Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/JwOKMxKbBcKRkuZ_rSb8GdqJ5IU.roa
File:                     JwOKMxKbBcKRkuZ_rSb8GdqJ5IU.roa (raw, json)
Hash identifier:          HgHm114b3/iPcaVWYQScVst/HnRS7S47lffLFeMZUu4=
Subject key identifier:   27:03:8A:33:12:9B:05:C2:91:92:E6:7F:AD:26:FC:19:DA:89:E4:85
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       07B8
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/JwOKMxKbBcKRkuZ_rSb8GdqJ5IU.roa
Signing time:             Tue 31 Mar 2026 07:41:57 +0000
ROA not before:           Tue 31 Mar 2026 07:41:57 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        113.157.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1976 (0x7b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:41:57 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=27038A33129B05C29192E67FAD26FC19DA89E485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ab:6b:16:67:eb:02:1e:33:27:d5:a7:2e:26:
                    96:d6:87:7a:1d:f1:9f:e4:97:5b:d2:43:a9:51:15:
                    e8:43:2d:3c:2e:bb:55:7e:dd:32:ba:82:54:58:48:
                    aa:31:23:e7:9f:22:d6:6f:e1:1b:04:26:bf:6a:45:
                    e6:80:2b:2c:cb:93:92:5e:24:86:2e:c4:c1:63:20:
                    73:c1:27:87:e0:b7:bf:98:db:e2:3a:3d:4b:26:94:
                    0f:72:7a:ea:63:58:6b:a0:99:30:d4:36:15:65:a5:
                    8c:50:ae:d2:d4:42:4a:35:00:20:1c:ca:65:fb:db:
                    73:93:20:af:9b:a6:48:db:63:23:93:1c:d7:8e:55:
                    37:4a:93:2c:a3:e8:1a:99:c5:f8:9b:18:12:55:17:
                    b1:59:75:5a:1b:c5:2c:28:f5:0d:96:6d:ce:d5:7d:
                    b2:2e:7c:6a:10:fe:86:38:c8:fd:ab:1e:39:0c:aa:
                    9a:74:86:cd:69:45:25:9a:63:65:77:3c:79:26:88:
                    cc:8b:5a:bc:ea:04:60:d9:97:51:f4:c1:54:a2:4a:
                    47:18:7b:7b:98:d2:33:dd:21:5c:79:ff:55:6f:87:
                    0d:33:35:c1:77:87:64:6b:c8:c7:37:e8:a9:9f:1c:
                    f5:7a:06:4d:73:92:5e:8d:c7:c8:cd:bb:92:35:7f:
                    13:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:03:8A:33:12:9B:05:C2:91:92:E6:7F:AD:26:FC:19:DA:89:E4:85
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/JwOKMxKbBcKRkuZ_rSb8GdqJ5IU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.157.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         5e:47:88:71:d6:1e:f4:10:04:70:7f:ba:f3:cb:34:60:8f:99:
         e3:f5:32:74:1c:6c:d1:aa:d3:e5:19:b6:c9:6e:d4:d8:d7:9f:
         2d:5d:02:e7:17:88:24:22:40:29:49:d3:68:58:66:d8:f6:3e:
         8d:f4:3e:dd:fd:19:9b:f2:75:17:ef:e0:7f:3b:ed:a9:a0:41:
         28:e5:7b:5d:55:2c:fc:bc:18:38:7f:51:05:ec:25:1c:82:2e:
         7b:ef:c2:d5:14:45:fd:f0:25:49:92:dc:1e:87:8a:82:cb:e2:
         84:44:21:9d:df:e1:b1:d4:24:4c:9f:09:b9:83:b6:c3:00:c8:
         27:91:90:ab:bd:6c:7c:2b:90:d0:7e:34:24:f0:9b:3a:e2:81:
         c9:51:3d:2c:d7:df:5d:f7:09:91:f9:49:b0:d0:c7:24:06:1c:
         09:50:3f:9f:dd:0a:bf:06:93:33:c9:2c:0f:60:56:af:46:fc:
         7d:cc:4e:84:f5:df:8a:ec:c1:4d:3f:36:08:da:00:2c:24:12:
         89:df:0e:f9:d4:2f:2c:3d:55:bc:02:8d:f3:6b:2d:23:86:9d:
         fb:d6:22:c8:c8:c0:e1:f8:3f:d8:29:62:49:66:38:07:5b:85:
         62:7c:c1:ed:d2:5b:0e:35:40:61:2b:3e:06:5a:e1:92:42:ad:
         a5:84:40:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:17:01 2026 by rpki-client