Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/F8Ern6-Gs-hAze8-VAZTda0I4KE.roa
File:                     F8Ern6-Gs-hAze8-VAZTda0I4KE.roa (raw, json)
Hash identifier:          7cwj/uJJfZ/Ssy9c1HU29toaZXbs7v5LpdpyHBrmsYM=
Subject key identifier:   17:C1:2B:9F:AF:86:B3:E8:40:CD:EF:3E:54:06:53:75:AD:08:E0:A1
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0850
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/F8Ern6-Gs-hAze8-VAZTda0I4KE.roa
Signing time:             Tue 31 Mar 2026 07:43:16 +0000
ROA not before:           Tue 31 Mar 2026 07:43:16 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        182.248.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2128 (0x850)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:43:16 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=17C12B9FAF86B3E840CDEF3E54065375AD08E0A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b6:fc:37:96:bd:d1:f7:06:d7:9d:2a:84:b0:
                    6d:b8:a8:42:47:c2:4b:2a:4d:cf:85:10:2c:f9:d1:
                    bb:f2:97:21:7f:a4:b3:e5:07:99:87:86:4c:55:79:
                    6e:4a:41:70:d9:9e:a6:a9:13:50:66:9d:eb:88:ae:
                    3b:6c:b4:68:f2:73:e2:97:4c:95:4e:7e:96:2f:ce:
                    b4:74:9b:ae:2e:3c:ce:5b:89:e5:97:27:cb:98:6f:
                    18:7f:6d:4f:b9:25:e9:32:b2:80:43:4b:bd:55:89:
                    68:f8:76:5f:13:e7:df:df:2d:e4:cc:21:43:c4:68:
                    c9:30:8c:7b:43:9a:3a:fb:c0:42:83:dc:9e:ff:04:
                    a6:63:13:97:39:1e:d2:8c:76:3f:bf:43:5d:7c:03:
                    71:3e:1f:a5:b7:12:9d:d8:2d:60:fd:91:7b:41:b6:
                    13:05:3e:af:23:85:51:6a:e9:bb:f6:6a:69:c3:71:
                    5d:a5:8d:20:b6:86:34:2a:47:04:69:b5:04:69:b2:
                    f6:61:fe:1c:c1:b8:40:97:88:89:9f:32:6f:42:fc:
                    d0:1c:f9:47:79:55:8e:b0:a5:88:70:a3:1d:da:8c:
                    3b:21:ba:61:0f:fb:ca:48:7b:08:18:37:fd:3e:e5:
                    04:fd:9e:97:81:2b:88:39:c4:ec:3a:4c:b0:e8:34:
                    7c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:C1:2B:9F:AF:86:B3:E8:40:CD:EF:3E:54:06:53:75:AD:08:E0:A1
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/F8Ern6-Gs-hAze8-VAZTda0I4KE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.248.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         92:ee:c3:0a:4a:26:4f:ce:c4:32:03:dc:45:b2:ce:2d:ad:98:
         83:a8:19:75:1b:f9:dd:ad:c9:63:55:b3:8d:a7:6e:73:ef:e2:
         bf:9f:31:8d:bc:12:51:2c:c8:1f:5c:cc:7c:f5:09:18:84:e6:
         3f:07:4f:05:c6:54:b7:47:54:17:2a:a2:05:de:8f:27:a3:87:
         0e:0d:f7:e0:39:15:76:13:24:23:b4:75:8f:3c:53:6c:e5:b7:
         c9:1d:5c:0f:9c:ba:b2:db:74:b7:be:68:f8:71:00:d8:72:2f:
         76:e6:bc:de:7b:d8:07:a0:73:7e:4c:8e:8a:cd:24:98:92:eb:
         11:a7:5d:c1:7b:f7:1c:d5:3b:d9:56:b6:69:9b:14:95:79:42:
         ff:06:47:7e:c9:ed:7b:8b:21:7f:fe:ac:49:01:88:66:1d:f2:
         1a:23:50:c3:c3:d1:2d:b2:eb:59:d9:e2:e5:86:55:3f:04:e0:
         d6:b5:51:b7:3e:91:b7:81:27:51:d6:87:72:37:0e:40:b8:f6:
         3a:a3:0f:2d:c5:e0:8c:1a:41:e0:a8:9a:fe:50:85:cf:cf:19:
         43:64:0d:7e:bb:cb:93:45:92:7d:12:ab:10:c3:73:cc:18:53:
         a6:ac:6a:b9:17:f5:c2:86:d5:a8:9e:7c:ff:94:25:80:61:0d:
         f7:30:de:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:06:09 2026 by rpki-client