Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/7ADV3m25KiSru0FYCT_nY9UEh2A.roa
File:                     7ADV3m25KiSru0FYCT_nY9UEh2A.roa (raw, json)
Hash identifier:          bHz8P4MJy+C7Rdd5kctxquq+Vm2xez8+NKTuTLFBW8g=
Subject key identifier:   EC:00:D5:DE:6D:B9:2A:24:AB:BB:41:58:09:3F:E7:63:D5:04:87:60
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       082A
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/7ADV3m25KiSru0FYCT_nY9UEh2A.roa
Signing time:             Tue 31 Mar 2026 07:42:55 +0000
ROA not before:           Tue 31 Mar 2026 07:42:55 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        27.95.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2090 (0x82a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:42:55 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=EC00D5DE6DB92A24ABBB4158093FE763D5048760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:14:cb:11:5b:55:5c:c6:b0:5c:5e:b9:be:8b:
                    7e:17:ee:a4:b3:f1:0b:c6:30:dc:f0:83:61:da:bc:
                    ca:69:3b:9e:10:fc:2d:2e:aa:1b:ce:6e:7d:41:1c:
                    25:ca:4a:9d:2a:8a:e9:a8:21:57:f0:5c:3d:c9:fb:
                    de:78:71:be:ff:04:f0:d0:65:13:59:7a:07:ee:ba:
                    4b:18:bb:bc:34:ba:ba:60:ff:4f:88:09:c0:32:90:
                    5d:22:2d:c9:34:6d:3b:b3:be:aa:c1:1f:d0:63:e6:
                    e3:e8:f5:82:4b:64:37:c2:88:2e:2c:25:09:38:81:
                    16:c2:2b:c2:f4:02:c1:0d:59:d7:e0:b5:bd:f0:00:
                    c3:3c:2e:e9:8d:a4:f6:7f:c1:06:87:04:25:81:63:
                    c3:78:78:97:de:85:d3:e8:9e:7d:51:ff:a7:9b:bc:
                    bd:d6:74:36:20:ca:cb:f7:37:4f:89:02:58:a1:8d:
                    0a:9a:d6:df:95:31:a7:b0:6c:df:bc:af:3c:45:8c:
                    61:14:ed:29:43:cc:be:14:a9:cd:c9:56:cb:5d:de:
                    38:c9:f6:21:5b:4e:71:5e:99:5a:42:1e:d7:67:d4:
                    6d:83:b5:d6:4c:82:fc:4f:5f:0b:7c:fd:09:0f:fb:
                    0c:29:2d:83:66:0e:f7:ea:70:d4:cd:aa:ae:e3:1d:
                    53:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:00:D5:DE:6D:B9:2A:24:AB:BB:41:58:09:3F:E7:63:D5:04:87:60
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/7ADV3m25KiSru0FYCT_nY9UEh2A.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.95.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a0:b3:25:3c:4c:81:13:3d:89:ad:3c:c6:c0:55:b5:7c:ec:c4:
         7b:c6:ea:2f:27:0d:ca:66:cc:f9:c7:d0:31:fd:e0:62:56:bf:
         f7:d0:70:51:75:37:c9:0b:7e:ac:4b:bb:5a:f3:e0:70:f0:30:
         2b:75:f6:47:cf:09:26:25:ff:76:01:2a:9a:47:04:46:7f:47:
         31:65:b4:bb:c0:00:2c:90:8d:b6:7e:63:4d:51:64:8f:e6:b6:
         ca:81:dd:44:17:32:76:60:13:36:a5:62:54:86:13:eb:92:73:
         30:59:51:9e:a7:70:44:3b:d6:28:26:db:b0:5d:01:f6:9d:d9:
         54:4b:7f:53:24:8d:ba:b5:c5:8e:98:24:bd:2b:2e:8d:fc:3e:
         67:b0:79:d8:1c:75:f0:1d:b1:8a:63:6d:16:b9:4d:3e:4d:e6:
         73:2d:38:9f:ad:d1:9a:ef:38:73:66:0a:d5:3a:16:cd:6e:39:
         a0:20:75:ae:24:b3:16:2e:a7:3f:7b:30:3e:04:97:61:dc:d2:
         bc:bf:5e:26:d7:84:64:d4:6d:b8:f7:d9:2d:0f:33:35:6c:b4:
         f4:5c:b7:ff:ea:27:b3:96:ee:35:df:a2:93:69:85:1d:cd:78:
         95:87:78:1f:1c:34:b0:6e:f5:37:72:4a:b0:0c:bb:c3:38:41:
         95:c1:df:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:13:39 2026 by rpki-client