Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/NOY9N_sK84EAuiKu1o8NMm9i9O4.roa
File:                     NOY9N_sK84EAuiKu1o8NMm9i9O4.roa (raw, json)
Hash identifier:          ACdk5W7S+pKaP2PLArYHoCLZ4c41NWpKDS+v7XkvKxg=
Subject key identifier:   34:E6:3D:37:FB:0A:F3:81:00:BA:22:AE:D6:8F:0D:32:6F:62:F4:EE
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       07AE
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/NOY9N_sK84EAuiKu1o8NMm9i9O4.roa
Signing time:             Tue 31 Mar 2026 07:41:52 +0000
ROA not before:           Tue 31 Mar 2026 07:41:52 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        59.128.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1966 (0x7ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:41:52 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=34E63D37FB0AF38100BA22AED68F0D326F62F4EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:17:f1:52:95:e6:36:c0:a7:f0:26:c7:9d:93:
                    d2:ed:23:5c:09:3f:e3:db:3b:05:c1:6c:81:c4:d3:
                    ec:75:a0:84:b6:7c:c7:df:fc:36:8f:0c:28:13:be:
                    88:4f:60:6b:b7:3d:3d:de:b0:ea:7f:c4:cb:0e:a7:
                    fe:6d:b6:92:ef:0e:16:a8:d0:a3:20:c3:71:98:c5:
                    6d:f7:0c:36:9e:dc:2c:76:99:69:55:20:9b:d3:50:
                    5c:07:2c:5c:5d:93:57:e2:e1:10:67:3f:f3:30:85:
                    d8:b9:d2:86:07:97:24:1d:54:b4:7c:32:db:29:ce:
                    13:b9:1d:04:1d:5c:ca:a0:00:06:a7:6b:3c:73:7c:
                    f3:b9:aa:b1:e9:b9:23:f5:af:fb:16:3d:ba:cf:a4:
                    41:bf:42:84:69:82:a7:f4:bb:ef:45:97:2b:e0:8a:
                    cf:9a:56:05:78:9d:80:6d:70:53:a9:b1:dc:d5:39:
                    11:ae:86:84:76:99:32:00:fc:d2:92:fd:e0:18:5c:
                    cc:d9:90:98:b4:21:db:86:7a:70:77:f8:b0:08:52:
                    ee:d1:31:3c:f1:d7:fb:3e:9d:65:1d:64:2b:54:cd:
                    50:93:e7:c7:79:09:59:88:77:8f:06:2c:c3:fe:f2:
                    e1:d2:01:e9:9b:a4:a9:58:6e:40:88:b2:b3:fd:1a:
                    3c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:E6:3D:37:FB:0A:F3:81:00:BA:22:AE:D6:8F:0D:32:6F:62:F4:EE
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/NOY9N_sK84EAuiKu1o8NMm9i9O4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.128.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         34:fe:7a:ca:c1:c0:e9:55:dd:f6:38:6e:f7:d4:cc:e6:ba:c5:
         91:ed:14:02:a8:26:bb:65:de:f1:09:4c:4d:25:e1:eb:dc:ac:
         c3:9f:c3:b0:0f:e2:8c:f7:44:d8:a4:9b:65:22:fe:6e:dc:12:
         70:12:9b:d9:7a:8f:82:eb:f4:a6:af:ab:30:0f:df:8a:63:53:
         29:75:df:e7:15:5f:2f:c0:16:dc:5e:88:9d:2f:1d:91:92:6f:
         30:f3:d9:a9:2e:8f:a5:47:bf:7c:36:83:22:35:4d:05:1e:0c:
         3f:a7:a3:6e:1c:c8:c7:ee:c3:38:bf:75:bf:28:3e:b1:51:ff:
         53:7a:d0:bf:7b:08:f6:4b:34:42:bc:d6:7b:47:c6:64:12:a8:
         ff:b9:47:8f:e0:fc:1e:6e:17:39:ab:f1:fb:a3:d6:61:b6:4f:
         f3:f6:77:fe:ff:ef:0c:b9:ab:32:4a:0e:a0:32:08:32:e7:0c:
         3f:24:0a:f5:02:7b:3e:c7:fe:33:8b:86:98:ff:01:ac:5f:ea:
         b3:4d:be:f1:2e:97:c6:35:59:1c:7a:13:2b:46:7c:0d:70:df:
         71:22:82:9c:ad:93:cd:a1:c8:de:c6:49:be:e3:87:46:6e:f6:
         34:28:18:50:12:f1:17:20:5f:9a:c0:f3:01:b5:20:6a:78:74:
         5b:19:c9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:15:51 2026 by rpki-client