Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/BtYubXYZTLJCEFNn2q0rV-1-rPM.roa
File:                     BtYubXYZTLJCEFNn2q0rV-1-rPM.roa (raw, json)
Hash identifier:          PAF8WjJVZ4HqiZ0ydsYaAxC1F9596JCnVOAFCrIB9ro=
Subject key identifier:   06:D6:2E:6D:76:19:4C:B2:42:10:53:67:DA:AD:2B:57:ED:7E:AC:F3
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       08AB
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/BtYubXYZTLJCEFNn2q0rV-1-rPM.roa
Signing time:             Tue 31 Mar 2026 07:44:00 +0000
ROA not before:           Tue 31 Mar 2026 07:44:00 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        211.125.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2219 (0x8ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:44:00 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=06D62E6D76194CB242105367DAAD2B57ED7EACF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:05:3f:e9:b2:f0:45:32:32:be:f5:74:a3:42:
                    9a:aa:61:2d:4c:23:36:a0:7e:02:a7:50:a0:0c:60:
                    62:47:0e:b7:42:ac:1a:5e:b8:51:23:d6:fa:7c:49:
                    84:b9:80:cf:cc:b5:f3:b6:da:30:e1:03:82:f7:6b:
                    ec:cc:e6:6c:b5:14:50:4c:41:08:b6:15:b6:4a:7c:
                    3e:96:0d:9c:29:66:1d:ac:0e:23:9d:1e:a9:e2:ee:
                    66:7b:00:d8:09:39:eb:07:a1:77:31:b6:fc:b1:b4:
                    30:4a:af:2a:2b:db:48:e6:ab:54:cf:24:18:93:5b:
                    4d:8b:a0:62:e2:6d:de:99:42:81:4e:d1:4d:e6:ef:
                    a3:8b:88:13:3c:34:8d:6b:e0:8d:ba:16:36:ab:93:
                    c8:b8:65:a5:dd:68:c2:ec:aa:d7:61:f9:bb:e7:27:
                    be:11:2f:34:45:5c:93:c0:c6:44:5c:5a:24:7a:b3:
                    17:0d:8e:f3:4b:22:71:92:f5:3d:29:20:0c:3b:03:
                    21:e6:50:2a:c6:3e:08:1a:76:eb:14:ab:40:b4:3d:
                    59:f8:12:8d:32:4c:da:a3:ad:c5:ed:e6:ad:82:de:
                    4d:e8:4a:10:b0:ae:50:c8:0b:cf:80:29:a1:2b:f3:
                    5d:97:73:e7:82:54:b5:74:2b:29:a2:fd:5a:93:b6:
                    e7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D6:2E:6D:76:19:4C:B2:42:10:53:67:DA:AD:2B:57:ED:7E:AC:F3
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/BtYubXYZTLJCEFNn2q0rV-1-rPM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.125.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:87:34:3c:e4:fb:e4:05:8c:10:91:b2:c2:78:71:e5:b6:2a:
         05:f7:db:6f:cc:e6:9d:b5:d3:9a:9e:f1:0a:9a:2a:9e:c0:aa:
         20:8b:d0:8c:02:c5:f7:a1:9a:30:c4:22:18:a3:87:db:e0:54:
         49:ea:3d:1b:26:0c:61:c2:75:63:0e:d2:7f:c6:74:f0:7a:77:
         b5:47:3d:35:37:ea:ea:c3:52:9a:79:65:19:82:df:84:25:22:
         f3:97:f4:08:45:1e:77:b5:c4:b7:68:c9:6d:a9:a5:a1:8d:1c:
         f3:dc:a3:86:7f:5d:34:bf:6d:9a:09:1a:18:68:e6:d8:6b:0e:
         6a:e7:08:91:1c:44:2c:50:a0:ab:f3:81:27:c7:11:65:54:c8:
         f1:c9:26:06:cd:ad:29:b1:47:92:83:81:3b:8d:ee:61:ea:c8:
         e2:d0:96:24:cb:77:74:e7:be:a3:1b:52:ce:27:be:f7:08:f8:
         e4:0f:9e:86:e7:2b:80:44:9e:d5:a2:f6:61:2c:56:ff:0d:a4:
         d4:52:89:ed:80:00:ce:4f:87:f8:39:5a:4c:b5:ad:58:18:6a:
         9b:eb:82:e5:f5:17:f8:43:8e:18:65:ff:0d:c0:ad:b0:02:d1:
         c0:13:3f:1a:78:e7:aa:12:c7:c6:ed:db:00:7d:12:0b:33:b2:
         cf:db:fc:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:37 2026 by rpki-client