Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/EupgF37naDUFbUWKao798q3BWjM.roa
File:                     EupgF37naDUFbUWKao798q3BWjM.roa (raw, json)
Hash identifier:          7q7p0x+esQ2YzqDgUNI/tTM517HdAg7s7AXGlAX7VuI=
Subject key identifier:   12:EA:60:17:7E:E7:68:35:05:6D:45:8A:6A:8E:FD:F2:AD:C1:5A:33
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       08C2
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/EupgF37naDUFbUWKao798q3BWjM.roa
Signing time:             Tue 31 Mar 2026 07:44:11 +0000
ROA not before:           Tue 31 Mar 2026 07:44:11 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        124.109.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2242 (0x8c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:44:11 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=12EA60177EE76835056D458A6A8EFDF2ADC15A33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0d:7d:c9:49:74:ff:bb:e7:00:b8:44:b8:47:
                    5c:8e:af:50:67:19:24:54:e7:07:ba:10:d7:d5:1b:
                    e8:9d:4e:f7:69:d1:cc:3d:15:72:f8:9d:fb:b7:0d:
                    2a:17:75:6d:ba:ac:cb:31:2c:41:ef:fa:58:07:01:
                    3d:2f:32:90:6c:58:5f:2e:2c:2e:60:ad:15:90:73:
                    d1:77:c4:45:62:da:82:7f:a0:dc:7d:d0:94:69:15:
                    28:98:c9:6b:18:67:aa:e7:46:27:76:f0:39:41:4d:
                    8a:44:66:74:c2:d3:c7:67:41:dc:c5:45:2a:f0:45:
                    4c:f4:ba:ad:10:90:86:d3:d4:7e:94:7a:43:c2:06:
                    dc:7c:0e:36:69:3f:a4:36:c6:d8:a8:68:7b:84:28:
                    45:23:2e:9e:34:15:f2:c6:5a:73:07:4a:c1:7a:58:
                    44:e7:b0:58:8e:1f:d5:ee:a3:e1:6e:24:27:55:7b:
                    42:ca:1a:47:47:a6:08:34:99:15:c2:4d:43:6b:d2:
                    24:5e:39:a1:c7:af:3c:5d:8e:42:fd:46:51:0c:55:
                    fd:55:d7:b0:7b:fe:e2:b0:75:dc:08:d9:dc:6a:81:
                    7f:93:4d:43:e8:f7:10:54:e8:ba:7e:82:94:dc:50:
                    80:b3:3a:23:ae:46:5d:28:3e:32:e3:51:e8:0b:53:
                    c1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:EA:60:17:7E:E7:68:35:05:6D:45:8A:6A:8E:FD:F2:AD:C1:5A:33
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/EupgF37naDUFbUWKao798q3BWjM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.109.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:c6:0e:4e:93:b3:20:c2:46:fb:7f:7f:46:06:9d:c1:f7:e7:
         82:a7:b9:10:c9:43:5e:75:2b:b9:0e:37:14:eb:83:21:15:47:
         d4:53:75:7b:be:5a:f2:f7:46:c9:3c:d5:0b:82:74:77:4a:4b:
         72:3e:5d:b1:15:97:a9:36:de:d0:c0:de:9d:43:e7:46:f4:db:
         3c:29:0f:55:67:a4:ce:2d:da:f6:c1:80:ec:7b:fc:dd:22:e9:
         56:d4:0b:13:cd:15:09:51:b2:5c:49:7e:58:1c:a0:2a:cd:4b:
         30:a9:76:43:85:55:0b:77:bf:3f:7a:42:ff:fb:e3:c2:da:b8:
         6c:20:a6:93:5c:91:8d:06:31:c6:ed:16:1f:f9:01:d6:0a:5a:
         60:96:89:ac:eb:6c:9c:98:63:13:84:61:ca:79:55:ef:0a:bf:
         04:db:11:c3:75:6e:73:5e:5c:07:31:bf:2a:da:6c:f8:71:7e:
         0a:9d:56:40:aa:3f:f1:37:68:3a:81:c2:b7:a4:8e:d8:25:c5:
         99:fd:3b:e6:40:7a:f8:a6:45:68:25:37:35:3c:31:fb:8a:11:
         5b:b2:fe:d5:60:a5:9c:94:2c:b3:95:aa:fe:d7:6c:50:6c:c1:
         39:af:81:85:71:9f:dc:75:ad:4e:de:bf:1b:cb:da:3c:aa:ee:
         41:ea:ef:c6
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICCMIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw
NzQ0MTFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDEyRUE2MDE3N0VFNzY4
MzUwNTZENDU4QTZBOEVGREYyQURDMTVBMzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCsDX3JSXT/u+cAuES4R1yOr1BnGSRU5we6ENfVG+idTvdp0cw9
FXL4nfu3DSoXdW26rMsxLEHv+lgHAT0vMpBsWF8uLC5grRWQc9F3xEVi2oJ/oNx9
0JRpFSiYyWsYZ6rnRid28DlBTYpEZnTC08dnQdzFRSrwRUz0uq0QkIbT1H6UekPC
Btx8DjZpP6Q2xtioaHuEKEUjLp40FfLGWnMHSsF6WETnsFiOH9Xuo+FuJCdVe0LK
GkdHpgg0mRXCTUNr0iReOaHHrzxdjkL9RlEMVf1V17B7/uKwddwI2dxqgX+TTUPo
9xBU6Lp+gpTcUICzOiOuRl0oPjLjUegLU8HTAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUEupgF37naDUFbUWKao798q3BWjMwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTYxL0V1cGdGMzduYURVRmJVV0thbzc5OHEzQldqTS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB8bZ4wDQYJKoZIhvcNAQELBQADggEB
AILGDk6TsyDCRvt/f0YGncH354KnuRDJQ151K7kONxTrgyEVR9RTdXu+WvL3Rsk8
1QuCdHdKS3I+XbEVl6k23tDA3p1D50b02zwpD1VnpM4t2vbBgOx7/N0i6VbUCxPN
FQlRslxJflgcoCrNSzCpdkOFVQt3vz96Qv/748LauGwgppNckY0GMcbtFh/5AdYK
WmCWiazrbJyYYxOEYcp5Ve8KvwTbEcN1bnNeXAcxvyrabPhxfgqdVkCqP/E3aDqB
wrekjtglxZn9O+ZAevimRWglNzU8MfuKEVuy/tVgpZyULLOVqv7XbFBswTmvgYVx
n9x1rU7evxvL2jyq7kHq78Y=
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:38:19 2026 by rpki-client