Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/3mZ69dNySaRBAP-7jYayrlmwl9o.roa
File:                     3mZ69dNySaRBAP-7jYayrlmwl9o.roa (raw, json)
Hash identifier:          +THQo1uGJYqKJuBnZp5cWf7SXrKDgfUzds8em6Cdv9c=
Subject key identifier:   DE:66:7A:F5:D3:72:49:A4:41:00:FF:BB:8D:86:B2:AE:59:B0:97:DA
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0891
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/3mZ69dNySaRBAP-7jYayrlmwl9o.roa
Signing time:             Tue 31 Mar 2026 07:43:48 +0000
ROA not before:           Tue 31 Mar 2026 07:43:48 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        211.7.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2193 (0x891)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:43:48 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=DE667AF5D37249A44100FFBB8D86B2AE59B097DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:29:17:3f:5d:a3:e2:e0:31:3f:61:5d:98:fc:
                    b5:90:3a:99:85:df:ba:46:64:eb:cd:5b:8d:d0:66:
                    27:4d:19:38:a4:aa:c1:be:ec:90:08:2f:78:67:38:
                    d2:7e:cc:6c:09:e0:a4:24:f8:c6:7d:b0:79:61:0c:
                    45:e5:d4:ac:7a:73:c0:46:b7:65:8b:f6:45:df:fe:
                    10:ce:40:d6:e3:9d:e8:0a:2f:a3:3e:35:11:2e:4a:
                    b8:1a:f0:ce:8c:91:2e:6c:36:ed:7a:41:a5:70:88:
                    d4:70:62:4c:da:2a:8a:78:74:42:57:6a:5c:68:e5:
                    ea:11:c6:dc:ef:86:7e:5c:30:91:6c:10:42:48:93:
                    af:68:21:77:c7:40:d4:10:17:f7:6f:7b:36:0c:42:
                    b1:78:bf:c4:c9:54:07:11:5c:cc:fe:9f:c8:50:39:
                    3f:19:e9:dd:7e:2f:70:93:85:dc:9e:b3:9d:2a:bb:
                    30:b9:7f:a7:e4:bf:01:3c:8f:1d:6b:ec:98:94:3c:
                    b5:07:ab:fa:9d:b7:51:77:15:1b:ce:95:00:dd:d0:
                    5a:1f:16:7a:47:20:cf:5e:2f:f2:67:b8:5a:d9:89:
                    47:11:74:cf:15:41:fc:d0:b5:ad:86:48:46:30:5b:
                    f8:49:f3:e6:17:07:7f:80:67:df:5b:3a:8d:9b:37:
                    41:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:66:7A:F5:D3:72:49:A4:41:00:FF:BB:8D:86:B2:AE:59:B0:97:DA
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/3mZ69dNySaRBAP-7jYayrlmwl9o.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.7.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:39:f9:ae:a0:86:67:18:a5:75:3c:36:a1:f2:fd:49:74:c6:
         b2:85:3f:87:8b:74:7a:f2:54:d2:e9:56:3e:c8:f4:0f:9d:91:
         af:12:f0:4a:86:97:6d:f5:bf:78:80:cd:cc:2f:3b:60:03:0f:
         c3:ff:e7:fc:c2:7a:89:de:4b:e4:27:8b:88:36:a2:82:9f:7f:
         8d:71:e2:2e:9a:d9:0a:dd:23:41:fd:96:df:43:d4:be:2c:f3:
         6c:08:15:d3:7a:28:26:5d:bf:e5:84:a4:78:0d:f9:42:f7:ea:
         5b:1f:f5:20:87:af:86:98:98:64:9d:37:0d:8b:d4:d6:28:7f:
         fc:31:9f:3f:ab:79:be:33:b6:f4:31:0e:73:2b:7b:65:c3:f1:
         b3:14:85:86:99:21:8d:7f:1a:0d:f5:5a:2d:50:86:89:c7:e9:
         2b:b7:33:6a:3d:de:ba:a7:5a:02:34:4e:d5:e7:91:80:6c:79:
         23:6f:98:45:c8:3f:ec:83:be:eb:b1:ca:c9:4c:3a:f0:d1:af:
         e9:cf:fa:92:71:bd:e5:87:a4:b6:cf:18:1e:68:df:d9:f9:2b:
         97:3d:d5:d6:81:44:5a:4f:dc:ef:c3:3c:98:62:8d:81:d2:fe:
         0b:e9:77:e4:e3:f4:be:6c:b9:42:02:c3:29:c8:e3:8e:6e:87:
         9e:50:e6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:13:29 2026 by rpki-client