Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/5YkyiOKsKZzI1P-GGuaO-uxLIPE.roa
File:                     5YkyiOKsKZzI1P-GGuaO-uxLIPE.roa (raw, json)
Hash identifier:          S5jhi8iq605MGpJhlUwn4ru5JkWBsdQV+SsBMpZap4Q=
Subject key identifier:   E5:89:32:88:E2:AC:29:9C:C8:D4:FF:86:1A:E6:8E:FA:EC:4B:20:F1
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       090C
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/5YkyiOKsKZzI1P-GGuaO-uxLIPE.roa
Signing time:             Tue 31 Mar 2026 07:44:43 +0000
ROA not before:           Tue 31 Mar 2026 07:44:43 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        210.233.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2316 (0x90c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:44:43 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=E5893288E2AC299CC8D4FF861AE68EFAEC4B20F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:01:b1:34:e6:1a:a6:48:6b:4c:fe:cb:60:64:
                    78:c5:ad:37:eb:3b:ab:08:ce:3e:00:ad:cd:b6:5e:
                    14:a2:3d:2b:cc:9d:56:1b:b4:8e:73:ec:5e:19:b8:
                    b5:be:57:f7:df:b3:8a:0c:ae:df:d0:26:f1:85:9b:
                    13:31:1e:54:5d:ee:16:99:58:0a:cb:9f:2c:2a:93:
                    9e:b6:07:db:1d:04:51:73:e1:c1:8a:07:44:b1:41:
                    2e:6a:3f:53:c9:87:96:a9:f1:26:4a:35:15:5b:c2:
                    6c:40:75:2b:69:00:2b:5e:84:a3:04:e3:fc:92:c7:
                    56:68:1e:60:bd:4b:32:d6:4b:32:f4:16:f7:3c:d7:
                    e6:fe:24:9d:5e:30:6a:4d:aa:70:cf:62:0e:de:29:
                    69:ad:f7:e6:25:1a:50:4b:6a:49:65:cb:e9:88:8a:
                    b2:80:3c:2c:eb:98:e6:42:a4:d9:7d:d9:21:f5:72:
                    fd:70:4a:62:42:1c:77:c6:16:b4:5a:7a:c6:f8:57:
                    fc:1c:8f:16:4f:a7:e1:87:c5:80:02:78:e5:87:27:
                    59:62:f2:aa:54:c1:6e:16:13:ff:1d:f3:f5:83:3d:
                    af:f2:ac:0e:8d:bf:98:f6:70:45:bf:c9:68:cd:14:
                    d6:e3:75:e4:21:a7:90:47:bb:1d:b1:93:24:5f:28:
                    91:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:89:32:88:E2:AC:29:9C:C8:D4:FF:86:1A:E6:8E:FA:EC:4B:20:F1
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/5YkyiOKsKZzI1P-GGuaO-uxLIPE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.233.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         68:f3:f7:3a:82:fe:01:75:d1:eb:e3:cc:10:b2:89:44:a0:cf:
         52:d9:c3:af:56:ad:97:7d:be:40:d4:13:55:d0:8b:32:99:e8:
         01:c1:4d:00:65:8e:7c:a0:f3:ad:d1:a2:75:8a:9a:05:00:8b:
         30:88:c2:d2:95:7e:af:eb:46:36:d1:fd:2f:f9:fb:37:c0:75:
         09:c3:6d:5d:ec:18:f4:98:00:6c:f2:18:dc:8c:45:ef:67:82:
         4a:5b:07:9f:9f:c4:cc:ec:dd:19:64:42:05:61:6b:e4:f6:e8:
         c4:72:de:6a:bf:93:bb:30:8d:47:49:b4:27:55:74:37:84:51:
         3c:49:7f:18:cc:34:d9:fa:df:13:21:af:e2:51:76:2e:4f:b9:
         22:07:71:73:bc:34:da:ea:1d:dd:6b:af:a9:c4:46:c1:1e:22:
         10:45:24:8f:1c:bc:8f:0c:73:1d:0e:88:ea:d9:bf:83:b9:1a:
         aa:c9:63:65:df:9a:c5:a3:15:6b:42:85:25:53:11:4a:7c:54:
         54:ce:98:d8:bc:5a:01:c0:2d:f7:5b:f4:96:ed:f4:f2:6d:90:
         78:a3:e2:e1:1e:42:73:06:70:5a:2f:03:36:5d:52:9a:d7:09:
         20:9a:cf:5b:41:a9:f2:17:a3:b9:82:7c:85:c9:17:5e:a8:83:
         f5:d0:5c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:20:04 2026 by rpki-client