Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/F7g2bbL_352PJfZu2QUWfWZvwBM.roa
File:                     F7g2bbL_352PJfZu2QUWfWZvwBM.roa (raw, json)
Hash identifier:          LnlqF8I3kCWigqaeCzSeOW6i/WiMhX94RntDNJmeTMA=
Subject key identifier:   17:B8:36:6D:B2:FF:DF:9D:8F:25:F6:6E:D9:05:16:7D:66:6F:C0:13
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       08C1
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/F7g2bbL_352PJfZu2QUWfWZvwBM.roa
Signing time:             Tue 31 Mar 2026 07:44:11 +0000
ROA not before:           Tue 31 Mar 2026 07:44:11 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        210.141.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2241 (0x8c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:44:11 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=17B8366DB2FFDF9D8F25F66ED905167D666FC013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:cf:c9:53:c4:49:4c:7b:57:16:33:0d:1e:0f:
                    a8:f1:ac:d3:f9:9e:2f:ae:e0:ee:16:fa:cf:99:74:
                    7c:2f:2a:43:b0:c3:48:fe:5d:66:ca:eb:08:f0:0a:
                    a3:9d:76:28:c8:48:ee:91:ed:12:80:94:6a:22:9d:
                    67:63:ac:ae:4b:b2:27:4a:16:e6:ae:94:76:82:0f:
                    4b:8d:76:d8:90:06:60:7e:cf:1c:79:2d:b7:4f:d7:
                    0c:17:74:1d:c0:42:53:8e:d0:98:cb:fc:ee:d0:41:
                    8d:5a:68:a0:a0:8b:0c:e7:24:85:cf:b4:bc:7d:9d:
                    4e:66:23:cc:c3:82:b6:b1:93:4c:7c:7d:e1:68:8d:
                    6f:12:55:1a:1d:cb:29:b6:3b:b2:1e:2c:97:cb:d8:
                    16:1a:ff:fc:52:ee:5d:7d:48:7f:9d:8d:d3:88:33:
                    71:39:c4:e2:86:b9:bb:41:86:67:60:d0:96:4c:fb:
                    b3:21:f6:7f:7e:b2:ab:ce:86:44:38:3e:f9:17:85:
                    fe:5e:6e:52:7e:14:c5:17:ba:bd:95:ac:24:93:ca:
                    78:41:33:db:b8:b1:35:c6:8f:60:78:15:56:5e:cb:
                    db:76:30:e5:fd:c8:25:18:e1:92:76:66:6b:ae:ba:
                    bf:9f:f5:ad:96:4e:3a:c0:a4:f4:b3:14:6e:f3:2f:
                    65:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:B8:36:6D:B2:FF:DF:9D:8F:25:F6:6E:D9:05:16:7D:66:6F:C0:13
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/F7g2bbL_352PJfZu2QUWfWZvwBM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.141.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:be:e2:59:cb:cc:5e:d9:af:ac:cd:a4:4b:18:10:79:7b:2e:
         7f:c9:8c:50:ab:19:83:63:36:7e:6c:26:65:70:f4:51:b3:fa:
         aa:21:43:d9:43:7a:04:f4:b4:e5:c9:80:af:62:f1:ce:33:e8:
         be:ee:52:be:5c:41:2f:54:85:cc:93:7a:12:04:a5:3d:dd:c0:
         f7:e1:86:47:14:79:ae:13:b2:c2:31:61:96:f3:f0:98:2a:6a:
         3b:f1:d4:66:b5:d3:66:97:4b:7f:96:cc:aa:f6:b6:d7:26:df:
         1e:a3:38:71:d2:91:b7:d5:21:8f:c5:1c:86:be:25:ac:da:9e:
         b8:f7:c5:d4:82:b4:08:15:2b:6c:85:1c:bb:01:93:01:f5:bf:
         a5:07:98:ad:88:51:b6:e3:01:67:6b:b5:51:00:2e:5d:e5:e7:
         89:13:58:72:af:5d:bf:21:65:69:74:45:03:8e:ac:a3:9d:54:
         7c:99:32:7b:2e:e7:14:c3:b3:e4:13:e4:b0:c3:a4:8b:83:dd:
         09:a0:13:86:54:b6:f3:5b:00:69:c0:50:28:79:79:c1:8d:aa:
         28:88:4d:13:db:af:83:e9:f6:8b:12:9c:7b:52:8b:b8:63:c8:
         38:55:45:a4:0a:65:85:fc:e4:17:88:40:b3:a9:bb:c2:9d:94:
         5a:ce:4d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:13:42 2026 by rpki-client