Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/Hxu1Y_8iUjRnwcGAvJarBhzQn9Y.roa
File:                     Hxu1Y_8iUjRnwcGAvJarBhzQn9Y.roa (raw, json)
Hash identifier:          mOEDjkBbw17rTHU9FSR6wm4tXiZzOLTFIPGvtjNk5jA=
Subject key identifier:   1F:1B:B5:63:FF:22:52:34:67:C1:C1:80:BC:96:AB:06:1C:D0:9F:D6
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0773
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Hxu1Y_8iUjRnwcGAvJarBhzQn9Y.roa
Signing time:             Tue 31 Mar 2026 07:41:25 +0000
ROA not before:           Tue 31 Mar 2026 07:41:25 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        59.141.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 14:45:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1907 (0x773)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:41:25 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=1F1BB563FF22523467C1C180BC96AB061CD09FD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:65:2c:93:68:43:c1:37:e9:6a:41:da:61:be:
                    25:86:e3:2b:13:27:f9:dd:40:39:ca:15:17:c1:73:
                    71:7e:51:bf:18:a1:3f:d3:16:48:88:a7:4a:28:3a:
                    be:78:1a:2d:3c:ea:7f:d6:a5:35:08:ea:30:83:67:
                    dc:a8:5e:2d:39:77:21:cb:a5:11:a5:1c:ee:22:f4:
                    76:4b:57:9a:ce:8c:f5:4d:8c:0d:05:1f:60:9e:24:
                    f4:f6:34:62:57:e1:93:be:f4:ec:39:a0:55:8e:6f:
                    2c:0c:c5:60:36:8e:7b:f8:86:08:bd:09:f0:d1:98:
                    80:6c:16:b2:c4:17:1f:4d:b1:21:96:75:7b:d8:8d:
                    fa:dd:0a:13:6e:f1:23:5c:92:29:3b:2b:61:f1:56:
                    b3:2e:54:f8:16:3d:f6:27:9d:4c:49:90:dd:07:51:
                    39:84:2c:12:3f:de:c8:77:78:7f:d9:7e:bc:42:55:
                    f3:96:01:32:96:ad:06:ef:ef:0e:a6:13:c7:ef:c6:
                    ca:46:f9:2e:cd:5e:c0:88:76:09:22:86:96:69:13:
                    c1:8d:b2:a4:c6:d6:85:42:ce:70:74:a0:56:f1:11:
                    64:65:85:46:54:8b:f3:76:28:21:31:88:26:e1:dd:
                    9b:e5:1d:c6:36:44:61:1b:6a:05:83:c6:80:8b:55:
                    43:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:1B:B5:63:FF:22:52:34:67:C1:C1:80:BC:96:AB:06:1C:D0:9F:D6
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Hxu1Y_8iUjRnwcGAvJarBhzQn9Y.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.141.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         41:45:b3:60:f9:ca:64:80:e7:3b:e4:de:87:9b:7e:6b:bb:5f:
         2f:51:67:52:05:19:14:f6:89:e1:84:b3:2c:d9:7f:ef:10:65:
         18:ce:f8:f9:be:c0:5e:32:d5:4b:56:63:ba:4b:75:c4:df:cb:
         1a:19:42:82:34:72:6d:6b:08:a3:b5:e7:01:82:da:a3:36:a1:
         91:71:65:5b:e3:c4:2c:7b:4e:cd:5f:61:f8:89:32:ac:11:76:
         43:1f:bd:e2:72:ef:95:db:3b:4f:93:36:65:51:df:e8:f8:66:
         de:2c:11:16:1a:c8:16:fa:b5:11:79:70:73:1f:c7:5a:6e:91:
         5c:a7:58:8a:6d:00:8e:b0:fe:d8:c8:ee:cd:62:b9:cd:35:f1:
         4e:3b:e0:0d:e5:70:2c:05:ec:37:35:b7:e7:39:10:2d:18:9c:
         39:8f:cd:f3:44:b7:e7:54:7d:35:5d:6d:cc:f6:b9:7f:eb:d2:
         8c:94:52:6c:36:29:47:56:35:92:a7:99:a8:42:c7:97:cc:d2:
         5a:3e:7f:fc:2f:b1:93:3a:3e:5e:1a:7f:3b:57:45:df:d1:88:
         f6:1e:5f:35:b6:d2:3b:5e:1b:ab:3f:6d:93:5c:54:b5:e4:c8:
         53:90:b8:e5:15:4d:72:ce:26:80:e7:be:90:6c:9b:fe:ec:52:
         3e:9c:4e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:20:06 2026 by rpki-client