Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/2ywDkPXczMB-J36YrHG97fi1s_4.roa
File:                     2ywDkPXczMB-J36YrHG97fi1s_4.roa (raw, json)
Hash identifier:          XZ08xbFXcuSbUYYG8tDKRQ9kzNmi7J4AoG9xcB6H+gc=
Subject key identifier:   DB:2C:03:90:F5:DC:CC:C0:7E:27:7E:98:AC:71:BD:ED:F8:B5:B3:FE
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       08E0
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/2ywDkPXczMB-J36YrHG97fi1s_4.roa
Signing time:             Tue 31 Mar 2026 07:44:25 +0000
ROA not before:           Tue 31 Mar 2026 07:44:25 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        210.198.90.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2272 (0x8e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:44:25 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=DB2C0390F5DCCCC07E277E98AC71BDEDF8B5B3FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e7:b2:71:a1:99:cf:a5:d1:cc:a3:41:b6:51:
                    96:6b:7f:5e:be:f4:50:5d:b6:bc:b5:30:43:df:2b:
                    5a:77:50:49:d3:24:c0:22:df:fb:c1:8a:4f:12:7f:
                    8c:10:be:3b:0a:30:8c:d5:41:40:73:77:a6:c7:e6:
                    d6:e3:7e:da:6e:8d:5c:29:6d:de:0c:cc:58:7c:4d:
                    03:8f:d9:43:ab:f2:99:5f:9b:53:52:77:87:ce:69:
                    97:5a:83:12:f8:e1:ec:ad:03:92:46:ec:ab:71:61:
                    bd:a0:d9:4d:80:fd:cb:a6:0b:eb:5b:44:dd:0e:b6:
                    6b:ff:17:0b:16:1c:e2:4b:c0:3a:c5:0e:36:88:5b:
                    4c:fc:d0:fc:94:09:60:70:8a:df:7c:93:64:1d:b6:
                    bd:e2:d9:80:99:45:55:f3:19:68:7d:45:1a:bc:db:
                    d1:89:ef:72:32:21:f1:63:d0:cb:df:96:7e:59:e7:
                    a8:1c:9f:02:46:83:cd:0f:86:b5:0a:91:9a:84:e0:
                    fb:8f:08:b4:4e:b4:66:d4:a4:9b:05:7b:45:dd:7d:
                    7d:2e:f4:1d:b6:a7:c2:29:db:e9:a7:1c:64:23:7d:
                    7c:b8:84:fe:26:12:af:d0:88:25:eb:2c:2f:3e:29:
                    eb:ee:2b:b2:38:35:64:e8:b2:6e:20:39:43:8a:df:
                    be:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:2C:03:90:F5:DC:CC:C0:7E:27:7E:98:AC:71:BD:ED:F8:B5:B3:FE
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/2ywDkPXczMB-J36YrHG97fi1s_4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.198.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:af:05:e2:c7:a2:a3:8f:a9:4c:33:61:bd:39:c1:c7:be:71:
         ba:6a:63:42:7c:12:8f:39:c8:cf:6d:f2:4c:53:a9:38:b7:6b:
         2a:41:66:27:c2:14:f5:df:22:d2:9f:a4:b6:75:97:06:28:49:
         92:68:38:cb:92:db:01:ef:18:67:33:70:db:59:e1:fe:9e:3e:
         cc:a5:55:63:87:78:6a:3d:bc:38:fd:1f:c9:9b:6b:f0:0e:e7:
         c2:ad:dc:7b:55:fc:c0:09:cd:b0:d3:ed:f0:7c:3e:3a:a4:f5:
         0d:ff:d0:cd:71:42:6c:33:5e:a1:ee:c2:40:50:46:73:31:9c:
         41:19:a2:de:63:1b:be:98:3d:16:7f:58:fb:1c:75:c8:c0:a0:
         7f:f3:c1:b4:d5:67:53:46:50:b6:ad:d1:a1:1a:d2:3e:ac:c4:
         cc:69:76:35:fc:a5:0e:4e:06:57:49:f5:78:a0:b6:9a:a9:7d:
         a2:e9:55:64:d9:75:3c:bc:82:89:0f:04:cc:f5:5a:f6:fe:ad:
         7e:db:43:dc:b3:b1:00:01:1b:d3:d0:41:64:76:43:1b:53:73:
         50:b5:af:be:9c:2d:92:07:71:8c:6b:14:be:b0:a4:d9:f5:62:
         76:24:c7:02:69:d9:5b:9c:02:bf:60:0f:85:a3:bb:d1:43:23:
         00:5c:4f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:05:01 2026 by rpki-client