Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/5rMP1ydnzDdptZ2srLtKE5Tmqqk.roa
File:                     5rMP1ydnzDdptZ2srLtKE5Tmqqk.roa (raw, json)
Hash identifier:          T5yvRuL64Mk9NS66tJfPLo+qw4nNDd6xltvSLVDf//Q=
Subject key identifier:   E6:B3:0F:D7:27:67:CC:37:69:B5:9D:AC:AC:BB:4A:13:94:E6:AA:A9
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       083C
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/5rMP1ydnzDdptZ2srLtKE5Tmqqk.roa
Signing time:             Tue 31 Mar 2026 07:43:07 +0000
ROA not before:           Tue 31 Mar 2026 07:43:07 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        59.137.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2108 (0x83c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:43:07 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=E6B30FD72767CC3769B59DACACBB4A1394E6AAA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:44:b9:66:19:85:51:c8:a3:eb:21:68:35:e5:
                    b5:95:d0:63:58:4c:f9:8b:86:ee:80:ab:5a:29:17:
                    45:7a:f4:66:c2:fb:7d:3e:3a:a8:0d:36:f4:eb:31:
                    17:a4:7e:51:01:45:4d:ae:c9:6f:1c:9d:94:db:86:
                    ef:73:42:e3:5a:71:b8:fd:66:20:10:67:12:d6:74:
                    28:e4:64:bd:bb:a5:2a:8d:91:a4:b1:03:8a:d7:ea:
                    a3:93:0c:9e:ce:b5:f4:0f:0c:9e:15:02:6f:b0:3d:
                    86:59:54:8d:ee:df:f1:83:65:31:c5:f0:55:26:2a:
                    6f:32:35:99:49:d1:67:0c:18:92:59:24:ac:18:95:
                    8a:60:7e:21:4c:6f:12:91:25:3b:c8:57:18:11:f4:
                    cf:fb:16:27:c3:03:c6:18:15:22:4f:77:c3:a3:4f:
                    12:c7:12:74:3f:ab:a4:81:b2:5f:65:12:12:ac:43:
                    43:e9:55:9a:7a:66:ad:ee:0e:6f:d0:54:0e:9d:6e:
                    bd:6e:6f:3e:f1:4b:df:78:a6:e4:3c:b9:33:cd:b5:
                    25:1e:1a:3d:bf:a4:44:d5:0b:b8:ed:0d:3d:61:d3:
                    74:15:c4:0e:64:5e:3b:e3:56:4b:64:40:64:09:85:
                    a2:26:c9:45:31:88:d1:a8:3a:1d:0d:33:af:43:83:
                    3c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:B3:0F:D7:27:67:CC:37:69:B5:9D:AC:AC:BB:4A:13:94:E6:AA:A9
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/5rMP1ydnzDdptZ2srLtKE5Tmqqk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.137.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         58:ea:4f:49:a3:93:62:d1:85:7d:2d:d2:f7:c5:ea:d0:92:54:
         4c:3d:0b:5e:44:40:2f:70:39:dc:51:8d:8d:8a:bf:ff:c6:b8:
         5b:e6:e2:98:24:10:e0:56:81:14:86:02:84:3a:af:78:9d:a5:
         cf:8a:2e:7b:12:12:c2:54:9c:c6:f7:41:e1:43:77:93:48:4f:
         a8:11:c9:32:68:b4:56:91:5c:3c:ea:fc:d5:2f:8e:dd:64:a0:
         76:94:f1:ed:44:e8:ae:f7:58:9f:fa:1c:23:6e:17:d2:e1:e6:
         86:04:ca:ff:12:aa:2d:13:2e:dc:20:36:8a:26:93:a1:da:b2:
         dc:a6:00:a8:df:3f:98:73:58:8f:3a:e4:5b:c7:1b:37:10:67:
         d8:9f:64:c7:67:f4:c0:50:4c:7c:19:6f:be:fb:2c:da:c0:17:
         3a:f8:a4:87:18:b0:f8:42:59:2e:d7:83:7e:f1:cd:5f:bc:bf:
         30:ca:62:b5:2b:c6:6c:a4:5b:a9:66:fa:5f:12:fb:dc:3b:2d:
         42:f5:de:da:2f:8d:27:ac:ca:12:0a:b6:bb:bb:1b:26:e8:82:
         4c:ca:05:f1:fd:32:cf:f9:ef:0d:32:f7:3d:ed:b3:b7:47:eb:
         19:de:74:06:21:63:f1:36:12:53:50:41:a2:29:bc:fd:19:31:
         af:ab:1e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:32:13 2026 by rpki-client