Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/Mo1bz7BuTnIXZMd3d97WA2b6I5o.roa
File:                     Mo1bz7BuTnIXZMd3d97WA2b6I5o.roa (raw, json)
Hash identifier:          FgttyDW5xnpdqyHbd+SHpVZt48qZX10ry9eR1Me63s4=
Subject key identifier:   32:8D:5B:CF:B0:6E:4E:72:17:64:C7:77:77:DE:D6:03:66:FA:23:9A
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       08D9
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Mo1bz7BuTnIXZMd3d97WA2b6I5o.roa
Signing time:             Tue 31 Mar 2026 07:44:22 +0000
ROA not before:           Tue 31 Mar 2026 07:44:22 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        211.7.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2265 (0x8d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:44:22 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=328D5BCFB06E4E721764C77777DED60366FA239A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5b:7a:d3:df:a3:44:25:7a:99:a6:34:dc:e5:
                    94:f2:ac:10:0d:6a:96:91:9d:da:b5:0f:bb:b3:85:
                    c7:0f:9d:ff:cc:cc:1b:74:e8:0f:6a:15:2e:e3:75:
                    37:af:0c:89:51:3b:5e:1d:e9:bf:89:01:34:96:bd:
                    20:68:33:93:57:db:09:96:99:17:6d:9c:f7:fc:c3:
                    2d:b3:6e:a0:79:3f:cb:56:39:9d:39:30:17:dd:cb:
                    ce:bf:48:7e:00:38:d9:fe:e1:7e:78:1c:57:bc:b4:
                    17:c9:99:23:ea:83:76:9a:fa:33:2b:79:e5:01:75:
                    e6:6d:a8:cc:34:b7:c8:b5:e4:17:a9:e5:ba:0f:a4:
                    11:51:52:80:39:6a:7c:42:83:36:9c:6d:65:83:65:
                    fd:25:27:09:b2:a8:19:8d:aa:08:41:ae:2d:84:d2:
                    1a:8c:fe:79:7c:c2:0f:a3:37:c0:8e:0d:43:40:0f:
                    a9:d8:0b:97:7d:8a:7a:5b:1b:9e:82:b7:56:6d:de:
                    de:84:24:a4:e2:07:2e:fc:84:77:34:6b:0a:97:f0:
                    af:34:d5:8b:fa:5f:79:e8:7b:7a:bf:92:b3:84:3e:
                    be:c9:6b:fa:5a:30:fd:75:17:a2:6f:7b:be:cc:92:
                    4f:c4:f0:5e:a1:7e:c1:e5:02:76:7d:d9:bd:74:23:
                    32:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:8D:5B:CF:B0:6E:4E:72:17:64:C7:77:77:DE:D6:03:66:FA:23:9A
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Mo1bz7BuTnIXZMd3d97WA2b6I5o.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.7.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:bd:79:17:fa:31:4c:93:85:b4:ce:40:69:62:d4:7c:73:1d:
         ea:ef:2c:2c:be:51:28:05:0a:0a:ce:f3:69:72:7f:e9:cd:8f:
         39:04:f2:05:39:4a:9d:39:54:9f:54:5b:77:38:ef:7e:5d:f0:
         f8:c4:cb:69:a4:85:26:f7:2b:32:44:17:52:75:76:51:de:f2:
         8c:b7:d0:c8:79:26:05:46:b4:4b:72:ef:a0:ef:5d:24:19:1e:
         70:21:68:ed:b9:27:39:79:c7:88:8f:44:0d:f4:78:e0:54:57:
         a2:c1:70:20:4e:83:e2:fe:b4:86:2a:5e:56:0c:a5:88:ee:42:
         a7:99:6a:a6:3c:17:a0:a5:42:f3:ad:26:7f:ff:7b:72:91:f2:
         90:ce:31:a0:4d:55:05:30:b1:7f:28:f3:3c:b1:58:90:bb:ca:
         42:b7:17:d8:25:f8:83:71:84:19:e0:61:38:93:f3:72:d7:18:
         f2:0e:14:17:11:75:c9:f1:9f:e1:9f:4e:7d:cc:d9:2f:3e:01:
         a8:c1:e4:1c:58:c3:03:19:d9:43:26:76:e9:dd:f1:01:2c:55:
         48:9d:13:61:0e:2f:da:fe:5a:0a:8d:4a:82:45:99:67:02:d3:
         5a:26:84:5f:dd:f4:5e:8b:ad:6a:73:f7:71:71:93:5e:ec:cd:
         94:18:86:11
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICCNkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw
NzQ0MjJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDMyOEQ1QkNGQjA2RTRF
NzIxNzY0Qzc3Nzc3REVENjAzNjZGQTIzOUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCxW3rT36NEJXqZpjTc5ZTyrBANapaRndq1D7uzhccPnf/MzBt0
6A9qFS7jdTevDIlRO14d6b+JATSWvSBoM5NX2wmWmRdtnPf8wy2zbqB5P8tWOZ05
MBfdy86/SH4AONn+4X54HFe8tBfJmSPqg3aa+jMreeUBdeZtqMw0t8i15Bep5boP
pBFRUoA5anxCgzacbWWDZf0lJwmyqBmNqghBri2E0hqM/nl8wg+jN8CODUNAD6nY
C5d9inpbG56Ct1Zt3t6EJKTiBy78hHc0awqX8K801Yv6X3noe3q/krOEPr7Ja/pa
MP11F6Jve77Mkk/E8F6hfsHlAnZ92b10IzLLAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUMo1bz7BuTnIXZMd3d97WA2b6I5owHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTYxL01vMWJ6N0J1VG5JWFpNZDNkOTdXQTJiNkk1by5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADTB7MwDQYJKoZIhvcNAQELBQADggEB
AKy9eRf6MUyThbTOQGli1HxzHervLCy+USgFCgrO82lyf+nNjzkE8gU5Sp05VJ9U
W3c4735d8PjEy2mkhSb3KzJEF1J1dlHe8oy30Mh5JgVGtEty76DvXSQZHnAhaO25
Jzl5x4iPRA30eOBUV6LBcCBOg+L+tIYqXlYMpYjuQqeZaqY8F6ClQvOtJn//e3KR
8pDOMaBNVQUwsX8o8zyxWJC7ykK3F9gl+INxhBngYTiT83LXGPIOFBcRdcnxn+Gf
Tn3M2S8+AajB5BxYwwMZ2UMmdund8QEsVUidE2EOL9r+WgqNSoJFmWcC01omhF/d
9F6LrWpz93Fxk17szZQYhhE=
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:27:49 2026 by rpki-client