Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/Hw8IitCoaDsEh770_4mWeZKiv6U.roa
File:                     Hw8IitCoaDsEh770_4mWeZKiv6U.roa (raw, json)
Hash identifier:          2b4PJbaaZPkxrlPIx6FG28PcZjxlv4yuK/YXinr9MiU=
Subject key identifier:   1F:0F:08:8A:D0:A8:68:3B:04:87:BE:F4:FF:89:96:79:92:A2:BF:A5
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0882
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Hw8IitCoaDsEh770_4mWeZKiv6U.roa
Signing time:             Tue 31 Mar 2026 07:43:40 +0000
ROA not before:           Tue 31 Mar 2026 07:43:40 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        210.189.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2178 (0x882)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:43:40 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=1F0F088AD0A8683B0487BEF4FF89967992A2BFA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:40:11:f9:52:43:5b:0d:e3:18:a2:d2:ec:92:
                    ad:a4:97:65:52:22:df:4b:8c:48:24:62:c3:d2:95:
                    7a:1d:7f:cd:51:17:96:15:07:95:8d:6b:25:bc:7f:
                    c9:f5:62:ad:5e:d6:c3:a0:15:35:cf:82:d1:5d:16:
                    11:78:a5:54:b4:af:3a:87:bf:a9:8b:48:d0:04:77:
                    61:7d:ef:5d:93:0a:3b:e3:f3:27:38:ce:9f:2b:4d:
                    b8:54:a6:48:d4:95:e6:28:58:d4:0c:a9:ae:04:5a:
                    85:17:8e:14:39:04:af:ef:7d:6f:dc:0f:de:30:a7:
                    8f:e8:c3:22:31:d8:2c:62:e3:26:ba:cb:cc:e3:d3:
                    c8:d1:af:6f:4d:fc:f7:ee:09:e9:d4:5c:d2:71:ef:
                    0c:54:30:7b:9c:ff:2b:61:8b:b7:74:77:db:27:87:
                    0a:e1:29:b4:67:80:3b:5f:1b:5f:33:23:ec:e3:c5:
                    ee:13:fa:00:c6:c3:66:63:de:a9:1d:79:9f:a3:4e:
                    cd:03:72:18:ac:2d:af:ba:b1:b7:0d:0d:23:56:95:
                    df:76:d0:6b:23:37:2f:87:d6:19:bf:34:df:6d:1b:
                    db:6c:db:39:1b:c4:34:d4:ca:ba:dd:a8:99:17:c2:
                    86:92:cf:32:6b:a7:42:63:d2:0c:d8:03:f3:55:5b:
                    c6:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:0F:08:8A:D0:A8:68:3B:04:87:BE:F4:FF:89:96:79:92:A2:BF:A5
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Hw8IitCoaDsEh770_4mWeZKiv6U.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.189.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b5:07:f3:b3:ce:9d:44:47:89:03:81:af:cd:bc:d5:f1:af:d1:
         e1:c9:dc:61:5c:4f:a8:18:d6:3e:d3:f7:83:af:39:23:a9:da:
         53:ce:b6:48:cc:93:3a:bd:e4:43:6f:be:f3:76:c0:0a:3a:af:
         93:2b:d4:47:80:af:6c:9d:d5:e3:86:53:e0:d2:a9:fe:d7:28:
         20:3d:de:e6:8f:36:b1:9d:99:23:04:1e:3c:29:1a:d0:4e:91:
         25:7e:d4:03:36:f1:4f:0f:6e:80:39:08:31:79:82:16:0f:a3:
         f4:18:5f:af:0f:88:29:86:4c:ce:b3:d6:3f:76:51:af:51:8f:
         a1:2f:7d:24:be:6c:18:87:bb:1f:72:9b:58:c5:92:d0:af:d9:
         47:d1:3f:9f:0a:f2:9b:c7:f5:46:42:1b:e2:fa:f7:5f:d5:c6:
         e4:f8:14:35:0d:c6:8c:3f:77:c1:e4:9b:29:27:1b:13:a0:d6:
         e5:a9:c2:3c:a0:16:89:e6:77:a9:0e:7e:0f:93:4b:6e:0b:d5:
         0e:63:16:09:b6:85:47:85:ee:54:f7:be:fe:de:65:5a:c4:08:
         1f:d6:2b:66:27:c8:d9:a4:7f:4e:10:db:df:24:ab:19:8c:d8:
         3a:dc:16:ed:d6:91:ac:8f:1d:89:3a:ce:6f:31:03:22:db:0a:
         f0:f4:09:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:13:32 2026 by rpki-client