Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/4RwFAJG-FVVr-gh0Q0ztkH11RlI.roa
File:                     4RwFAJG-FVVr-gh0Q0ztkH11RlI.roa (raw, json)
Hash identifier:          /2YT3XTi3A7D41ph5hQptg1vvI5yQnuJPWEd8ER80Qw=
Subject key identifier:   E1:1C:05:00:91:BE:15:55:6B:FA:08:74:43:4C:ED:90:7D:75:46:52
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       07D9
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/4RwFAJG-FVVr-gh0Q0ztkH11RlI.roa
Signing time:             Tue 31 Mar 2026 07:42:16 +0000
ROA not before:           Tue 31 Mar 2026 07:42:16 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        210.172.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2009 (0x7d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:42:16 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=E11C050091BE15556BFA0874434CED907D754652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ff:0c:70:aa:10:38:01:07:4d:90:31:de:8e:
                    10:f0:4c:c0:89:58:48:d3:7f:7e:d1:5a:29:76:ed:
                    69:c3:f6:11:7e:d3:76:c3:47:9a:12:57:56:38:f8:
                    4d:57:28:4e:74:53:39:5b:60:e9:29:84:fe:8e:ba:
                    02:51:ae:93:8c:fd:ea:91:e7:29:e9:a9:66:c9:ef:
                    ba:12:79:fb:a1:91:d0:66:d3:49:cb:69:10:dc:27:
                    d2:1c:07:dc:1c:c3:36:c4:84:96:9e:5f:f2:06:63:
                    82:53:c4:5e:cc:89:d1:1e:28:42:e4:25:02:06:af:
                    0f:0d:cb:ca:24:67:4e:1a:d7:a6:1e:9d:04:d6:57:
                    16:cf:5e:8e:8f:82:70:13:eb:5a:34:82:3a:cd:f5:
                    e6:47:89:d8:6c:28:c8:50:51:02:4c:cf:eb:c3:cc:
                    7d:9f:f4:2c:00:9d:65:36:84:96:18:0d:0a:9b:bf:
                    24:81:c8:66:1a:d4:8b:ce:22:4e:77:8f:61:41:15:
                    c3:6f:d5:98:15:b5:be:02:5a:93:25:2b:57:97:8f:
                    89:93:35:77:42:15:5f:55:be:da:e7:d1:d0:f7:8b:
                    0e:1e:54:63:50:16:fd:f5:f9:15:3f:4d:6f:e2:07:
                    91:ca:7c:70:46:b5:1a:43:dd:33:79:08:62:04:97:
                    9a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:1C:05:00:91:BE:15:55:6B:FA:08:74:43:4C:ED:90:7D:75:46:52
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/4RwFAJG-FVVr-gh0Q0ztkH11RlI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.172.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         8a:e5:76:3c:5d:74:78:1c:5b:cf:1c:12:dc:d4:55:d2:14:08:
         c7:33:f8:7a:3a:c4:64:c6:b8:1f:22:f5:fb:9b:2e:2e:e0:2b:
         c5:9c:b6:83:0a:95:f5:75:d5:68:e8:92:0b:ae:94:0a:46:ef:
         fb:e4:74:77:ce:1e:39:ce:e2:90:d5:bf:0a:66:e2:3f:b8:1e:
         1e:54:5f:c6:7d:21:45:87:d9:1e:54:6c:d8:b8:df:61:c2:99:
         12:6f:e3:e8:e8:f9:09:26:1d:39:19:08:59:37:ff:f7:49:a2:
         9e:ac:e0:a4:de:35:32:dc:6e:b0:12:ad:e4:8a:af:99:9e:78:
         9a:38:b0:15:8f:e7:6f:e3:c2:16:5e:b9:46:92:c2:64:8a:0d:
         90:ac:2a:ed:6d:5a:99:4d:b9:57:6d:9d:6a:56:fc:5a:08:ed:
         fd:da:6f:02:c1:a0:85:d5:b9:d5:ce:73:85:27:df:90:c1:27:
         78:e1:7c:29:2b:97:11:58:ac:4b:4f:67:e0:99:ba:62:ef:9b:
         ab:e0:1c:ee:42:d4:03:9a:7d:c1:7c:22:54:0d:9f:03:e2:ae:
         ef:45:56:6c:4b:e4:4a:7e:68:fb:42:d6:bc:d2:6e:41:42:90:
         b5:26:29:e7:9a:60:c5:8d:f6:d8:dd:d3:96:fe:f9:7c:cd:86:
         3f:3c:40:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:57:06 2026 by rpki-client