Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/NbOhb13Ncp17gx7Pk1fYypucwnM.roa
File:                     NbOhb13Ncp17gx7Pk1fYypucwnM.roa (raw, json)
Hash identifier:          urhgCGK1mMgyP+r0W/83k0PXQSSgu3I/JGnzBMvvUUc=
Subject key identifier:   35:B3:A1:6F:5D:CD:72:9D:7B:83:1E:CF:93:57:D8:CA:9B:9C:C2:73
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       07A0
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/NbOhb13Ncp17gx7Pk1fYypucwnM.roa
Signing time:             Tue 31 Mar 2026 07:41:46 +0000
ROA not before:           Tue 31 Mar 2026 07:41:46 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        111.99.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1952 (0x7a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:41:46 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=35B3A16F5DCD729D7B831ECF9357D8CA9B9CC273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:44:27:52:fb:7b:5e:ee:5e:f7:54:9d:21:3e:
                    7b:8a:25:0a:e0:17:7f:27:99:ac:fb:39:41:05:0c:
                    f6:5d:e3:e1:38:41:de:39:fb:29:76:de:b0:8f:58:
                    dd:b0:cb:c6:1b:3d:a9:7e:3b:4d:f2:78:84:91:ad:
                    6e:e4:6b:ce:58:65:64:6a:e9:08:68:7f:f3:3a:ef:
                    b0:6e:64:39:f9:72:e4:1f:28:a6:a5:8c:82:24:c1:
                    3f:e8:a6:13:0d:2b:07:46:55:7b:3d:5a:f5:d1:bd:
                    66:8e:99:32:69:85:aa:57:1d:d8:cf:2c:08:7a:26:
                    c4:3c:fa:35:df:2d:64:70:76:2d:f8:a5:a9:e4:57:
                    ed:84:30:ca:df:77:38:cc:8b:48:b4:6b:db:c3:68:
                    b2:3f:27:12:45:23:77:e1:55:14:aa:12:63:67:d3:
                    5b:1b:78:b6:9b:03:46:09:11:9d:f3:7a:86:55:19:
                    d8:de:6d:17:14:e4:cd:91:31:b0:7c:e1:1b:77:4a:
                    f4:f2:1d:db:db:18:c0:3f:90:a9:56:50:ed:0e:ae:
                    7b:f0:d4:57:19:22:f4:b1:83:17:31:f0:04:3e:94:
                    ca:92:a0:cf:19:e6:c5:22:56:78:89:48:14:a6:23:
                    5e:25:7f:27:54:50:f3:89:75:61:37:24:ab:2d:09:
                    bf:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:B3:A1:6F:5D:CD:72:9D:7B:83:1E:CF:93:57:D8:CA:9B:9C:C2:73
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/NbOhb13Ncp17gx7Pk1fYypucwnM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.99.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b1:c6:1c:b2:80:77:33:b3:bd:8c:0e:67:20:1c:ce:5c:cd:b5:
         47:f7:32:71:c5:18:a3:5d:26:40:60:d0:6e:07:24:35:8b:e6:
         6a:96:4c:55:0b:b8:0d:0a:3a:e1:f7:f8:10:c5:7a:e6:8f:83:
         bd:63:a7:f9:96:d7:40:1a:00:bd:9d:e6:13:03:81:e0:14:0d:
         af:60:e8:f0:84:c2:cd:3b:ae:9c:4a:a7:9e:ef:08:2c:27:46:
         f6:0a:8c:be:46:3d:42:d9:dd:a4:b9:fe:89:29:6f:3f:3c:36:
         87:1e:c5:7f:2a:ec:ee:f8:0a:dc:c3:bc:eb:cc:a5:7d:c6:d2:
         b2:27:84:2e:72:c6:2f:cf:41:45:7c:d9:0f:81:f9:0b:c5:03:
         4f:ed:e6:da:a0:bf:76:22:46:47:93:0e:a7:c1:88:e0:36:63:
         84:c0:68:73:17:d0:ef:5d:78:99:84:ac:cf:93:55:3b:b9:b6:
         1e:6e:a9:55:1f:d3:3b:55:09:21:d4:02:24:fd:0e:63:52:21:
         49:b1:4e:fe:f0:ce:51:e3:f4:27:70:b0:f5:dd:4d:1e:31:3e:
         07:4a:95:03:6a:a9:2b:95:96:e6:aa:5c:3b:8d:58:e9:44:d0:
         69:8c:be:df:63:6b:42:98:3f:6f:95:c9:25:a9:d9:85:02:f4:
         63:bb:c5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:38 2026 by rpki-client