Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/I2niP9ELm94qkLlkOWMc_LiEJRg.roa
File:                     I2niP9ELm94qkLlkOWMc_LiEJRg.roa (raw, json)
Hash identifier:          rnYpPuPwO/mXCE8GZEM34PpYb9RBvaKbpQ6y2wXf1Q8=
Subject key identifier:   23:69:E2:3F:D1:0B:9B:DE:2A:90:B9:64:39:63:1C:FC:B8:84:25:18
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0833
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/I2niP9ELm94qkLlkOWMc_LiEJRg.roa
Signing time:             Tue 31 Mar 2026 07:42:59 +0000
ROA not before:           Tue 31 Mar 2026 07:42:59 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        124.215.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2099 (0x833)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:42:59 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=2369E23FD10B9BDE2A90B96439631CFCB8842518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:61:5b:13:11:79:7f:7b:05:cf:e1:5e:f1:45:
                    3e:e9:eb:17:ba:04:69:87:bf:95:c2:70:27:f4:ec:
                    fe:d4:f5:bb:4a:c9:2a:3a:26:b0:00:35:20:65:da:
                    aa:bb:a1:24:e8:6b:2e:20:ed:10:be:67:36:99:57:
                    90:57:b0:c4:d3:6a:12:99:15:56:43:36:64:62:9e:
                    73:01:7f:c3:82:ed:fd:9b:96:d8:b1:ea:a4:90:a9:
                    6c:0a:e7:d0:11:2d:8f:bc:19:fd:0b:bb:3b:1f:d6:
                    8d:92:59:ca:d4:da:ce:25:9e:6e:51:f7:0f:87:54:
                    43:d6:ca:f1:8c:0b:ef:15:ed:74:27:80:22:5e:54:
                    e9:4c:36:51:1b:86:3b:6e:0b:6b:69:b5:4f:5b:2a:
                    0b:75:12:ff:69:0d:24:5f:1c:7a:4d:2d:84:49:fe:
                    cf:bd:ff:66:2f:18:ed:54:50:16:57:cf:d9:c2:ff:
                    19:b3:f9:0c:f0:d2:90:3f:f4:ab:ef:d9:ab:23:5a:
                    75:74:63:f1:ec:01:40:42:29:8b:2a:c6:7a:7b:1d:
                    67:68:1a:81:e1:34:57:3b:4f:b0:02:5c:77:12:e2:
                    7d:82:77:58:92:ef:6a:a4:8d:f9:0d:c0:a6:21:4b:
                    31:78:45:6d:15:30:0b:f9:2c:83:02:73:b0:76:e0:
                    61:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:69:E2:3F:D1:0B:9B:DE:2A:90:B9:64:39:63:1C:FC:B8:84:25:18
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/I2niP9ELm94qkLlkOWMc_LiEJRg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.215.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         36:50:43:97:5f:60:79:e3:5c:9e:fc:3d:c8:48:5f:77:de:23:
         db:34:5e:f7:73:b6:63:26:6c:05:05:75:3a:64:79:a4:7e:83:
         ce:39:43:7c:e8:14:b7:ad:73:55:8e:dc:77:b2:82:1d:aa:f1:
         e6:42:1e:92:47:15:81:a5:00:c4:9f:58:7e:a5:34:3c:92:b1:
         59:39:63:08:af:be:9a:93:e1:c1:f6:88:d3:31:9d:f2:1d:6c:
         10:bd:93:2d:44:83:73:1d:91:05:c8:c6:fb:e6:b0:fa:08:2d:
         96:39:00:30:22:f5:0e:74:b6:53:95:7d:07:3c:cc:1e:27:1d:
         29:e3:a5:4a:a0:a9:be:80:ec:69:7d:6e:88:32:a2:b1:e2:5d:
         6e:dc:5d:f9:20:2b:ac:cf:72:5c:a7:3e:16:61:93:e8:6e:92:
         e1:e8:ba:3e:e7:b0:c1:07:3b:fb:1f:8e:e1:ad:47:68:80:30:
         c1:b9:d8:1c:2a:66:95:b2:33:ec:fb:9c:08:a4:13:44:95:56:
         ed:f0:cf:36:96:86:9c:27:59:cd:89:8f:51:26:75:94:b4:44:
         08:09:b3:88:ae:e0:17:81:bb:b2:da:22:24:95:8f:6e:64:99:
         5f:9b:5f:f5:2b:dd:29:6d:af:e0:54:c7:e0:fc:e8:44:31:f5:
         41:98:17:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:59:04 2026 by rpki-client