Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/7XLN1bSkcYddJarzro-ng7DSrS0.roa
File:                     7XLN1bSkcYddJarzro-ng7DSrS0.roa (raw, json)
Hash identifier:          YX2/BSI1MOSawUH2AnX6O8uNoKZ9t/ItVyXBDEKq6DA=
Subject key identifier:   ED:72:CD:D5:B4:A4:71:87:5D:25:AA:F3:AE:8F:A7:83:B0:D2:AD:2D
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       08F5
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/7XLN1bSkcYddJarzro-ng7DSrS0.roa
Signing time:             Tue 31 Mar 2026 07:44:34 +0000
ROA not before:           Tue 31 Mar 2026 07:44:34 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        210.250.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2293 (0x8f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:44:34 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=ED72CDD5B4A471875D25AAF3AE8FA783B0D2AD2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:eb:2e:06:bd:37:0a:53:ec:05:2e:fa:77:be:
                    2d:ba:be:bc:ba:ef:21:5e:64:31:f2:9b:19:3b:e1:
                    18:d2:d4:82:6b:ad:7b:1c:19:a1:b5:d1:fb:aa:be:
                    5a:30:fa:29:69:57:06:3f:c3:29:52:96:f6:28:3b:
                    2c:a4:30:b0:05:54:12:1f:b5:32:10:02:54:77:63:
                    02:48:de:df:14:a6:dd:75:18:53:01:99:86:96:46:
                    67:ba:5d:a1:6f:35:4e:01:78:4b:13:1f:1c:5d:9d:
                    6b:25:0a:e0:44:1d:7e:ad:3a:94:ca:9a:f3:9d:19:
                    71:de:42:88:87:89:7b:11:51:91:5b:ed:55:42:b6:
                    2f:7a:7f:78:60:25:14:13:b4:79:44:13:40:00:be:
                    2e:5e:92:ee:e1:76:86:30:7e:4b:5c:98:f1:59:36:
                    94:d2:af:b0:9f:0d:d7:2a:70:58:67:c1:6f:27:36:
                    8e:20:1d:6b:42:80:2e:90:01:83:ca:fe:03:d9:78:
                    25:59:8f:f3:c9:82:95:94:00:5e:80:ca:5e:bc:9d:
                    13:dc:aa:b1:34:c9:20:63:ce:bc:6e:22:36:7d:df:
                    47:5a:01:90:0e:d6:24:7b:e0:d2:53:d3:e3:60:44:
                    98:19:f5:30:74:a9:3d:19:e8:25:2f:32:43:23:c4:
                    08:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:72:CD:D5:B4:A4:71:87:5D:25:AA:F3:AE:8F:A7:83:B0:D2:AD:2D
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/7XLN1bSkcYddJarzro-ng7DSrS0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.250.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:9a:1b:36:85:6b:19:40:17:68:17:c7:0e:ca:39:83:41:ac:
         b1:92:52:c7:99:24:de:df:91:f8:f2:37:26:6b:69:74:e1:d3:
         84:f6:03:e7:b3:43:26:82:0b:d0:f4:db:db:d1:84:b2:76:f8:
         9e:38:59:a6:bd:f9:46:54:0e:c4:7f:a2:10:db:9b:bb:90:bc:
         49:db:df:c7:e6:65:94:f1:ec:ac:97:a3:03:5b:6b:1f:da:5f:
         a2:9e:57:d4:33:08:67:d0:62:78:77:aa:0e:31:a6:85:ad:5e:
         98:77:79:bf:0f:94:22:26:94:fa:0f:51:c8:4f:87:da:68:c9:
         e2:bc:63:b2:f5:9f:1d:e5:a7:2e:95:25:d3:2f:b6:38:d6:31:
         ab:36:60:c3:41:90:db:f5:ed:4d:4e:96:37:bf:88:53:36:4c:
         68:fd:72:d6:82:be:70:a7:c4:bb:e8:78:27:34:43:42:cf:96:
         c0:ae:23:87:c9:a3:b8:2d:6f:a3:0e:74:4f:2f:6d:af:2f:ba:
         57:a4:ea:b6:11:b2:43:dd:27:7c:5e:b9:ef:4c:69:3d:89:bf:
         71:63:2d:6a:a8:8a:d2:3d:e7:02:de:1a:39:5c:d2:9e:d7:13:
         5b:45:fb:fc:35:9d:ac:db:c2:fe:dc:21:c3:70:cc:7b:c5:1f:
         c4:ed:7d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:59:24 2026 by rpki-client