Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/FL7vnadvGTnfT8zAn_LLg8w1C3g.roa
File:                     FL7vnadvGTnfT8zAn_LLg8w1C3g.roa (raw, json)
Hash identifier:          XehDKF4ThpKJVzyEvqBZPD6Ywkrk8oh+QK0XVxrAxdc=
Subject key identifier:   14:BE:EF:9D:A7:6F:19:39:DF:4F:CC:C0:9F:F2:CB:83:CC:35:0B:78
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0854
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/FL7vnadvGTnfT8zAn_LLg8w1C3g.roa
Signing time:             Tue 31 Mar 2026 07:43:18 +0000
ROA not before:           Tue 31 Mar 2026 07:43:18 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        121.111.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2132 (0x854)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:43:18 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=14BEEF9DA76F1939DF4FCCC09FF2CB83CC350B78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b9:3f:dc:50:eb:53:f2:91:22:c7:b1:52:ce:
                    66:3e:c4:11:41:78:3a:ea:65:0c:8f:78:78:83:e8:
                    11:ba:3e:d9:1c:5f:e0:1f:1f:db:96:5d:59:bf:99:
                    12:a8:c3:ba:e5:5d:1a:01:76:de:f9:25:7e:e3:aa:
                    a4:87:94:4e:51:70:af:c4:1e:79:2f:c4:dd:f9:7a:
                    3c:cd:4e:50:4f:9d:5e:2e:23:cd:04:78:08:52:07:
                    b6:5d:ae:94:73:79:59:8a:b2:4b:71:43:97:9a:f7:
                    f8:00:38:ed:f6:38:53:d4:32:b4:15:4d:e7:5a:06:
                    ba:1c:bc:24:d0:47:a1:4c:f4:49:3f:86:9f:a7:91:
                    82:95:39:b4:0d:b9:3e:25:c7:28:d6:71:f0:7c:c6:
                    1d:d5:0b:ec:2e:48:88:ad:a6:0c:d0:0a:9e:32:98:
                    3b:72:90:b6:8f:0e:bc:b5:53:a5:30:ab:c5:26:43:
                    9f:8c:4d:77:06:ef:f3:9a:16:42:47:6f:ec:f4:47:
                    65:e9:50:d0:ea:48:4e:70:15:2f:1b:68:1a:21:2c:
                    0b:db:7b:86:ad:5e:63:e4:ff:28:83:8c:7f:8b:32:
                    e2:54:aa:73:78:5f:ca:b3:50:16:84:3f:05:4c:a1:
                    c6:0a:f1:87:07:a6:df:6e:f9:2d:6a:26:61:32:ba:
                    27:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:BE:EF:9D:A7:6F:19:39:DF:4F:CC:C0:9F:F2:CB:83:CC:35:0B:78
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/FL7vnadvGTnfT8zAn_LLg8w1C3g.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.111.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         27:8f:f7:27:fc:7b:6e:85:4b:07:8f:17:f5:84:0e:a7:22:43:
         5c:b9:34:17:89:18:b3:7d:e1:cf:96:56:27:a5:6d:57:0d:03:
         53:7e:9a:ba:35:4e:0b:49:02:a6:a5:c9:74:7c:a0:0a:a4:a3:
         a3:ce:92:69:5e:a0:62:29:04:f7:6e:cc:40:aa:ff:db:8d:76:
         18:9f:4f:66:a7:7f:b2:cb:55:b5:be:2c:39:5a:bd:63:ba:f5:
         8c:76:8e:ba:3f:c7:6e:71:72:43:22:da:fe:de:9e:5a:cb:1a:
         0c:e5:27:83:30:71:ee:1e:bc:91:67:39:30:85:ff:ee:dd:d2:
         d6:b0:f9:70:e8:17:51:da:af:2a:ab:e8:85:57:86:39:58:b6:
         83:87:54:02:21:ee:3e:67:2b:3f:12:31:75:14:04:67:7a:bd:
         b3:ec:5f:6d:98:21:73:4b:f3:c8:26:1d:19:6e:b8:65:24:32:
         4e:84:08:dd:8d:23:21:94:7d:c8:01:24:86:f5:ba:f7:44:5b:
         9b:cc:45:6b:2d:9f:4f:2b:fe:ee:d2:2c:34:97:93:62:b9:19:
         fd:a1:6a:e2:7b:be:d1:72:ba:48:f0:26:68:23:98:bc:59:59:
         fa:0a:4a:96:27:ec:ff:b7:c8:c0:af:62:84:f5:b9:41:fe:3a:
         28:63:ac:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:32:58 2026 by rpki-client