Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/I8zygV2pJ2YRQdstL2kfXYVdUHA.roa
File:                     I8zygV2pJ2YRQdstL2kfXYVdUHA.roa (raw, json)
Hash identifier:          Zg3LMnhSpINXzz4RqIwIi/QTPc7uAtcabrFYWKQHSoY=
Subject key identifier:   23:CC:F2:81:5D:A9:27:66:11:41:DB:2D:2F:69:1F:5D:85:5D:50:70
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0836
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/I8zygV2pJ2YRQdstL2kfXYVdUHA.roa
Signing time:             Tue 31 Mar 2026 07:43:01 +0000
ROA not before:           Tue 31 Mar 2026 07:43:01 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        222.13.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2102 (0x836)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:43:01 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=23CCF2815DA927661141DB2D2F691F5D855D5070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b1:56:8c:dc:14:89:11:1e:0e:6c:b5:c5:d1:
                    f3:14:4e:25:be:9d:4c:19:24:f9:bb:9e:1c:90:00:
                    bd:ab:44:97:f0:17:04:45:de:4c:f3:02:ca:4e:54:
                    e3:49:c3:06:57:a9:6d:89:cc:aa:ce:3b:7a:ce:75:
                    a4:ab:c1:c3:41:fd:d3:ba:c5:0f:b4:b2:6c:d4:55:
                    51:d9:86:32:bd:9e:45:d9:2a:a0:2c:cf:6f:6f:67:
                    2e:fc:58:f6:09:84:d5:9a:a9:28:54:0c:a9:f6:8a:
                    0f:63:54:a9:b5:7d:6b:6f:85:ee:e7:75:51:5d:85:
                    e3:12:ba:db:54:99:6a:cb:73:bd:0b:0c:e7:b7:fc:
                    50:90:0c:be:a7:fd:5c:1c:12:fc:2a:2b:14:87:cf:
                    58:3d:93:7f:f8:c1:1b:13:28:83:fa:dc:58:9d:32:
                    60:10:72:92:5c:05:52:95:50:24:2e:d1:7a:87:02:
                    ef:74:32:11:d2:67:74:9d:1b:c8:da:97:60:3e:68:
                    61:d2:46:48:6d:9a:d8:4b:27:b1:74:50:ad:94:0b:
                    e0:e8:c0:5e:9a:2e:71:77:94:16:db:d5:e4:d2:7a:
                    45:2c:80:74:d4:a5:12:72:c9:e9:9b:00:a4:b9:99:
                    f2:6d:68:b1:0b:45:34:65:65:24:d2:16:b6:ae:62:
                    d0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:CC:F2:81:5D:A9:27:66:11:41:DB:2D:2F:69:1F:5D:85:5D:50:70
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/I8zygV2pJ2YRQdstL2kfXYVdUHA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  222.13.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         24:3f:85:97:37:68:ce:30:1c:9c:e1:e3:55:41:9e:d1:a7:cd:
         ca:97:05:a8:ad:fd:8c:1d:47:32:c1:8f:98:89:13:c0:c2:9b:
         01:63:d0:da:aa:08:5c:b5:c5:cc:df:39:84:c9:0f:26:42:27:
         e4:58:15:99:45:35:e2:7b:3a:6e:48:13:a7:b5:4f:96:c6:dd:
         fa:af:8e:4e:45:f9:89:1e:d5:82:02:c6:8b:b3:cb:0f:02:9e:
         8a:46:7e:de:f7:58:23:ef:1c:c6:bf:62:0e:70:92:44:2b:2e:
         db:f7:60:24:f9:b6:f4:8f:98:f5:eb:f1:91:d1:6b:cf:c4:1b:
         1e:25:fd:17:82:7d:c7:51:47:98:86:70:76:74:5c:5b:41:8e:
         84:ef:e6:b0:99:2d:f2:ea:fa:64:70:6c:70:7e:a3:8b:ed:20:
         4d:4a:2b:23:74:02:bd:7c:0e:13:82:44:3d:d5:e9:51:44:4a:
         92:76:ef:f6:68:70:01:b6:39:40:1e:b6:a2:ce:28:09:36:08:
         65:1f:2c:75:e4:d4:48:0c:40:b5:0e:75:18:14:f2:5c:73:b4:
         28:79:c3:88:52:ba:b6:07:2b:d7:5b:89:76:56:cf:e4:37:e3:
         f8:91:ab:61:96:81:1b:50:a8:46:32:78:89:cd:51:07:12:80:
         77:40:52:b4
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgICCDYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw
NzQzMDFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDIzQ0NGMjgxNURBOTI3
NjYxMTQxREIyRDJGNjkxRjVEODU1RDUwNzAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCzsVaM3BSJER4ObLXF0fMUTiW+nUwZJPm7nhyQAL2rRJfwFwRF
3kzzAspOVONJwwZXqW2JzKrOO3rOdaSrwcNB/dO6xQ+0smzUVVHZhjK9nkXZKqAs
z29vZy78WPYJhNWaqShUDKn2ig9jVKm1fWtvhe7ndVFdheMSuttUmWrLc70LDOe3
/FCQDL6n/VwcEvwqKxSHz1g9k3/4wRsTKIP63FidMmAQcpJcBVKVUCQu0XqHAu90
MhHSZ3SdG8jal2A+aGHSRkhtmthLJ7F0UK2UC+DowF6aLnF3lBbb1eTSekUsgHTU
pRJyyembAKS5mfJtaLELRTRlZSTSFrauYtBFAgMBAAGjggHYMIIB1DAdBgNVHQ4E
FgQUI8zygV2pJ2YRQdstL2kfXYVdUHAwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTYxL0k4enlnVjJwSjJZUlFkc3RMMmtmWFlWZFVIQS5yb2EwHgYI
KwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwDeDTANBgkqhkiG9w0BAQsFAAOCAQEA
JD+FlzdozjAcnOHjVUGe0afNypcFqK39jB1HMsGPmIkTwMKbAWPQ2qoIXLXFzN85
hMkPJkIn5FgVmUU14ns6bkgTp7VPlsbd+q+OTkX5iR7VggLGi7PLDwKeikZ+3vdY
I+8cxr9iDnCSRCsu2/dgJPm29I+Y9evxkdFrz8QbHiX9F4J9x1FHmIZwdnRcW0GO
hO/msJkt8ur6ZHBscH6ji+0gTUorI3QCvXwOE4JEPdXpUURKknbv9mhwAbY5QB62
os4oCTYIZR8sdeTUSAxAtQ51GBTyXHO0KHnDiFK6tgcr11uJdlbP5Dfj+JGrYZaB
G1CoRjJ4ic1RBxKAd0BStA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:13:31 2026 by rpki-client