Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/4j0JtKq6sLkorCUA45M556BMvbo.roa
File:                     4j0JtKq6sLkorCUA45M556BMvbo.roa (raw, json)
Hash identifier:          m2NX5GdiHVLVxW11rcv2IZVVDZIZ81XPwC7RAJwdGGQ=
Subject key identifier:   E2:3D:09:B4:AA:BA:B0:B9:28:AC:25:00:E3:93:39:E7:A0:4C:BD:BA
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       088E
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/4j0JtKq6sLkorCUA45M556BMvbo.roa
Signing time:             Tue 31 Mar 2026 07:43:46 +0000
ROA not before:           Tue 31 Mar 2026 07:43:46 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        210.188.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2190 (0x88e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:43:46 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=E23D09B4AABAB0B928AC2500E39339E7A04CBDBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b5:e1:71:18:a2:55:24:9c:a2:88:52:9a:05:
                    82:57:f9:ef:69:94:6f:b9:61:5d:11:a5:75:cd:95:
                    62:80:35:e1:d3:b2:51:7a:28:02:fa:51:18:dc:02:
                    ac:b2:31:43:61:7d:66:3e:ab:63:a2:a9:6b:88:cf:
                    88:7d:46:25:4a:b1:82:1a:49:05:8a:3c:61:cd:fe:
                    1c:d5:d0:c1:34:b3:67:6f:0b:de:4a:7a:aa:0d:a7:
                    3a:5f:3e:a2:fe:83:a0:7d:34:c5:fd:3d:dd:0d:2f:
                    d7:34:ac:ae:57:3e:19:a7:6f:4d:fa:2c:ea:ec:02:
                    39:54:d8:c4:18:65:c4:6c:b6:a2:8c:de:a0:1c:7a:
                    0e:9a:eb:03:84:46:8f:1d:9b:01:ac:54:d8:1e:94:
                    c3:1d:1d:a2:8c:9d:9a:78:d2:58:95:65:30:7a:47:
                    fc:29:fe:83:62:5f:3b:5c:99:25:76:20:a2:a9:3e:
                    d9:8a:f2:d9:3a:ed:7f:f1:f6:f2:a7:5a:b6:45:8e:
                    dd:ac:80:c5:d5:3e:34:ce:8e:22:78:55:14:29:13:
                    e0:3c:f7:29:74:26:4c:a2:ab:d4:43:cb:20:7b:19:
                    2f:33:15:0e:99:65:c2:55:a4:3f:f5:c5:de:72:c1:
                    48:41:80:70:46:ad:31:ce:fd:82:42:2e:98:e9:65:
                    df:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:3D:09:B4:AA:BA:B0:B9:28:AC:25:00:E3:93:39:E7:A0:4C:BD:BA
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/4j0JtKq6sLkorCUA45M556BMvbo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.188.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:ba:67:d7:04:37:61:93:1c:cb:15:be:b6:d8:11:e9:04:a8:
         0b:5f:00:14:f8:cd:e7:d6:6a:ea:c9:1e:36:79:47:eb:86:b7:
         09:57:e9:44:6e:bf:b4:19:80:80:f7:44:27:f1:86:87:d2:4f:
         96:f3:3a:58:9e:52:64:15:97:6f:75:7e:ba:70:2a:26:da:36:
         51:26:b1:fe:05:ee:84:27:c8:ea:1d:ab:b6:d0:5a:4f:76:e1:
         94:70:11:7a:0f:24:f2:5a:95:c3:f5:66:de:60:73:a6:67:aa:
         98:bf:35:4c:c8:34:2f:a4:78:da:c1:20:8f:a4:09:37:13:70:
         20:c6:e6:b0:37:51:3e:6d:04:cd:fc:71:62:d9:fd:46:88:5c:
         22:e4:5d:67:fc:42:ec:1a:8c:38:31:c7:0c:4c:29:81:a4:6c:
         7b:d5:22:45:55:c2:94:4c:ee:2f:c7:30:41:80:38:da:3e:e7:
         d2:96:bb:ea:f0:41:e9:88:7d:a0:f0:65:4f:c8:d1:3e:d7:b4:
         20:2b:9a:58:2e:c9:b9:0b:ec:8a:8d:1b:11:7f:0f:b4:81:fe:
         46:a1:97:12:76:03:46:d0:12:15:e8:b6:33:98:6b:7b:23:f0:
         80:57:06:05:57:3f:bc:1a:f0:6a:ab:33:b7:a9:b6:4d:a8:ef:
         df:91:8c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:31:50 2026 by rpki-client