Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/4yu_GRD8CLTie6j68PC0vLn1Gd8.roa
File:                     4yu_GRD8CLTie6j68PC0vLn1Gd8.roa (raw, json)
Hash identifier:          tW5eOvXc9/SBJHVNH+9lHMSJkL6F/nQeAOfriQIKf8M=
Subject key identifier:   E3:2B:BF:19:10:FC:08:B4:E2:7B:A8:FA:F0:F0:B4:BC:B9:F5:19:DF
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       089F
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/4yu_GRD8CLTie6j68PC0vLn1Gd8.roa
Signing time:             Tue 31 Mar 2026 07:43:55 +0000
ROA not before:           Tue 31 Mar 2026 07:43:55 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        211.1.76.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2207 (0x89f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:43:55 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=E32BBF1910FC08B4E27BA8FAF0F0B4BCB9F519DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:3a:1f:c4:f4:4c:88:c8:66:1b:7c:40:91:0d:
                    4f:3b:70:1a:c9:74:66:0b:b0:52:23:aa:78:b7:34:
                    e6:01:d2:c5:bc:f8:ed:31:88:f3:a4:93:99:8a:35:
                    5d:b8:ed:3d:ea:59:b4:5a:c1:72:4f:93:48:2f:73:
                    94:31:b1:65:f6:1a:66:1a:ac:77:b3:9f:bd:3b:7c:
                    c3:4b:e3:6c:26:aa:b6:e0:6d:08:b9:66:fb:b7:b3:
                    40:68:76:68:00:14:94:16:01:4f:fb:88:d3:d2:4c:
                    26:53:5c:a9:70:7e:35:1e:3d:8e:be:c6:ac:7e:ad:
                    c8:e3:1c:5d:ed:c4:ad:88:d3:fa:47:40:70:6e:27:
                    9b:05:38:b1:39:8d:15:f0:f7:99:d9:bc:f8:ad:74:
                    48:de:f1:1e:e8:57:52:be:d1:56:78:cf:32:5e:2e:
                    bb:50:9c:8a:41:a0:e7:74:f2:62:66:75:c4:88:ef:
                    49:c4:c8:70:56:ad:84:3d:1f:20:e2:01:29:2b:66:
                    8b:02:8a:c2:c2:10:b8:55:b1:8e:6a:66:a7:5e:d4:
                    b6:66:b2:fe:b7:12:76:92:f1:1e:d3:ef:b6:94:61:
                    79:66:a1:38:d2:bb:de:45:24:28:1c:3b:f9:31:fa:
                    da:eb:30:d5:3c:8c:04:23:3a:d2:0b:dc:07:f9:de:
                    a7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:2B:BF:19:10:FC:08:B4:E2:7B:A8:FA:F0:F0:B4:BC:B9:F5:19:DF
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/4yu_GRD8CLTie6j68PC0vLn1Gd8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.1.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         21:46:09:94:8b:ba:8a:4d:31:e7:b0:a8:de:b4:45:6f:2b:77:
         62:68:6f:50:a1:f7:af:e7:f8:0d:0d:a2:0d:04:4e:cd:4c:73:
         f0:b9:4f:52:84:cc:96:ed:f2:46:7f:92:d4:03:e3:ed:6c:d4:
         ee:b7:02:a5:e8:12:ca:01:74:c5:23:0d:c9:14:03:5b:be:d3:
         e3:e8:0a:ae:2c:80:2d:09:5d:ed:bd:d7:2c:f4:ac:42:1e:bc:
         3c:ca:e1:a2:95:fe:6a:43:dd:be:be:56:fe:1c:27:35:49:0f:
         a2:e1:5a:5b:2f:8c:a2:bc:62:5f:2c:d1:09:95:dc:62:8f:c7:
         d2:ed:d0:a5:73:16:77:c6:03:c7:03:d6:90:04:ec:83:6f:64:
         87:c5:cc:3d:8b:bc:c2:80:cb:6b:7a:5c:aa:e1:03:fd:d1:3d:
         1f:52:4a:c7:08:a2:d2:7e:83:ec:7d:1e:79:6e:ad:c2:17:5c:
         e9:20:8a:b6:62:6f:dd:b1:73:4e:19:47:1e:11:ed:fc:c5:d2:
         cb:79:52:b5:73:a1:6a:ef:be:c9:35:88:43:3d:15:d2:69:24:
         c2:a2:76:b0:f3:20:b4:8d:0d:1d:13:36:ba:19:56:0b:9f:ef:
         cd:de:8a:18:29:74:cf:0d:b2:0a:3d:6e:70:f6:76:e2:6d:0b:
         a4:38:ab:9a
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICCJ8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw
NzQzNTVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEUzMkJCRjE5MTBGQzA4
QjRFMjdCQThGQUYwRjBCNEJDQjlGNTE5REYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDgOh/E9EyIyGYbfECRDU87cBrJdGYLsFIjqni3NOYB0sW8+O0x
iPOkk5mKNV247T3qWbRawXJPk0gvc5QxsWX2GmYarHezn707fMNL42wmqrbgbQi5
Zvu3s0BodmgAFJQWAU/7iNPSTCZTXKlwfjUePY6+xqx+rcjjHF3txK2I0/pHQHBu
J5sFOLE5jRXw95nZvPitdEje8R7oV1K+0VZ4zzJeLrtQnIpBoOd08mJmdcSI70nE
yHBWrYQ9HyDiASkrZosCisLCELhVsY5qZqde1LZmsv63EnaS8R7T77aUYXlmoTjS
u95FJCgcO/kx+trrMNU8jAQjOtIL3Af53qfRAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQU4yu/GRD8CLTie6j68PC0vLn1Gd8wHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTYxLzR5dV9HUkQ4Q0xUaWU2ajY4UEMwdkxuMUdkOC5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHTAUwwDQYJKoZIhvcNAQELBQADggEB
ACFGCZSLuopNMeewqN60RW8rd2Job1Ch96/n+A0Nog0ETs1Mc/C5T1KEzJbt8kZ/
ktQD4+1s1O63AqXoEsoBdMUjDckUA1u+0+PoCq4sgC0JXe291yz0rEIevDzK4aKV
/mpD3b6+Vv4cJzVJD6LhWlsvjKK8Yl8s0QmV3GKPx9Lt0KVzFnfGA8cD1pAE7INv
ZIfFzD2LvMKAy2t6XKrhA/3RPR9SSscIotJ+g+x9HnlurcIXXOkgirZib92xc04Z
Rx4R7fzF0st5UrVzoWrvvsk1iEM9FdJpJMKidrDzILSNDR0TNroZVguf783eihgp
dM8Nsgo9bnD2duJtC6Q4q5o=
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:13:33 2026 by rpki-client