Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/JlQO47F6TLUOR0J1VyglUdj0XdQ.roa
File:                     JlQO47F6TLUOR0J1VyglUdj0XdQ.roa (raw, json)
Hash identifier:          0bj4Qy78zixE5FY3BFypOQSLuJ0Ph9W8gizZkIDEFAc=
Subject key identifier:   26:54:0E:E3:B1:7A:4C:B5:0E:47:42:75:57:28:25:51:D8:F4:5D:D4
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       07FF
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/JlQO47F6TLUOR0J1VyglUdj0XdQ.roa
Signing time:             Tue 31 Mar 2026 07:42:36 +0000
ROA not before:           Tue 31 Mar 2026 07:42:36 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        211.18.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2047 (0x7ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:42:36 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=26540EE3B17A4CB50E47427557282551D8F45DD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:06:f0:da:ad:81:c8:b1:4b:52:a7:cb:a6:8c:
                    ad:fd:1e:c6:c6:79:8e:20:13:0a:a9:b0:59:2b:8b:
                    07:a8:e9:dd:aa:d7:c3:7f:f6:9c:6e:33:0b:49:bf:
                    5b:de:49:78:a3:3b:44:72:ff:36:31:f9:fb:f6:d4:
                    ba:3b:38:e4:2c:40:a0:2f:d6:be:52:0c:6c:d5:69:
                    83:ca:5d:45:8d:1d:b8:71:ff:7a:c0:94:dd:be:06:
                    a8:2d:83:99:f5:fb:47:2e:f8:e5:59:1b:5a:38:6a:
                    9b:1b:d2:72:b2:ed:f7:8f:d5:3e:4a:50:c7:62:9d:
                    c3:98:6c:03:c3:77:f7:88:74:cd:d0:33:1e:a9:15:
                    d9:49:1f:05:ff:4f:a6:91:e7:6a:3e:dd:cf:9c:90:
                    ee:3d:2c:57:b4:a6:a1:60:63:da:53:1e:86:30:b2:
                    90:a4:d9:67:e3:f0:5e:d3:2d:d6:cb:2b:5f:55:2d:
                    64:eb:78:eb:b3:d5:78:1d:7d:e5:63:d3:03:62:43:
                    c7:e9:8c:04:ec:1f:d8:93:57:e6:6a:e4:0a:52:50:
                    f0:ea:61:be:3f:8e:b5:8b:2e:4e:e3:51:1d:3d:ec:
                    44:15:c5:3c:9a:3a:fa:78:37:98:ff:70:a2:5b:63:
                    92:d6:3b:b8:d8:0c:41:eb:06:5d:ad:78:34:30:f1:
                    f4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:54:0E:E3:B1:7A:4C:B5:0E:47:42:75:57:28:25:51:D8:F4:5D:D4
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/JlQO47F6TLUOR0J1VyglUdj0XdQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.18.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         92:1e:20:ed:c6:01:08:83:83:d8:cd:53:4c:8a:33:ab:23:2d:
         8c:25:cf:32:e1:22:31:0c:fa:6c:c7:39:cd:45:62:d5:58:7d:
         d6:b7:65:98:01:ab:b5:c6:b2:2c:bf:5f:b0:a6:41:71:af:05:
         5c:ec:d9:07:b9:a5:d1:f7:ab:55:04:1a:57:e3:4b:21:31:42:
         41:69:96:46:c6:75:6c:7e:0d:a1:d0:00:3e:08:a2:c1:0a:3b:
         d8:7d:0c:b5:4f:2c:41:87:df:78:3a:b7:bd:70:27:b0:26:b1:
         9e:db:96:42:5f:bb:64:09:ff:4c:c7:2b:8d:0e:8f:b1:34:a9:
         15:8f:2f:37:2a:96:fe:33:bb:0e:36:b9:bc:55:35:95:f4:f6:
         63:d8:df:26:3c:9b:b6:0e:a8:5f:7b:8f:09:90:12:61:b8:ee:
         c6:8e:a0:e9:ff:52:81:9b:68:5d:78:77:99:00:2c:0b:27:a7:
         3f:34:0c:39:8c:43:ea:eb:6a:db:e1:f8:d6:84:20:80:b0:5c:
         19:61:e7:bb:e9:5c:58:57:ce:ec:7d:bb:47:99:e7:33:95:54:
         c7:e6:62:86:37:ac:fd:96:c7:0f:3f:ce:aa:3a:ad:26:1f:77:
         37:2e:f5:d3:44:60:ed:a8:c0:15:60:8d:52:a2:ec:88:83:4e:
         3f:f2:c6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:52 2026 by rpki-client