Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/EZveGAE5E7vQBmXrnhrIe7iP6o4.roa
File:                     EZveGAE5E7vQBmXrnhrIe7iP6o4.roa (raw, json)
Hash identifier:          9gERPNak2M7OaGJGTWQRNHiU6UUcafYENZiI5oy9U94=
Subject key identifier:   11:9B:DE:18:01:39:13:BB:D0:06:65:EB:9E:1A:C8:7B:B8:8F:EA:8E
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0767
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/EZveGAE5E7vQBmXrnhrIe7iP6o4.roa
Signing time:             Tue 31 Mar 2026 07:41:21 +0000
ROA not before:           Tue 31 Mar 2026 07:41:21 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        118.159.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1895 (0x767)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:41:21 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=119BDE18013913BBD00665EB9E1AC87BB88FEA8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3a:5b:ec:82:c5:c9:b8:5e:43:66:29:89:0f:
                    e7:c9:c8:87:ff:f5:29:80:df:29:d2:56:b6:bb:8f:
                    db:0e:b6:b6:30:28:94:8b:d0:5e:5a:7e:5a:e8:d0:
                    85:f6:8a:d1:70:a8:9b:5c:fa:3f:36:9f:01:63:48:
                    b6:9d:db:44:90:b4:00:c6:92:e1:77:f2:86:65:35:
                    8c:ae:92:b9:39:97:29:10:1d:b9:e5:c8:f6:4d:02:
                    fb:d1:1c:86:41:9b:ef:bb:f5:51:18:14:c6:cf:1f:
                    21:03:c8:73:ea:d8:52:9d:35:7d:db:88:16:f1:aa:
                    ab:21:85:8f:6b:0c:49:0f:54:1c:bd:b7:25:24:f0:
                    e3:2b:75:2a:a9:e2:5d:c6:48:0f:e8:e6:6e:ac:c0:
                    19:70:77:c9:9c:66:ac:e5:9c:0b:28:b9:5c:00:30:
                    ba:32:0f:ec:0a:4d:b0:97:34:6c:43:f8:27:f1:6e:
                    44:63:36:41:7d:f0:d0:d7:9a:6e:12:03:fe:48:2f:
                    e3:1b:52:b0:bd:d1:09:44:64:7c:39:53:ae:2f:a2:
                    1d:de:65:85:6a:91:34:46:fa:e8:a4:f4:21:5b:1d:
                    96:11:2d:1b:4a:be:3c:34:4a:a7:75:d6:6a:b5:a1:
                    ad:09:bb:b6:7f:b6:02:89:57:2c:7a:f6:94:7c:1f:
                    9d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:9B:DE:18:01:39:13:BB:D0:06:65:EB:9E:1A:C8:7B:B8:8F:EA:8E
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/EZveGAE5E7vQBmXrnhrIe7iP6o4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.159.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a1:c0:89:d3:2c:c2:d6:42:30:ec:62:75:51:fd:33:2d:60:1d:
         24:39:6e:27:40:61:ba:31:5e:b1:66:6c:3d:26:95:33:79:b7:
         17:39:02:e9:d7:5e:9e:bb:c0:e4:44:e8:81:85:63:76:4f:44:
         69:a1:a1:2f:59:01:9b:d2:79:fa:1c:58:94:77:df:e2:da:08:
         77:c4:ea:1e:23:42:ed:97:20:ec:99:37:b4:3a:86:fa:ce:e8:
         93:c7:a9:9f:99:45:f0:cc:15:9d:77:1c:f7:47:0b:84:68:2d:
         6b:0a:c7:72:b3:01:7f:9f:ea:19:52:1d:12:82:47:8a:13:2c:
         e3:c9:c6:6b:9e:4c:a4:34:87:de:eb:3b:bc:70:1c:3b:34:2b:
         7e:b8:e1:74:b3:e2:4b:ca:ae:81:6f:e1:23:68:09:24:7c:3c:
         68:17:f1:57:57:42:58:4c:4d:0e:6f:95:9b:f4:87:da:e1:84:
         aa:48:5a:0b:4c:00:18:af:f7:c4:88:1f:24:7d:d6:d3:7e:02:
         1a:2e:81:3d:42:6f:e7:26:48:2f:b2:4a:fb:01:fd:0b:64:c2:
         03:8d:c9:94:65:2e:9d:ad:4d:40:a2:e0:41:a4:90:2c:62:77:
         e6:14:0c:a3:62:db:df:45:7d:38:17:65:ce:1e:88:08:d4:2f:
         cc:6b:62:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:21:59 2026 by rpki-client