Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/I80M2iPSU1pp5YNeuHyvkvHBaCc.roa
File:                     I80M2iPSU1pp5YNeuHyvkvHBaCc.roa (raw, json)
Hash identifier:          cQ4V0456I9+cbSqeuKreUqa80QbMwrBopZQ32exvai4=
Subject key identifier:   23:CD:0C:DA:23:D2:53:5A:69:E5:83:5E:B8:7C:AF:92:F1:C1:68:27
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0841
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/I80M2iPSU1pp5YNeuHyvkvHBaCc.roa
Signing time:             Tue 31 Mar 2026 07:43:09 +0000
ROA not before:           Tue 31 Mar 2026 07:43:09 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        211.5.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2113 (0x841)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:43:09 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=23CD0CDA23D2535A69E5835EB87CAF92F1C16827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c2:ae:d8:91:29:00:18:e6:57:69:79:ff:7a:
                    07:5a:98:fd:f7:83:6d:23:55:3d:c4:14:cc:85:c3:
                    ee:6d:9b:73:e4:b4:6d:9b:25:ec:48:d5:dd:db:c8:
                    88:61:16:91:a0:3d:09:b4:bf:e0:e3:79:69:24:ce:
                    e0:56:8b:1c:91:f9:c4:36:a2:10:26:13:f4:91:88:
                    4d:5a:e2:f2:39:29:2f:3d:44:3d:ee:cd:d9:79:41:
                    f1:fb:52:39:3c:db:4a:b6:b3:7f:ce:5a:22:f9:dc:
                    a2:83:b7:f4:eb:44:77:2e:eb:78:16:56:7d:70:77:
                    f6:d3:df:14:40:97:18:73:28:ba:f3:0d:f5:4f:63:
                    bb:20:e0:e0:3a:28:4f:a0:65:55:be:66:c3:a7:c0:
                    61:e7:db:42:83:6e:5c:98:90:bc:c8:b1:3b:5b:3a:
                    c2:24:f7:3c:d7:17:10:e9:fd:fb:7c:49:5f:00:6a:
                    e7:6e:a7:be:20:e0:d8:b3:dd:26:4e:4b:2d:41:13:
                    88:7d:cc:3e:c9:df:c4:be:f2:83:42:c9:15:e3:d3:
                    f5:3c:ef:37:62:a5:f8:31:e3:92:9e:a6:ef:3d:fc:
                    5c:f0:00:ee:f2:2b:11:6b:c5:56:07:12:8c:49:eb:
                    88:41:16:28:5a:18:8e:34:30:29:e8:49:0c:ec:d6:
                    80:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:CD:0C:DA:23:D2:53:5A:69:E5:83:5E:B8:7C:AF:92:F1:C1:68:27
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/I80M2iPSU1pp5YNeuHyvkvHBaCc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.5.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6c:72:06:0f:69:ea:11:4b:11:f8:f3:d5:5b:b3:e1:1b:95:df:
         68:9e:92:24:69:e1:44:73:bc:a5:bc:88:95:50:b1:5c:dc:52:
         5a:a4:db:ff:7a:59:01:9a:f7:6d:a5:3a:e6:0f:68:9b:d4:dd:
         35:16:09:9d:26:cc:25:c9:b8:16:f3:5c:b0:b0:0a:44:d4:49:
         e6:81:95:34:f4:d4:df:32:00:7f:6c:13:f7:b4:9a:c5:c1:c1:
         0a:dd:32:7b:f2:b7:77:82:d3:9a:0d:b6:f7:4c:1a:34:3c:e0:
         b2:5b:22:52:74:48:ae:ae:89:05:97:ad:3c:a2:fa:71:55:bc:
         8f:29:d3:45:6c:76:59:fa:1f:d6:db:4e:97:6d:57:05:60:7b:
         e9:bc:b5:95:67:76:54:eb:7d:d0:7c:df:75:39:b4:9b:95:8d:
         f7:78:a5:ce:90:c4:c4:f7:c8:89:68:58:7c:8c:0b:0b:3f:be:
         8c:da:30:f3:cb:b8:b1:76:73:a1:aa:d2:f9:00:2e:a4:5a:44:
         e9:64:a3:9d:84:40:07:dc:a5:da:6b:d8:d5:06:86:fb:8c:cb:
         86:25:8b:aa:0d:db:bb:23:8f:7c:06:3d:bc:85:af:ca:cc:e1:
         f1:2a:4e:be:74:4a:0f:cd:47:56:1a:12:db:d8:27:cc:f2:bf:
         d4:7b:ff:bb
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgICCEEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw
NzQzMDlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDIzQ0QwQ0RBMjNEMjUz
NUE2OUU1ODM1RUI4N0NBRjkyRjFDMTY4MjcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCfwq7YkSkAGOZXaXn/egdamP33g20jVT3EFMyFw+5tm3PktG2b
JexI1d3byIhhFpGgPQm0v+DjeWkkzuBWixyR+cQ2ohAmE/SRiE1a4vI5KS89RD3u
zdl5QfH7Ujk820q2s3/OWiL53KKDt/TrRHcu63gWVn1wd/bT3xRAlxhzKLrzDfVP
Y7sg4OA6KE+gZVW+ZsOnwGHn20KDblyYkLzIsTtbOsIk9zzXFxDp/ft8SV8Aaudu
p74g4Niz3SZOSy1BE4h9zD7J38S+8oNCyRXj0/U87zdipfgx45Kepu89/FzwAO7y
KxFrxVYHEoxJ64hBFihaGI40MCnoSQzs1oDLAgMBAAGjggHYMIIB1DAdBgNVHQ4E
FgQUI80M2iPSU1pp5YNeuHyvkvHBaCcwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTYxL0k4ME0yaVBTVTFwcDVZTmV1SHl2a3ZIQmFDYy5yb2EwHgYI
KwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwDTBTANBgkqhkiG9w0BAQsFAAOCAQEA
bHIGD2nqEUsR+PPVW7PhG5XfaJ6SJGnhRHO8pbyIlVCxXNxSWqTb/3pZAZr3baU6
5g9om9TdNRYJnSbMJcm4FvNcsLAKRNRJ5oGVNPTU3zIAf2wT97SaxcHBCt0ye/K3
d4LTmg2290waNDzgslsiUnRIrq6JBZetPKL6cVW8jynTRWx2Wfof1ttOl21XBWB7
6by1lWd2VOt90HzfdTm0m5WN93ilzpDExPfIiWhYfIwLCz++jNow88u4sXZzoarS
+QAupFpE6WSjnYRAB9yl2mvY1QaG+4zLhiWLqg3buyOPfAY9vIWvyszh8SpOvnRK
D81HVhoS29gnzPK/1Hv/uw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:12:24 2026 by rpki-client