Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/GUa1pfCQRyVq2T40XG0-bqiNh5I.roa
File:                     GUa1pfCQRyVq2T40XG0-bqiNh5I.roa (raw, json)
Hash identifier:          DhC01G0n7ZGo+pIEY2uKm+zD0qGtt3mQybK182R1BsQ=
Subject key identifier:   19:46:B5:A5:F0:90:47:25:6A:D9:3E:34:5C:6D:3E:6E:A8:8D:87:92
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       07A6
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/GUa1pfCQRyVq2T40XG0-bqiNh5I.roa
Signing time:             Tue 31 Mar 2026 07:41:49 +0000
ROA not before:           Tue 31 Mar 2026 07:41:49 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        113.157.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 13:08:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1958 (0x7a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:41:49 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=1946B5A5F09047256AD93E345C6D3E6EA88D8792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:66:5a:d9:d2:07:22:d7:f7:48:64:e8:63:d3:
                    ca:98:e4:1b:89:0a:a1:f8:cf:2d:b0:a7:d5:19:86:
                    c7:57:8b:84:63:9b:d1:eb:f1:37:a1:d3:69:72:72:
                    94:37:82:bb:5e:a9:9d:a3:61:bc:19:39:15:19:4f:
                    6c:e1:4d:55:35:06:ed:20:ec:d8:d8:b9:5b:1a:0b:
                    eb:69:4b:ff:68:7d:a7:f0:2f:a8:72:c6:69:a2:41:
                    f8:f9:3e:41:85:5d:6f:f1:06:0a:13:25:3e:0d:b9:
                    71:48:7f:d4:36:2d:ce:6a:88:f0:53:61:01:1d:bc:
                    5c:0e:68:3f:07:c1:25:78:79:b0:3c:e1:07:79:6c:
                    bc:12:0c:a3:2b:86:00:bf:0d:44:6f:be:46:8f:12:
                    89:ef:e6:d0:ba:70:73:32:d5:4f:c4:2f:ee:d6:a5:
                    d4:d6:24:8f:0c:c5:0b:e4:42:85:f7:25:99:e9:eb:
                    70:24:ae:75:47:49:5e:e2:ab:5b:e8:c9:a4:3a:b5:
                    bb:bd:99:b5:7a:29:6e:52:79:6f:77:fc:4e:4a:60:
                    65:8e:42:35:3a:d6:04:32:ff:ef:36:6a:07:97:21:
                    48:a4:c5:d2:14:fe:3b:5c:83:c6:c8:27:bb:c9:1d:
                    61:91:29:cd:34:f7:b5:d9:6a:bd:d4:b3:c0:19:81:
                    11:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:46:B5:A5:F0:90:47:25:6A:D9:3E:34:5C:6D:3E:6E:A8:8D:87:92
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/GUa1pfCQRyVq2T40XG0-bqiNh5I.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.157.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         31:09:4e:f8:2e:9e:0a:00:de:8a:f9:93:88:3d:b7:de:94:74:
         f8:31:bd:c3:1f:8a:4f:13:29:36:63:d8:ea:cb:b2:60:24:75:
         ec:bb:ca:10:d8:e5:43:2b:eb:48:48:2f:07:14:56:3a:10:dc:
         10:4f:48:12:36:ac:12:17:c3:32:79:4e:42:9f:0e:5d:68:ce:
         49:9d:15:2f:5b:ae:b0:8c:9b:6d:53:65:fd:5a:4b:75:b0:14:
         41:0c:57:ce:94:46:8a:e8:b1:1f:48:91:dd:1e:20:54:5e:04:
         ad:6b:7d:24:ca:ec:80:7a:2a:73:e4:7a:2c:1a:c6:55:b9:c5:
         4f:df:2c:d5:9b:b0:fe:4e:8c:11:af:86:cf:01:b4:b1:3f:67:
         28:33:51:9d:14:89:bd:66:95:b6:97:d0:35:df:8f:56:83:66:
         ab:20:23:67:f4:a5:42:06:34:4c:83:f0:e6:d6:d3:91:da:26:
         c8:46:dc:c6:f8:58:23:74:17:da:b6:ec:72:8e:b6:b2:a6:f8:
         42:59:7c:da:a3:49:79:e6:c1:94:79:0c:63:52:a3:ed:6f:53:
         26:10:4f:d5:a3:b0:9a:f8:f4:cf:9c:95:6c:0c:e8:c0:c4:3e:
         26:94:36:08:8d:26:1c:b4:fa:2d:fd:e2:07:ba:d5:ba:72:7d:
         34:94:78:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 15:37:39 2026 by rpki-client