Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/5yQlppYb-F43puOKZZqleHPA6LY.roa
File:                     5yQlppYb-F43puOKZZqleHPA6LY.roa (raw, json)
Hash identifier:          atWIm0tzA3bS586hTkATUACr+klo+lHqdcvgdFvPOHA=
Subject key identifier:   E7:24:25:A6:96:1B:F8:5E:37:A6:E3:8A:65:9A:A5:78:73:C0:E8:B6
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0843
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/5yQlppYb-F43puOKZZqleHPA6LY.roa
Signing time:             Tue 31 Mar 2026 07:43:10 +0000
ROA not before:           Tue 31 Mar 2026 07:43:10 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        182.248.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2115 (0x843)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:43:10 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=E72425A6961BF85E37A6E38A659AA57873C0E8B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:a2:73:fb:b3:3e:33:a1:36:29:8c:4c:9c:c2:
                    49:59:00:8f:60:b6:a6:8e:58:b1:dc:0d:f4:80:1a:
                    08:95:fc:80:87:24:e3:79:81:65:d1:50:3e:11:d6:
                    0a:e6:ee:80:92:38:79:f2:d2:fb:6b:c4:f1:cc:f7:
                    86:c9:fc:f4:4b:f5:f7:78:6b:e4:16:f4:14:d8:23:
                    d4:66:f8:ce:9b:f0:51:bc:18:e2:4e:28:7a:05:f7:
                    6e:ed:6c:1c:03:91:ef:d5:8f:2e:1f:fb:bb:7f:28:
                    67:78:59:56:ca:3e:e8:00:a9:9c:58:77:09:a4:27:
                    8c:3d:bd:6d:fe:a8:22:53:e4:df:42:49:c2:02:66:
                    da:86:72:25:34:fb:ce:22:94:11:88:b6:28:71:b8:
                    cf:80:6c:8b:30:01:0e:87:65:b8:5e:62:3b:24:90:
                    86:25:b9:c2:8a:40:d3:83:56:a7:c6:88:ce:ce:50:
                    e2:1f:f8:02:43:5d:4e:26:df:ec:b1:f9:3f:11:8c:
                    96:f2:6c:1f:24:51:72:f8:8b:7f:f9:7d:8f:52:18:
                    fa:f7:fb:70:d0:8e:55:57:4f:3a:fe:0a:c3:1b:57:
                    07:ef:7a:93:ad:55:a9:a5:17:41:ca:73:29:aa:85:
                    e9:65:7b:02:17:75:69:eb:29:ae:a3:d7:b9:d3:32:
                    18:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:24:25:A6:96:1B:F8:5E:37:A6:E3:8A:65:9A:A5:78:73:C0:E8:B6
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/5yQlppYb-F43puOKZZqleHPA6LY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.248.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         30:2f:45:7b:3e:f3:2c:81:57:06:ae:d3:5a:b2:a3:43:6a:9d:
         d4:95:17:cb:33:58:91:35:cb:02:81:85:aa:8e:fc:08:29:3e:
         8a:32:90:f6:d2:8c:4b:24:c4:1b:d2:7e:81:5c:37:d7:6e:e0:
         96:78:58:71:ba:a9:bf:fe:8c:2c:55:d4:6e:7f:e0:90:90:8d:
         11:f8:23:f1:fa:94:33:c7:e6:c2:9f:79:ad:66:f5:7b:ca:51:
         cc:ed:7e:29:f9:a9:74:9e:a4:18:46:75:af:0d:b9:d6:bd:68:
         08:a0:1a:df:7f:85:ac:f7:c4:79:93:34:16:18:85:9e:06:e5:
         c0:a0:55:f2:32:22:de:61:3c:86:f4:9a:7b:b3:6d:b1:05:7a:
         22:81:7a:f3:8c:f8:c2:d7:d4:3b:8e:9d:34:c7:ac:4e:39:10:
         80:d2:17:0e:38:c4:90:d8:35:dd:61:7e:ef:56:93:8d:49:76:
         49:d5:78:89:62:7a:c6:e3:85:43:bf:68:ca:03:49:e5:92:e9:
         91:27:a8:b0:97:2e:cf:b7:52:63:54:af:90:0a:c1:83:c2:14:
         be:4e:b8:19:cb:55:87:f6:cc:f5:e8:b4:d2:e8:5f:31:66:3f:
         1f:c3:dc:7e:9d:49:c4:7a:38:0d:1e:c0:17:c5:45:4b:66:77:
         c9:5b:06:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:58:44 2026 by rpki-client