Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/JP3vYCcW1cRhqqH1bzF__onEKoY.roa
File:                     JP3vYCcW1cRhqqH1bzF__onEKoY.roa (raw, json)
Hash identifier:          7k/TGI+ysxw44xyBgCmcs0ENpNjJ82hdvTaJBPqSwSU=
Subject key identifier:   24:FD:EF:60:27:16:D5:C4:61:AA:A1:F5:6F:31:7F:FE:89:C4:2A:86
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0895
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/JP3vYCcW1cRhqqH1bzF__onEKoY.roa
Signing time:             Tue 31 Mar 2026 07:43:50 +0000
ROA not before:           Tue 31 Mar 2026 07:43:50 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        210.253.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2197 (0x895)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:43:50 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=24FDEF602716D5C461AAA1F56F317FFE89C42A86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f0:19:fb:db:20:0a:99:fb:c2:cb:8f:dc:26:
                    8c:07:02:b0:09:3e:2c:25:4d:ce:5b:13:a6:41:42:
                    5f:23:6a:b0:5a:58:b5:0c:42:55:d1:3a:57:22:a1:
                    88:20:e0:13:45:5f:2a:2e:a1:14:5e:6e:09:4d:58:
                    be:63:6b:5d:a7:13:b8:20:30:b1:ed:60:cf:39:0e:
                    e6:e8:cc:8f:2a:31:07:87:5b:f9:d0:8a:53:d6:9b:
                    60:4a:c4:2f:22:dd:87:18:47:4b:a2:f6:96:f2:8a:
                    6e:f3:ec:44:10:4a:b7:b5:22:1d:3d:02:2b:ca:c9:
                    06:70:d5:8e:f2:01:2d:bb:91:4b:27:6b:94:f0:25:
                    d6:db:e3:c0:ad:d4:f5:d4:03:fb:b7:55:59:6a:d0:
                    2e:7c:be:10:f8:6c:14:d3:19:ff:f8:a5:e1:f9:ca:
                    f5:3a:a4:56:06:9d:e8:31:0d:17:12:c7:0d:69:88:
                    b2:06:ab:74:ad:98:2f:23:74:eb:02:fb:c6:4c:39:
                    d5:46:14:21:fa:b6:ae:2c:7f:32:0f:d3:52:66:3e:
                    b8:38:f7:c7:39:05:3f:47:18:b2:ba:ba:98:52:c8:
                    37:65:13:5f:db:44:15:f4:c0:9a:77:6c:a6:3e:c0:
                    88:1a:38:f0:50:99:ee:0c:93:83:24:4f:0a:9e:20:
                    1d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:FD:EF:60:27:16:D5:C4:61:AA:A1:F5:6F:31:7F:FE:89:C4:2A:86
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/JP3vYCcW1cRhqqH1bzF__onEKoY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.253.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b3:86:cb:3c:5c:98:15:6f:67:33:cf:7a:95:f8:d2:45:0f:cb:
         3a:cd:14:bb:89:81:94:05:b3:be:54:51:67:81:91:e9:b3:db:
         09:a5:00:53:17:e2:5d:0f:08:ba:bb:f1:90:10:08:ba:3d:43:
         37:80:1f:70:27:09:20:dc:8d:b0:23:1a:5f:90:9e:3f:8e:6f:
         fe:99:98:4d:4f:b6:8a:00:04:22:b3:ed:bb:1a:b3:54:d5:70:
         a1:cb:58:8f:a7:9a:35:b1:6b:4a:db:b8:a1:77:ed:1e:96:9d:
         9c:b2:aa:1c:69:23:a5:a3:18:0a:13:5c:14:50:92:1b:b1:6a:
         e0:9d:90:55:40:fe:85:1c:bf:94:0e:14:35:ff:7b:3b:e8:a2:
         35:d4:38:24:72:88:d3:f5:bf:d2:16:54:45:0c:42:9f:74:57:
         80:fb:ec:5c:f7:3d:4c:19:2b:98:1e:bd:2b:e4:c8:4c:1c:40:
         34:6a:71:e8:d8:8e:58:75:2c:d8:6d:55:80:58:58:23:49:ab:
         f5:b9:c0:c0:76:9d:8b:1b:67:51:4e:6a:8e:8f:d3:bb:a5:27:
         c6:bf:e1:c0:83:98:23:f1:a9:38:d0:c5:86:13:ad:f3:fb:14:
         d1:77:1e:f0:3d:40:69:39:ff:0f:61:fc:06:da:87:76:c2:68:
         32:3e:8a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:13:25 2026 by rpki-client