Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/BR713DHpvd7ckayArmjXYnVACBw.roa
File:                     BR713DHpvd7ckayArmjXYnVACBw.roa (raw, json)
Hash identifier:          dFXgJWphcsarSegyFZWpS18Jg/jJktuFfh2W64xjiGE=
Subject key identifier:   05:1E:F5:DC:31:E9:BD:DE:DC:91:AC:80:AE:68:D7:62:75:40:08:1C
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0873
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/BR713DHpvd7ckayArmjXYnVACBw.roa
Signing time:             Tue 31 Mar 2026 07:43:35 +0000
ROA not before:           Tue 31 Mar 2026 07:43:35 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        218.225.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2163 (0x873)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:43:35 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=051EF5DC31E9BDDEDC91AC80AE68D7627540081C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:84:8d:d5:7c:61:9e:d2:9e:9c:5a:5c:ea:f0:
                    b4:78:b1:a8:05:cd:b1:75:3b:9d:48:15:f7:3e:eb:
                    37:64:3f:65:62:98:71:78:57:5a:59:5a:bd:30:2d:
                    46:4d:a9:42:5d:6d:c9:b0:20:d3:bf:0a:a6:d7:59:
                    ae:6a:7b:9b:99:9e:a2:90:02:61:32:a6:55:08:b2:
                    24:2b:17:dc:0f:84:59:25:19:36:3c:c9:75:0d:bb:
                    89:f1:ce:b2:59:0f:33:97:c6:d0:67:98:4c:74:ff:
                    dd:39:b1:1e:dd:ff:e9:b4:85:05:a0:53:3a:8e:44:
                    01:2c:47:d2:b0:81:00:6a:a1:19:3a:53:ce:3b:52:
                    21:16:d4:b0:e5:aa:94:84:9b:24:b0:2a:0f:ab:b7:
                    19:e4:de:0f:3f:ff:15:29:1c:71:a0:7a:f7:aa:db:
                    fb:b8:bf:ff:42:d2:ac:bc:8e:18:31:3d:0b:00:5e:
                    5b:33:a6:d3:6c:e8:cc:89:da:bc:19:e3:b2:3f:cb:
                    50:42:15:54:e6:9c:99:dc:87:3e:ff:44:35:06:24:
                    f2:96:ef:10:23:50:32:d4:e0:52:e2:e9:d6:a8:f5:
                    0a:5c:44:d4:07:f2:d4:cc:74:c4:05:76:bd:bf:4f:
                    2b:13:3a:71:37:0a:26:63:6d:83:fb:92:ec:9c:a5:
                    7b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:1E:F5:DC:31:E9:BD:DE:DC:91:AC:80:AE:68:D7:62:75:40:08:1C
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/BR713DHpvd7ckayArmjXYnVACBw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.225.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:c7:fa:de:73:c1:d5:da:98:b4:ea:9b:2b:4d:d7:5c:67:3f:
         33:17:8a:28:d3:cc:96:f6:b7:3e:e9:08:e4:70:31:ae:20:cf:
         e6:f8:4c:bf:15:f4:be:1c:b5:07:6f:c2:e9:b8:a1:1f:73:d1:
         e0:81:64:74:2b:38:00:f3:71:f2:23:c6:c9:ec:42:e3:5d:04:
         2b:b8:c2:00:d7:fa:5e:ee:6d:96:9b:17:80:11:83:fd:dc:1a:
         55:0d:c8:16:d9:b6:4b:ca:4c:90:a9:d5:91:fa:83:b3:60:83:
         56:88:5f:23:76:3e:55:06:34:08:16:79:b8:d6:c7:ab:ae:a3:
         f1:ae:ef:14:0b:d0:5d:a9:8d:78:67:3f:1f:0d:a4:c3:0a:6b:
         97:bd:3f:b6:20:f6:8a:9f:b4:9c:a4:16:22:9f:b2:fc:49:ee:
         19:fc:1f:eb:f1:5a:3a:21:0a:27:f9:f3:bc:4c:19:9a:66:ec:
         19:5e:07:44:22:72:c5:54:80:75:05:b5:fb:26:1d:af:92:ba:
         dc:b2:a4:af:19:29:ae:9f:c2:08:f0:4c:92:a1:93:5b:5c:a6:
         b0:d9:82:63:96:f2:78:70:78:3f:b2:29:88:57:56:09:b1:bb:
         68:42:98:05:e0:61:91:bd:6a:2b:13:c9:34:7b:ff:dd:55:c7:
         03:59:7c:a0
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICCHMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw
NzQzMzVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDA1MUVGNURDMzFFOUJE
REVEQzkxQUM4MEFFNjhENzYyNzU0MDA4MUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDShI3VfGGe0p6cWlzq8LR4sagFzbF1O51IFfc+6zdkP2VimHF4
V1pZWr0wLUZNqUJdbcmwINO/CqbXWa5qe5uZnqKQAmEyplUIsiQrF9wPhFklGTY8
yXUNu4nxzrJZDzOXxtBnmEx0/905sR7d/+m0hQWgUzqORAEsR9KwgQBqoRk6U847
UiEW1LDlqpSEmySwKg+rtxnk3g8//xUpHHGgeveq2/u4v/9C0qy8jhgxPQsAXlsz
ptNs6MyJ2rwZ47I/y1BCFVTmnJnchz7/RDUGJPKW7xAjUDLU4FLi6dao9QpcRNQH
8tTMdMQFdr2/TysTOnE3CiZjbYP7kuycpXvvAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUBR713DHpvd7ckayArmjXYnVACBwwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTYxL0JSNzEzREhwdmQ3Y2theUFybWpYWW5WQUNCdy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADa4VgwDQYJKoZIhvcNAQELBQADggEB
AG7H+t5zwdXamLTqmytN11xnPzMXiijTzJb2tz7pCORwMa4gz+b4TL8V9L4ctQdv
wum4oR9z0eCBZHQrOADzcfIjxsnsQuNdBCu4wgDX+l7ubZabF4ARg/3cGlUNyBbZ
tkvKTJCp1ZH6g7Ngg1aIXyN2PlUGNAgWebjWx6uuo/Gu7xQL0F2pjXhnPx8NpMMK
a5e9P7Yg9oqftJykFiKfsvxJ7hn8H+vxWjohCif587xMGZpm7BleB0QicsVUgHUF
tfsmHa+SutyypK8ZKa6fwgjwTJKhk1tcprDZgmOW8nhweD+yKYhXVgmxu2hCmAXg
YZG9aisTyTR7/91VxwNZfKA=
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:10:18 2026 by rpki-client