Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/GtM1yvqSFpKtnAe48RqpC7I7Djo.roa
File:                     GtM1yvqSFpKtnAe48RqpC7I7Djo.roa (raw, json)
Hash identifier:          QJOkw+flM0vfM6tQ67Do08xx5gv5odQCQPfHXcs4eUs=
Subject key identifier:   1A:D3:35:CA:FA:92:16:92:AD:9C:07:B8:F1:1A:A9:0B:B2:3B:0E:3A
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0892
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/GtM1yvqSFpKtnAe48RqpC7I7Djo.roa
Signing time:             Tue 31 Mar 2026 07:43:49 +0000
ROA not before:           Tue 31 Mar 2026 07:43:49 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        210.235.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2194 (0x892)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:43:49 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=1AD335CAFA921692AD9C07B8F11AA90BB23B0E3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:11:85:ab:5c:48:bd:a2:34:31:e8:3f:91:3f:
                    7f:d0:58:03:2f:88:a8:72:8c:6d:c2:95:b1:bb:89:
                    66:a6:de:d6:34:90:5e:07:14:59:d9:6e:f1:6f:30:
                    03:4c:de:a6:6a:3c:35:8b:0f:3b:b4:a0:72:29:4b:
                    59:22:89:f4:bd:b3:48:ac:54:7a:aa:13:c4:84:f0:
                    bc:b2:4c:04:ec:54:1d:17:ef:dc:b5:a8:4e:c3:c8:
                    7c:f3:07:bb:85:0f:47:04:42:9c:46:b2:0b:f9:23:
                    ad:ef:cd:d3:7c:15:16:d9:3d:b8:80:c5:02:9f:02:
                    dd:78:c2:aa:af:6a:b3:2c:93:61:53:d9:5c:1d:cb:
                    4f:00:77:79:04:5c:4f:fd:30:bb:a9:f8:c7:17:36:
                    ce:4f:6c:e8:c6:50:ea:a6:ad:a6:58:0d:02:02:4c:
                    5c:6c:be:b0:65:3b:ed:9e:21:e3:02:2d:11:60:7e:
                    83:9d:37:1d:0e:db:37:3f:0f:2b:e9:77:25:5a:bd:
                    b7:48:e7:83:80:b6:4d:7f:21:1a:80:30:e4:19:ef:
                    55:47:61:f7:5e:27:af:67:f8:d7:da:60:e0:f7:95:
                    02:6a:98:4e:d4:dc:5b:ff:0d:d8:ff:00:3f:00:9d:
                    93:b7:9d:21:7a:26:64:c7:39:9a:2d:04:02:e8:44:
                    1e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:D3:35:CA:FA:92:16:92:AD:9C:07:B8:F1:1A:A9:0B:B2:3B:0E:3A
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/GtM1yvqSFpKtnAe48RqpC7I7Djo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.235.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:ff:ce:54:31:0f:25:1e:85:8e:ed:57:9e:ea:18:cd:3a:4f:
         3c:cc:64:f6:29:a9:aa:7e:8e:89:b1:d3:69:f8:cb:eb:13:aa:
         f5:82:8e:c2:3c:4d:fc:f6:db:6d:c5:2e:1b:db:98:64:ac:0d:
         05:5f:41:de:8f:42:cc:44:4c:24:7d:9b:89:71:e7:b3:05:28:
         08:56:2c:4d:d4:6d:80:56:cd:8c:79:72:bf:94:c3:33:bf:a9:
         19:94:e8:80:15:eb:e6:51:00:64:ad:85:e4:cd:8b:95:c7:aa:
         dc:1c:86:5a:e7:57:2e:a3:48:76:d2:57:53:90:ac:db:70:93:
         40:f1:3e:15:6a:85:13:32:e6:c3:49:47:8a:5e:47:08:e7:81:
         2d:c8:62:44:f4:63:d3:98:25:35:48:a1:e1:cc:03:15:8c:9c:
         d8:34:e1:df:85:31:35:09:01:f7:a5:7c:48:64:07:0f:e4:53:
         12:45:f2:29:b8:3f:87:bd:2b:a8:dd:a6:fe:d8:4a:bc:c9:04:
         cf:02:97:14:f2:a0:bf:d9:56:70:6c:35:3c:38:d9:f9:48:17:
         a1:5e:f5:1f:ea:5b:4a:00:9f:ba:cd:ad:ff:a0:3b:6d:fc:9a:
         22:88:3f:99:33:24:32:7a:72:ce:f0:af:8c:9b:b4:6f:86:2b:
         36:fe:fc:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:31 2026 by rpki-client