Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/CDasxX0WJcMKIxZTScS6nHd_sQw.roa
File:                     CDasxX0WJcMKIxZTScS6nHd_sQw.roa (raw, json)
Hash identifier:          dQPqYddl0zf+g3s68PE1z+Ih5LS3tqgWu0YHPabnmAo=
Subject key identifier:   08:36:AC:C5:7D:16:25:C3:0A:23:16:53:49:C4:BA:9C:77:7F:B1:0C
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       08A3
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/CDasxX0WJcMKIxZTScS6nHd_sQw.roa
Signing time:             Tue 31 Mar 2026 07:43:56 +0000
ROA not before:           Tue 31 Mar 2026 07:43:56 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        210.249.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2211 (0x8a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:43:56 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=0836ACC57D1625C30A23165349C4BA9C777FB10C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5b:7a:2e:73:43:58:1c:db:b7:80:8a:e5:8e:
                    a6:55:00:8a:07:bd:5f:f6:3b:1c:f2:3d:f1:23:fe:
                    09:7d:41:07:4b:a4:3f:01:69:87:91:ee:0c:12:49:
                    8f:55:75:44:8d:b7:46:8b:ef:a0:a5:d3:7e:a9:02:
                    8d:af:f5:27:f0:5b:a6:98:9f:1b:cd:d3:6a:19:8d:
                    21:e0:f1:19:24:e5:da:e1:c4:31:8f:5f:f2:1c:dc:
                    5d:2a:b4:04:34:1a:ba:ef:03:ee:a2:19:d5:8b:3c:
                    e1:0d:e3:db:28:76:60:c5:2b:6a:1e:22:a6:5d:8f:
                    8c:0d:70:38:ea:79:dc:ed:be:3c:38:37:a8:f9:b8:
                    1a:55:bf:6f:ea:f4:7f:05:6a:95:cb:21:fa:fe:ad:
                    44:31:c5:e1:61:93:59:36:1b:99:38:c0:cc:dc:ce:
                    fc:71:9e:ec:b4:26:cd:d7:0c:0f:18:1e:b5:45:6b:
                    e6:22:96:f6:78:4d:e3:e3:26:be:3d:27:44:27:4b:
                    51:5d:d8:ca:e0:aa:95:f1:12:2c:db:e9:e3:a3:4a:
                    29:cf:e1:7b:af:a0:50:a3:c7:fd:fe:23:f3:f9:94:
                    32:13:bb:70:65:30:90:89:17:5f:1b:f1:06:62:df:
                    9f:48:fa:6d:90:6c:35:e4:6e:26:af:07:24:6d:fe:
                    30:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:36:AC:C5:7D:16:25:C3:0A:23:16:53:49:C4:BA:9C:77:7F:B1:0C
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/CDasxX0WJcMKIxZTScS6nHd_sQw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.249.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:13:cd:56:af:9b:68:c6:81:12:1b:a2:d7:4d:f8:46:2e:50:
         29:2a:86:65:1b:26:a6:bd:c0:ff:c6:f3:31:f9:9c:29:fe:a9:
         26:97:15:ba:2e:a2:94:80:0b:ef:20:f5:8c:ef:6e:06:d2:ea:
         e0:cc:68:e0:a6:e1:d0:41:1d:12:cc:82:ae:50:16:3f:89:e1:
         68:27:7b:49:09:36:cc:93:55:61:10:ad:ac:c7:36:e2:f4:60:
         8b:d0:40:84:6a:f2:76:d5:90:e3:1e:ea:9a:a7:86:a2:71:6e:
         d4:45:20:09:24:a5:15:bb:95:ad:82:e6:f2:68:21:f3:28:6a:
         dd:cb:3f:e9:18:66:c7:e8:31:21:92:4c:7c:aa:af:9b:b9:56:
         b2:39:15:51:54:9d:29:df:2f:b2:53:eb:dc:49:bb:a3:b4:3f:
         d5:14:77:8b:cb:72:51:24:d7:53:e5:ed:02:11:7f:b3:82:fe:
         f3:02:af:b5:85:7c:5c:67:db:cf:63:23:d2:6b:0c:b0:a3:e8:
         e2:15:64:70:6e:29:c1:f6:e0:3b:c9:45:77:a6:07:61:8e:46:
         05:36:4a:60:e7:1a:30:fa:db:65:00:8c:60:b0:d6:5d:9a:a1:
         9f:fa:5e:41:13:e1:88:cb:d5:57:c5:6c:3c:8e:80:b1:b7:99:
         45:97:dd:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:58:32 2026 by rpki-client