0c:2d:4d:83:da:64:24:37:14:9b:43:fa:68:
                    9d:7b:88:74:23:a4:7f:77:95:7e:f6:ec:69:fd:fd:
                    f3:03:d3:e3:9e:61:32:c1:42:e1:70:40:83:72:0c:
                    e4:22:be:d5:9d:18:82:e5:bd:38:33:d3:7b:da:08:
                    7c:91:4a:62:9a:0e:90:31:09:f2:c3:7c:70:c0:0f:
                    d9:14:ee:ef:fb:7d:42:56:f9:e9:21:a4:e3:2c:de:
                    7a:83:2c:79:1a:2d:29:7e:ce:2e:e6:c5:c9:7c:bc:
                    af:fa:76:66:57:5d:c1:0d:9e:a1:51:25:57:c6:73:
                    58:bc:e9:38:fe:2f:25:e7:78:c9:ac:92:7f:07:57:
                    82:60:69:0a:1b:03:63:2e:13:6b:3b:25:1c:27:c8:
                    a9:7c:48:e6:1b:0d:39:b3:72:08:46:13:9e:f8:77:
                    bb:d1:75:99:9f:de:66:31:82:dc:77:fb:73:06:03:
                    40:6c:2b:5f:a5:1b:8f:a5:d8:cf:63:eb:d3:08:5c:
                    43:da:31:e0:87:19:64:91:56:e7:e3:80:e7:8c:4a:
                    2b:ec:bc:56:b0:e0:ab:b5:24:6b:fa:29:96:20:ec:
                    8a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:EE:D4:5C:DB:CC:38:4D:0C:A9:57:28:99:5D:F1:8C:F5:97:55:32
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/1O7UXNvMOE0MqVcomV3xjPWXVTI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.107.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b4:86:d3:dc:d4:b5:8c:4b:46:b8:a2:51:8b:e7:99:dd:f1:0b:
         b0:38:68:eb:f6:20:8a:f2:0b:9d:79:8b:e4:32:5a:a9:36:1a:
         da:74:a6:b0:10:a3:80:df:5d:89:43:93:36:05:6c:ea:93:f3:
         1f:24:14:11:c5:4f:fa:d8:3d:f3:53:6f:22:3c:1b:f4:5c:c1:
         ae:3d:67:c3:33:f9:bc:55:6c:79:7d:db:8d:80:cf:ad:88:f7:
         e3:b6:5d:54:a3:94:7f:8a:e3:7c:12:98:39:97:3c:4a:82:3a:
         ea:a2:d2:fd:2b:df:67:1e:3e:b5:11:65:a0:aa:2e:75:f7:7a:
         5d:24:80:11:e3:01:cf:6d:0f:91:de:c5:8b:1d:7f:86:4b:fa:
         4e:87:8d:39:95:b8:a0:e5:75:4d:12:7c:cc:f9:2c:19:c5:2b:
         1d:c3:d2:1e:73:26:30:4f:1d:f8:7b:79:06:a2:b5:30:8a:a4:
         fd:0b:be:11:96:af:10:18:49:7f:4d:2d:93:7e:52:d5:4f:16:
         57:b4:97:2e:d3:61:be:90:1e:f2:70:58:ce:bd:89:43:be:9a:
         9f:4f:81:d6:60:2a:38:10:36:e1:e4:ea:f4:58:d3:f2:c8:26:
         e4:00:c9:4c:d2:01:14:2a:33:f0:8e:1e:a9:6b:c8:e1:95:e8:
         0f:1f:2a:53
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICB5AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw
NzQxNDBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQ0RUVENDVDREJDQzM4
NEQwQ0E5NTcyODk5NURGMThDRjU5NzU1MzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCu+KirfhAeU3v7GzmnS5cB5gIXXrevvukW9Bw19nb4DC1Ng9pk
JDcUm0P6aJ17iHQjpH93lX727Gn9/fMD0+OeYTLBQuFwQINyDOQivtWdGILlvTgz
03vaCHyRSmKaDpAxCfLDfHDAD9kU7u/7fUJW+ekhpOMs3nqDLHkaLSl+zi7mxcl8
vK/6dmZXXcENnqFRJVfGc1i86Tj+LyXneMmskn8HV4JgaQobA2MuE2s7JRwnyKl8
SOYbDTmzcghGE574d7vRdZmf3mYxgtx3+3MGA0BsK1+lG4+l2M9j69MIXEPaMeCH
GWSRVufjgOeMSivsvFaw4Ku1JGv6KZYg7IpNAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQU1O7UXNvMOE0MqVcomV3xjPWXVTIwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTYxLzFPN1VYTnZNT0UwTXFWY29tVjN4alBXWFZUSS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZ3a4AwDQYJKoZIhvcNAQELBQADggEB
ALSG09zUtYxLRriiUYvnmd3xC7A4aOv2IIryC515i+QyWqk2Gtp0prAQo4DfXYlD
kzYFbOqT8x8kFBHFT/rYPfNTbyI8G/Rcwa49Z8Mz+bxVbHl9242Az62I9+O2XVSj
lH+K43wSmDmXPEqCOuqi0v0r32cePrURZaCqLnX3el0kgBHjAc9tD5HexYsdf4ZL
+k6HjTmVuKDldU0SfMz5LBnFKx3D0h5zJjBPHfh7eQaitTCKpP0LvhGWrxAYSX9N
LZN+UtVPFle0ly7TYb6QHvJwWM69iUO+mp9PgdZgKjgQNuHk6vRY0/LIJuQAyUzS
ARQqM/COHqlryOGV6A8fKlM=
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:27:57 2026 by rpki-client