Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/8Ts3dj_KycYG9Qan6pReMbXVTp8.roa
File:                     8Ts3dj_KycYG9Qan6pReMbXVTp8.roa (raw, json)
Hash identifier:          doyDpIals2/Gk+7//kAPrQBvD5tow4WLiYrFOjAdens=
Subject key identifier:   F1:3B:37:76:3F:CA:C9:C6:06:F5:06:A7:EA:94:5E:31:B5:D5:4E:9F
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       07B4
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/8Ts3dj_KycYG9Qan6pReMbXVTp8.roa
Signing time:             Tue 31 Mar 2026 07:41:55 +0000
ROA not before:           Tue 31 Mar 2026 07:41:55 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        222.1.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1972 (0x7b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:41:55 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F13B37763FCAC9C606F506A7EA945E31B5D54E9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d4:ed:7b:ac:f1:8c:a5:f9:6b:f5:c0:5d:f6:
                    a0:d6:23:7a:d3:fd:c5:b2:a8:a6:fc:3e:0d:05:3a:
                    23:b2:10:b3:c0:ec:af:b7:c0:58:b6:f4:ce:3d:3f:
                    03:b2:af:58:d8:43:cb:63:11:c3:16:99:a0:90:b0:
                    c1:dd:4d:2b:c0:d0:52:e8:ab:02:ea:54:0c:fb:7d:
                    4b:c2:fd:72:73:6c:d9:cc:41:40:eb:3b:f0:82:52:
                    d6:cd:c9:82:05:ec:e3:69:d7:b1:eb:5e:4b:0a:19:
                    51:63:d6:f0:e3:ab:2d:de:e3:47:f9:29:22:49:1b:
                    96:a4:18:be:78:2d:f0:67:c9:43:ed:fb:ed:cb:3a:
                    14:6d:c4:ab:57:2d:3d:69:99:c0:b5:6a:71:64:60:
                    c0:e1:f0:b8:89:3d:ab:a3:2c:d1:9f:e5:ca:bc:b7:
                    2b:db:cd:70:d0:9b:7d:39:46:0b:df:e9:d5:60:76:
                    5b:95:4d:37:7b:e1:1a:46:42:4a:65:fd:78:52:98:
                    80:9b:e5:b5:70:85:af:41:48:0a:cd:c0:65:8e:75:
                    41:16:b8:0d:71:cc:00:1d:84:d8:e3:e4:9e:fa:47:
                    46:64:d6:a2:5b:32:af:a0:04:f8:d0:ac:15:45:49:
                    76:15:1c:cd:70:72:d9:70:c3:8a:b4:0d:12:b7:53:
                    96:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:3B:37:76:3F:CA:C9:C6:06:F5:06:A7:EA:94:5E:31:B5:D5:4E:9F
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/8Ts3dj_KycYG9Qan6pReMbXVTp8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  222.1.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b0:18:4b:3f:00:ad:41:49:95:66:8d:ed:29:de:fa:2d:10:8e:
         4c:40:02:b2:4f:11:87:ba:3e:03:4b:e5:79:23:c1:ab:5c:f0:
         ac:54:f2:52:29:eb:2a:82:44:51:e1:74:08:df:a0:e7:48:0e:
         2a:a4:c0:8a:d9:f8:94:38:5e:ee:79:a3:e7:33:86:20:f0:d7:
         99:93:77:f9:33:29:29:21:6c:15:6a:db:49:5f:87:46:e1:46:
         ae:7b:07:18:86:3b:5a:ef:22:bf:d5:24:e9:43:c7:3e:79:fd:
         fe:5f:4d:04:9e:16:46:f9:ff:34:31:56:77:a9:d3:14:c4:85:
         ba:68:07:4f:8c:af:c0:6b:0d:e9:a1:6b:8c:95:a1:d0:62:e9:
         eb:5d:b6:91:27:c8:39:3b:b9:6f:fa:60:05:6c:24:1f:75:0e:
         08:15:1a:8e:f1:1f:f8:fd:ef:f3:21:1e:eb:d7:e6:41:a6:00:
         03:67:d2:1c:c5:98:fb:ce:c8:87:5d:3b:78:c6:6f:6f:64:31:
         e5:7f:11:c3:d6:9c:a9:76:8b:49:7b:61:91:4f:52:11:68:c3:
         eb:c8:d2:0b:1d:5a:d3:d6:26:30:a5:e2:0a:f4:f4:71:ad:ef:
         5a:04:2a:39:56:e6:f3:d0:cf:7a:2f:b2:6a:59:07:d4:f2:ae:
         72:ae:e1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:13:44 2026 by rpki-client