Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/MqsX_jVkOY6op5-E413CJfOQ1sM.roa
File:                     MqsX_jVkOY6op5-E413CJfOQ1sM.roa (raw, json)
Hash identifier:          EYSu461KCGRLH5SuchzZtz1vpdMBlzhjwjwmBDOF384=
Subject key identifier:   32:AB:17:FE:35:64:39:8E:A8:A7:9F:84:E3:5D:C2:25:F3:90:D6:C3
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       08BE
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/MqsX_jVkOY6op5-E413CJfOQ1sM.roa
Signing time:             Tue 31 Mar 2026 07:44:09 +0000
ROA not before:           Tue 31 Mar 2026 07:44:09 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        211.10.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2238 (0x8be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:44:09 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=32AB17FE3564398EA8A79F84E35DC225F390D6C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8d:34:3a:3d:36:9e:df:ba:c8:f0:66:bb:6c:
                    0f:ce:44:c4:6f:b9:d0:9a:7b:8c:67:49:48:bc:94:
                    dc:a3:d1:2f:5a:4a:73:f5:53:0f:a1:f1:1f:05:78:
                    0e:a8:11:19:da:48:1f:53:0c:31:9e:a1:8e:79:ab:
                    47:51:cb:b6:44:e1:1b:42:82:4b:8e:36:ed:4a:31:
                    e2:55:45:77:c9:39:19:5b:53:02:f1:83:bf:0c:b2:
                    bc:74:9a:d6:16:5a:cd:19:28:c5:5a:50:fe:98:74:
                    cb:f2:cb:a9:2c:62:43:f5:f7:a1:86:91:56:a0:a7:
                    5d:54:56:e3:2e:a0:71:4e:82:be:eb:0a:a9:3d:b9:
                    19:40:48:b5:9c:4d:0e:9b:55:97:ed:b4:4c:d7:3a:
                    31:d4:27:36:1b:84:cb:a4:06:13:24:82:d6:72:f2:
                    fe:15:03:24:d9:d7:3d:92:42:83:2a:b1:ad:1e:2a:
                    7c:dc:1a:4c:55:64:af:2e:be:43:d1:78:cb:40:4a:
                    cf:db:a7:db:db:3c:8f:41:c1:ee:e5:de:b9:fa:36:
                    5a:c6:7f:62:ce:eb:ed:8f:e7:cd:a3:35:d1:71:d5:
                    2c:16:33:77:b2:1e:da:92:8c:2f:00:65:b0:6b:b5:
                    5c:36:18:0e:ba:d3:71:fe:d0:f7:ad:d2:cd:18:bc:
                    ee:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:AB:17:FE:35:64:39:8E:A8:A7:9F:84:E3:5D:C2:25:F3:90:D6:C3
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/MqsX_jVkOY6op5-E413CJfOQ1sM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.10.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:ea:44:44:25:f5:a5:24:f2:42:fd:c2:70:d2:f7:03:fe:f3:
         85:67:d4:e5:67:78:d2:d5:3f:48:f7:88:74:73:65:48:7e:c4:
         11:ac:71:c7:82:f2:76:ec:3f:77:79:5f:9b:f6:1e:53:b5:a0:
         b8:8a:0c:31:8d:b3:4c:00:79:90:c8:d1:35:16:b6:32:99:38:
         c7:65:93:1f:8a:d3:e1:c8:c6:c4:dd:ea:44:52:90:db:e7:22:
         24:e1:58:be:21:c4:67:0e:68:68:1a:63:70:e7:f8:02:e0:28:
         13:a1:cd:4b:bd:2c:30:25:05:b1:53:d2:a5:42:bd:3a:af:3c:
         07:d5:12:d3:fb:f0:fe:06:b6:48:62:8a:d1:78:bf:61:46:bc:
         5a:ce:36:0a:b2:fa:29:01:2b:e4:57:5d:10:5e:9d:35:f4:67:
         95:c6:67:74:0b:29:a3:28:75:46:1c:80:6a:f2:c9:0d:ad:2a:
         93:cd:31:d1:ed:9f:c0:5d:ea:de:00:c0:6a:f3:e0:36:cf:95:
         6b:d6:53:22:61:e9:5f:ad:dd:7b:71:c8:bc:75:6f:d1:b8:78:
         9d:51:2a:ae:95:e3:08:b1:f8:45:cd:38:2d:7c:4d:af:20:7a:
         fd:66:b1:96:7b:8c:b0:4c:d0:04:65:bc:d9:f2:b6:25:9f:a0:
         d5:92:44:9d
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICCL4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw
NzQ0MDlaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDMyQUIxN0ZFMzU2NDM5
OEVBOEE3OUY4NEUzNURDMjI1RjM5MEQ2QzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCwjTQ6PTae37rI8Ga7bA/ORMRvudCae4xnSUi8lNyj0S9aSnP1
Uw+h8R8FeA6oERnaSB9TDDGeoY55q0dRy7ZE4RtCgkuONu1KMeJVRXfJORlbUwLx
g78Msrx0mtYWWs0ZKMVaUP6YdMvyy6ksYkP196GGkVagp11UVuMuoHFOgr7rCqk9
uRlASLWcTQ6bVZfttEzXOjHUJzYbhMukBhMkgtZy8v4VAyTZ1z2SQoMqsa0eKnzc
GkxVZK8uvkPReMtASs/bp9vbPI9Bwe7l3rn6NlrGf2LO6+2P582jNdFx1SwWM3ey
HtqSjC8AZbBrtVw2GA6603H+0Pet0s0YvO6XAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUMqsX/jVkOY6op5+E413CJfOQ1sMwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTYxL01xc1hfalZrT1k2b3A1LUU0MTNDSmZPUTFzTS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADTCr4wDQYJKoZIhvcNAQELBQADggEB
AFLqREQl9aUk8kL9wnDS9wP+84Vn1OVneNLVP0j3iHRzZUh+xBGscceC8nbsP3d5
X5v2HlO1oLiKDDGNs0wAeZDI0TUWtjKZOMdlkx+K0+HIxsTd6kRSkNvnIiThWL4h
xGcOaGgaY3Dn+ALgKBOhzUu9LDAlBbFT0qVCvTqvPAfVEtP78P4GtkhiitF4v2FG
vFrONgqy+ikBK+RXXRBenTX0Z5XGZ3QLKaModUYcgGryyQ2tKpPNMdHtn8Bd6t4A
wGrz4DbPlWvWUyJh6V+t3XtxyLx1b9G4eJ1RKq6V4wix+EXNOC18Ta8gev1msZZ7
jLBM0ARlvNnytiWfoNWSRJ0=
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:13:28 2026 by rpki-client