Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/CUiTWnieQgkOXBtB2dQOYNSOzZo.roa
File:                     CUiTWnieQgkOXBtB2dQOYNSOzZo.roa (raw, json)
Hash identifier:          uwy7GBt6H4G8HXZXFEEiAtwjF5LjPTKqX6IgVfKChBM=
Subject key identifier:   09:48:93:5A:78:9E:42:09:0E:5C:1B:41:D9:D4:0E:60:D4:8E:CD:9A
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       082E
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/CUiTWnieQgkOXBtB2dQOYNSOzZo.roa
Signing time:             Tue 31 Mar 2026 07:42:56 +0000
ROA not before:           Tue 31 Mar 2026 07:42:56 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        121.104.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2094 (0x82e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:42:56 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=0948935A789E42090E5C1B41D9D40E60D48ECD9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:48:b1:a3:09:d4:af:e5:42:a2:be:3b:4d:c1:
                    17:50:69:b4:ec:5e:e9:38:ac:6f:9c:95:ef:6e:8b:
                    30:5f:92:0e:7b:bb:5e:19:6f:9d:1a:ca:95:bd:db:
                    22:a0:84:29:ec:8f:97:a6:7b:14:cc:44:28:0e:63:
                    3b:be:e0:68:3e:a8:65:1e:ab:e5:07:b1:66:cb:ef:
                    9a:c5:27:e0:5b:ab:84:6f:71:7a:9b:40:b2:04:ed:
                    88:70:62:da:34:04:2c:49:d2:fc:94:d9:01:28:49:
                    f6:e6:29:ee:6a:fa:6c:78:bb:c4:14:4c:ea:6b:76:
                    5e:cc:8a:bc:5a:85:84:e9:16:43:09:26:d2:dc:cb:
                    c3:3c:24:1a:b0:01:f6:e4:19:65:e8:9b:2d:0b:b1:
                    c5:19:75:06:36:8a:fa:dd:80:e6:f5:77:82:83:6c:
                    fc:85:93:be:ca:1e:08:ee:2b:0f:55:5d:67:f9:ee:
                    db:c9:e6:64:73:bb:b7:34:f7:83:20:86:2b:81:b8:
                    5b:a7:00:5c:ae:9e:4a:2c:8b:8b:38:ed:72:4c:63:
                    14:0a:95:ac:ce:ab:19:65:9e:56:13:06:d4:19:26:
                    3a:d4:63:0e:19:e1:6a:26:fb:98:f7:f5:04:39:2d:
                    24:49:2a:bd:f2:f1:05:79:9a:5e:04:af:2e:da:54:
                    8b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:48:93:5A:78:9E:42:09:0E:5C:1B:41:D9:D4:0E:60:D4:8E:CD:9A
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/CUiTWnieQgkOXBtB2dQOYNSOzZo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.104.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         68:27:6d:71:7b:83:df:ee:8e:35:5e:d0:bc:f0:d3:62:1b:ca:
         a1:a9:08:3c:30:c3:2c:bb:22:cf:f9:63:20:0f:62:7f:05:f8:
         f4:b1:10:95:06:47:69:29:f3:b2:5f:07:09:d1:10:b2:8d:ac:
         03:8a:20:4e:13:01:4e:40:f6:17:34:3b:f3:84:25:88:2c:6a:
         ce:25:8f:28:2b:1d:57:89:c2:3d:70:4e:c9:4d:ab:ee:f0:c8:
         95:14:5c:ee:eb:94:f1:66:93:ce:7a:5b:bd:fd:4f:c3:aa:53:
         c5:ae:aa:60:ea:fc:3b:0d:40:6b:38:08:92:2f:60:bc:fb:eb:
         13:f6:f4:8a:3e:2d:15:2c:c5:b1:d1:ee:aa:18:90:9b:a7:be:
         ac:ee:a0:e9:5a:bb:fc:af:bb:c6:aa:54:d7:99:d7:f6:80:63:
         95:eb:64:61:c2:17:26:eb:6d:60:b3:a1:e7:a8:7a:42:32:02:
         5e:67:c0:33:87:84:a8:85:40:76:03:09:71:b4:9f:10:f3:8a:
         6e:c6:6a:ba:4b:8e:86:2a:9b:65:1d:b2:49:8f:4e:f4:ba:02:
         4b:7d:9a:6b:76:74:d3:1f:6b:26:16:50:53:00:40:c5:35:59:
         ce:83:12:8b:89:77:61:d0:81:b1:9b:bd:73:12:bb:ba:e2:26:
         87:28:78:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:57:14 2026 by rpki-client