Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/N558HQRq7SunayuLcMY2kvOl9bU.roa
File:                     N558HQRq7SunayuLcMY2kvOl9bU.roa (raw, json)
Hash identifier:          tY7eRnVOun/enZNmST91ekx+NV06TXGmBRYKeZBOdsM=
Subject key identifier:   37:9E:7C:1D:04:6A:ED:2B:A7:6B:2B:8B:70:C6:36:92:F3:A5:F5:B5
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0804
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/N558HQRq7SunayuLcMY2kvOl9bU.roa
Signing time:             Tue 31 Mar 2026 07:42:37 +0000
ROA not before:           Tue 31 Mar 2026 07:42:37 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        111.236.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2052 (0x804)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:42:37 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=379E7C1D046AED2BA76B2B8B70C63692F3A5F5B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:04:2e:08:87:56:c3:8d:ad:3c:91:a3:19:3c:
                    e3:9e:19:31:e1:33:83:97:85:9f:ee:08:ba:53:7a:
                    a4:c9:76:14:78:0f:99:1b:a3:1a:33:b4:a1:e2:c6:
                    a4:58:8d:3d:95:ae:cf:24:1b:0a:50:7f:a7:ed:7b:
                    9c:7d:d0:97:ca:bf:62:68:24:c1:61:04:05:20:f2:
                    90:e5:dc:c6:36:b0:d4:4c:f6:7c:ad:80:47:e5:30:
                    21:a9:56:7d:d0:ee:8b:52:92:5d:91:c2:fe:2f:98:
                    44:05:5b:3b:2f:78:50:fb:0b:28:3e:d6:d5:ac:19:
                    e9:ee:dd:a8:1a:bc:bf:e0:1c:34:b8:ad:2c:c4:32:
                    a8:25:5b:2a:bf:5b:51:9e:2c:a9:6d:9a:41:32:c9:
                    3c:72:a5:14:37:af:84:c1:ad:75:8e:98:bc:e5:36:
                    84:29:6d:e5:f5:a9:f7:6d:4f:c0:e4:76:e0:f5:bf:
                    ed:38:83:cb:72:f4:c9:43:48:cf:0d:4c:72:b0:4e:
                    0e:ac:b1:4c:97:83:80:b8:79:8f:d3:e3:6d:47:9b:
                    4e:53:e5:ee:24:25:35:7e:8f:17:05:14:71:ce:bc:
                    bf:62:ed:b2:93:f3:a6:10:d8:f0:9e:9e:30:fb:90:
                    d4:23:19:f8:50:ba:0a:5a:f7:c6:89:a2:8e:9a:5b:
                    b9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:9E:7C:1D:04:6A:ED:2B:A7:6B:2B:8B:70:C6:36:92:F3:A5:F5:B5
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/N558HQRq7SunayuLcMY2kvOl9bU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.236.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         9d:d9:74:d8:ce:b5:a3:e7:3d:32:06:48:82:3b:f6:09:b8:6e:
         94:b0:0b:df:d6:48:ad:fe:74:df:e6:19:c9:cf:06:5d:2d:79:
         fe:40:52:f6:a5:18:2a:61:4e:50:74:33:0b:d1:1c:05:20:75:
         3d:31:c7:e0:e4:42:e4:f1:f5:ad:72:5a:bc:83:19:60:49:0e:
         5e:2e:a6:57:01:64:b1:f0:48:1f:7f:f3:f8:cc:43:60:5b:ea:
         be:c0:b1:16:dd:95:d0:7d:1e:ac:8f:2e:c1:b1:db:26:35:20:
         70:59:94:99:c8:38:e9:7b:5c:da:30:bd:c5:e9:7e:5a:37:c7:
         89:a2:44:1f:87:29:bb:c2:20:a5:a8:af:de:e7:b3:20:5b:86:
         ba:7b:52:76:ea:a9:da:6a:96:e1:d2:f0:dd:66:e8:a7:be:31:
         aa:20:ba:58:c8:dc:db:07:80:98:e9:56:31:c8:8e:aa:a2:f3:
         e6:cc:af:8d:7c:2a:c7:63:7a:a3:d1:a6:01:0b:23:5d:da:f7:
         01:16:13:ba:b4:44:95:7e:47:5a:c2:77:49:c4:10:63:d5:ed:
         be:8a:36:d0:09:26:b7:8c:2d:43:07:98:db:16:37:61:4d:7c:
         6f:3c:6d:9f:73:0d:14:fc:f4:24:69:24:db:ba:c6:15:77:98:
         17:d1:8a:4c
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgICCAQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw
NzQyMzdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDM3OUU3QzFEMDQ2QUVE
MkJBNzZCMkI4QjcwQzYzNjkyRjNBNUY1QjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD9BC4Ih1bDja08kaMZPOOeGTHhM4OXhZ/uCLpTeqTJdhR4D5kb
oxoztKHixqRYjT2Vrs8kGwpQf6fte5x90JfKv2JoJMFhBAUg8pDl3MY2sNRM9nyt
gEflMCGpVn3Q7otSkl2Rwv4vmEQFWzsveFD7Cyg+1tWsGenu3agavL/gHDS4rSzE
MqglWyq/W1GeLKltmkEyyTxypRQ3r4TBrXWOmLzlNoQpbeX1qfdtT8DkduD1v+04
g8ty9MlDSM8NTHKwTg6ssUyXg4C4eY/T421Hm05T5e4kJTV+jxcFFHHOvL9i7bKT
86YQ2PCenjD7kNQjGfhQugpa98aJoo6aW7k3AgMBAAGjggHYMIIB1DAdBgNVHQ4E
FgQUN558HQRq7SunayuLcMY2kvOl9bUwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTYxL041NThIUVJxN1N1bmF5dUxjTVkya3ZPbDliVS5yb2EwHgYI
KwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwJv7DANBgkqhkiG9w0BAQsFAAOCAQEA
ndl02M61o+c9MgZIgjv2CbhulLAL39ZIrf503+YZyc8GXS15/kBS9qUYKmFOUHQz
C9EcBSB1PTHH4ORC5PH1rXJavIMZYEkOXi6mVwFksfBIH3/z+MxDYFvqvsCxFt2V
0H0erI8uwbHbJjUgcFmUmcg46Xtc2jC9xel+WjfHiaJEH4cpu8Igpaiv3uezIFuG
untSduqp2mqW4dLw3Wbop74xqiC6WMjc2weAmOlWMciOqqLz5syvjXwqx2N6o9Gm
AQsjXdr3ARYTurRElX5HWsJ3ScQQY9Xtvoo20Akmt4wtQweY2xY3YU18bzxtn3MN
FPz0JGkk27rGFXeYF9GKTA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:21:58 2026 by rpki-client