Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fs0NKSiVxN_yDud_JKvDs1pffeI.roa
File:                     Fs0NKSiVxN_yDud_JKvDs1pffeI.roa (raw, json)
Hash identifier:          7R4VTi+GPjDmLhMbti0uukcP/T54UQgc8kgn4qFNFnM=
Subject key identifier:   16:CD:0D:29:28:95:C4:DF:F2:0E:E7:7F:24:AB:C3:B3:5A:5F:7D:E2
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       08B1
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fs0NKSiVxN_yDud_JKvDs1pffeI.roa
Signing time:             Tue 31 Mar 2026 07:44:05 +0000
ROA not before:           Tue 31 Mar 2026 07:44:05 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        210.250.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2225 (0x8b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:44:05 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=16CD0D292895C4DFF20EE77F24ABC3B35A5F7DE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:37:64:fb:c3:cb:12:6f:b9:af:6b:a8:26:60:
                    bf:69:4b:09:b0:4e:a8:30:63:45:0f:8b:d0:9f:09:
                    85:56:e7:2c:de:15:09:80:4e:92:fa:97:46:02:48:
                    7c:87:35:a5:b5:e4:f8:6c:39:65:02:93:a9:fe:ed:
                    c0:f8:54:4d:cf:48:9e:f4:78:73:6c:cd:74:9e:48:
                    24:f5:42:10:09:8c:31:48:b5:1a:92:30:ce:b1:87:
                    a8:a6:f1:11:f8:6a:71:c1:8d:4b:06:ce:fd:eb:4f:
                    0f:a0:49:d6:c2:b4:dc:5b:cc:db:c7:94:2e:ac:fb:
                    ff:f9:7d:5c:82:5c:4b:08:4a:e0:74:54:ab:1a:4d:
                    7d:54:56:74:3f:1f:d5:85:13:d0:10:26:97:00:6b:
                    03:89:f0:d1:8b:0b:fb:ad:71:40:2c:6f:3f:bf:c2:
                    7d:4c:c3:3a:3f:33:13:4e:a7:e3:50:6b:ef:5e:44:
                    c6:b6:c5:48:16:f7:df:f9:34:7a:17:1a:a2:99:72:
                    ff:b7:0d:1d:33:f6:91:75:c7:ea:f5:38:6a:8a:b5:
                    a7:a4:62:e5:7d:f2:08:09:80:ec:03:57:73:a6:c6:
                    82:4e:3b:3d:ca:d8:f2:2d:46:a2:26:98:9e:22:bf:
                    3d:ef:60:23:37:c6:f3:ab:24:87:fd:9f:43:f2:aa:
                    f8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:CD:0D:29:28:95:C4:DF:F2:0E:E7:7F:24:AB:C3:B3:5A:5F:7D:E2
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fs0NKSiVxN_yDud_JKvDs1pffeI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.250.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9a:12:74:3e:99:e9:1c:4b:88:68:2b:27:5a:11:10:89:61:c7:
         02:f1:e6:58:25:94:75:1b:84:55:60:24:5d:14:f6:e9:f4:66:
         65:b3:b5:5f:fd:1a:6f:6c:86:09:e6:bc:d4:44:aa:73:4e:15:
         73:db:0e:04:cb:bb:39:cd:c7:47:16:0e:f6:86:89:71:49:f0:
         35:0e:c8:93:a6:b2:6b:0d:86:53:0a:a7:97:46:28:dd:b6:5d:
         c7:73:08:d8:c7:43:f0:72:bb:be:2d:73:64:fb:37:8b:3c:e2:
         0e:fd:ec:26:0a:ae:dc:d2:a9:73:38:8c:6a:20:2a:e1:5b:cb:
         19:51:28:4e:d3:7d:92:06:3c:bd:40:6e:03:f2:32:de:f8:3f:
         a6:9a:27:25:c3:31:83:98:3b:cd:96:93:b3:9b:99:37:3f:b4:
         f3:4d:b2:76:8e:51:e0:5b:1d:93:cf:34:56:52:1f:a5:0c:94:
         42:67:5b:fc:02:50:5c:b7:30:b1:4b:57:63:1a:5a:38:8b:f3:
         a8:ab:ab:15:57:f8:ca:bc:ff:9a:7a:4a:19:70:2a:2f:cc:5d:
         8c:a6:8f:09:6d:59:94:75:4b:4d:9d:6a:e4:c9:de:ce:25:e6:
         7c:37:ed:05:32:2d:43:17:4c:07:92:9c:1b:9c:85:80:37:1d:
         62:01:4c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:13:38 2026 by rpki-client