Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/EmFVw5C7o9iXYIP6jJImMIcmsA0.roa
File:                     EmFVw5C7o9iXYIP6jJImMIcmsA0.roa (raw, json)
Hash identifier:          V7z35Jl1ODD8L919r9JQ+k9oNEGJs/+6U7mJgMaE2tA=
Subject key identifier:   12:61:55:C3:90:BB:A3:D8:97:60:83:FA:8C:92:26:30:87:26:B0:0D
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0856
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/EmFVw5C7o9iXYIP6jJImMIcmsA0.roa
Signing time:             Tue 31 Mar 2026 07:43:19 +0000
ROA not before:           Tue 31 Mar 2026 07:43:19 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        111.103.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2134 (0x856)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:43:19 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=126155C390BBA3D8976083FA8C9226308726B00D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:a9:8a:aa:ae:ff:ea:cf:14:ae:a4:46:3c:f3:
                    2a:c2:71:a2:09:09:c7:48:85:32:a5:28:4e:3d:34:
                    f1:3f:25:82:57:41:6e:4c:5b:2b:1f:43:10:f5:40:
                    c8:1c:34:31:61:91:6e:fd:80:5d:55:4a:6d:3f:31:
                    ab:f0:9d:ee:c2:71:a0:a0:2e:2b:26:4d:66:ca:63:
                    7e:e9:96:66:7e:c1:71:e1:39:50:ac:88:c8:f5:76:
                    ab:e1:7b:e1:57:3e:ae:c8:f8:c4:c9:b5:05:20:99:
                    50:9a:e4:21:4e:1f:c5:6f:b2:c0:06:bf:05:ab:2e:
                    fc:6f:4a:1d:ac:18:2b:61:ed:f6:d9:75:a7:3a:0d:
                    b6:3b:6e:80:cc:e3:0d:a6:63:8e:e7:06:e7:a6:95:
                    b0:33:17:02:9e:48:5e:90:b8:89:ea:94:f1:69:d1:
                    54:a3:ad:9c:ad:0c:a1:af:81:a3:be:c6:e7:03:ee:
                    d9:e2:f2:d2:b9:b1:fb:d2:92:23:45:35:98:7b:3a:
                    58:e3:28:42:ec:5a:eb:fe:7e:ac:e7:10:0e:50:13:
                    1f:a8:77:80:88:e4:b2:e9:aa:b3:7a:74:1b:16:26:
                    42:72:fb:2f:42:b4:82:0b:2d:8e:b8:51:e2:4c:ed:
                    50:4b:bf:8b:38:e6:ba:fa:96:28:4e:0a:6e:8c:92:
                    04:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:61:55:C3:90:BB:A3:D8:97:60:83:FA:8C:92:26:30:87:26:B0:0D
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/EmFVw5C7o9iXYIP6jJImMIcmsA0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.103.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9f:f0:29:ce:6c:2d:e2:04:c5:90:92:c0:39:33:c6:cf:17:d2:
         7e:0d:be:cb:b4:15:17:bb:2f:31:5c:cf:af:d9:06:61:28:c2:
         c6:f1:7a:45:20:d2:65:32:74:47:4c:bd:02:51:19:fd:e5:b2:
         db:3c:7e:2f:84:bd:92:50:d7:04:72:87:8e:3b:58:16:a3:2b:
         32:00:ff:00:f7:54:4d:a3:da:a6:40:e2:44:09:14:ef:33:02:
         31:a8:21:b9:58:3a:ac:e1:96:c4:97:29:1a:0f:30:08:97:c0:
         09:42:ac:a3:23:f9:16:ed:8f:1b:87:7b:d1:b4:d3:67:85:88:
         b4:fc:5c:dc:c8:69:c1:78:15:dc:cc:2e:f8:1e:db:33:79:23:
         77:a9:55:f4:06:3b:9f:20:a7:8d:26:8f:56:21:06:25:66:25:
         e9:54:a8:68:a9:a4:fd:f2:c9:20:bf:6e:f8:23:12:63:36:db:
         41:a0:ab:c5:fa:63:7f:36:16:95:60:6f:85:f0:74:5d:8b:b4:
         78:b5:e7:26:29:d4:71:62:c9:84:29:d5:f0:56:b3:8a:7a:68:
         26:1d:1d:38:0e:6a:8c:36:6b:64:c1:50:36:5a:71:10:c4:8c:
         c4:67:2f:73:72:86:03:68:39:05:45:3b:4b:2f:f5:f4:73:a8:
         07:3b:31:60
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgICCFYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw
NzQzMTlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDEyNjE1NUMzOTBCQkEz
RDg5NzYwODNGQThDOTIyNjMwODcyNkIwMEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDvqYqqrv/qzxSupEY88yrCcaIJCcdIhTKlKE49NPE/JYJXQW5M
WysfQxD1QMgcNDFhkW79gF1VSm0/Mavwne7CcaCgLismTWbKY37plmZ+wXHhOVCs
iMj1dqvhe+FXPq7I+MTJtQUgmVCa5CFOH8VvssAGvwWrLvxvSh2sGCth7fbZdac6
DbY7boDM4w2mY47nBuemlbAzFwKeSF6QuInqlPFp0VSjrZytDKGvgaO+xucD7tni
8tK5sfvSkiNFNZh7OljjKELsWuv+fqznEA5QEx+od4CI5LLpqrN6dBsWJkJy+y9C
tIILLY64UeJM7VBLv4s45rr6lihOCm6MkgQpAgMBAAGjggHYMIIB1DAdBgNVHQ4E
FgQUEmFVw5C7o9iXYIP6jJImMIcmsA0wHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTYxL0VtRlZ3NUM3bzlpWFlJUDZqSkltTUljbXNBMC5yb2EwHgYI
KwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwBvZzANBgkqhkiG9w0BAQsFAAOCAQEA
n/Apzmwt4gTFkJLAOTPGzxfSfg2+y7QVF7svMVzPr9kGYSjCxvF6RSDSZTJ0R0y9
AlEZ/eWy2zx+L4S9klDXBHKHjjtYFqMrMgD/APdUTaPapkDiRAkU7zMCMaghuVg6
rOGWxJcpGg8wCJfACUKsoyP5Fu2PG4d70bTTZ4WItPxc3MhpwXgV3Mwu+B7bM3kj
d6lV9AY7nyCnjSaPViEGJWYl6VSoaKmk/fLJIL9u+CMSYzbbQaCrxfpjfzYWlWBv
hfB0XYu0eLXnJinUcWLJhCnV8FazinpoJh0dOA5qjDZrZMFQNlpxEMSMxGcvc3KG
A2g5BUU7Sy/19HOoBzsxYA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:13:46 2026 by rpki-client