Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/CTMwywuRW4iBOCg7xsNFBLxhDo4.roa
File:                     CTMwywuRW4iBOCg7xsNFBLxhDo4.roa (raw, json)
Hash identifier:          nuq2CaB5C+pY4vbR4XmMINO8K2VC9CaJFLP9GwPNtFg=
Subject key identifier:   09:33:30:CB:0B:91:5B:88:81:38:28:3B:C6:C3:45:04:BC:61:0E:8E
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0846
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/CTMwywuRW4iBOCg7xsNFBLxhDo4.roa
Signing time:             Tue 31 Mar 2026 07:43:11 +0000
ROA not before:           Tue 31 Mar 2026 07:43:11 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        210.168.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2118 (0x846)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:43:11 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=093330CB0B915B888138283BC6C34504BC610E8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ba:76:3d:93:ad:1c:ec:d0:62:a6:cc:c9:50:
                    3f:d9:7d:87:cf:91:8d:84:a7:91:09:23:95:b3:ce:
                    2c:c5:37:e3:bd:63:62:de:8e:b7:39:85:2d:a8:f8:
                    c7:ce:e6:8f:33:c2:c7:0e:a2:dc:cf:dd:e5:17:e5:
                    b2:fe:8a:a8:cf:b1:18:d1:09:88:2b:8f:dc:e7:73:
                    13:13:20:86:46:85:a9:64:ee:92:30:f0:ed:92:bc:
                    5f:1f:2d:24:ba:37:49:03:ed:82:5b:bb:5d:bf:d0:
                    d6:28:f4:80:00:a8:8c:aa:6c:49:c9:24:4e:c0:28:
                    12:a4:47:c9:84:48:ce:2e:e7:2e:f6:16:da:07:97:
                    97:6e:7a:3e:16:46:f1:71:88:4e:2c:f6:bd:49:cf:
                    b1:fd:96:90:93:a2:ae:12:7b:68:4a:41:3d:5b:ed:
                    e0:d1:93:5f:16:1c:35:d9:df:66:5b:3a:2c:69:ac:
                    47:a1:f2:67:00:73:b5:44:c7:01:bd:cb:fb:40:d9:
                    ed:35:d7:3f:6a:3d:39:48:87:d9:59:05:31:ae:72:
                    0e:ff:45:be:eb:f4:7a:ca:7f:c4:26:df:0d:8c:68:
                    e7:54:91:31:ca:cb:7f:45:26:e0:26:1a:a6:49:57:
                    c6:81:1d:49:9c:d5:22:63:29:4c:4e:25:0a:eb:44:
                    b4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:33:30:CB:0B:91:5B:88:81:38:28:3B:C6:C3:45:04:BC:61:0E:8E
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/CTMwywuRW4iBOCg7xsNFBLxhDo4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.168.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         14:35:44:2f:ac:8d:75:de:cf:92:ab:9c:29:40:0a:39:9c:a6:
         76:fa:70:87:ad:75:e2:0f:e7:93:a9:b2:58:33:c4:0d:6c:6c:
         c3:63:26:4b:25:04:f9:cb:ad:ba:b8:40:5a:28:ac:02:a0:55:
         19:25:9f:5a:fd:a6:00:f4:26:6b:d2:f9:51:15:a1:8d:5b:46:
         d9:2a:48:3a:41:0b:77:ef:fd:7e:73:8d:9a:50:0d:0e:5c:e4:
         c7:14:d9:bb:6c:08:3b:62:1d:63:0b:75:e4:e2:22:3e:05:1d:
         af:18:50:29:85:c2:83:24:a5:47:3f:d0:71:f2:4a:44:97:af:
         4f:99:d2:c3:50:27:c2:a9:e8:ba:ab:0a:33:97:5d:bf:8d:e9:
         7f:27:cc:96:48:68:49:ac:26:fd:e4:2c:a0:a2:1b:5b:80:24:
         ed:fc:07:6e:e5:4b:d5:21:66:fe:95:17:49:00:43:a7:62:d0:
         38:be:ff:99:47:7e:d7:f2:63:dd:23:bc:96:4c:2f:22:00:8a:
         05:0b:79:fb:48:63:c4:2e:25:70:e6:11:2f:72:e2:dc:36:34:
         2b:cf:55:d4:9d:d1:64:c8:a0:4f:72:22:50:96:c4:6e:e5:37:
         a3:0d:33:67:e7:6f:b0:2f:11:56:dc:34:2b:6e:b2:b1:75:da:
         41:b4:99:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:45 2026 by rpki-client