Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/O4LwXgI5JPyKzl3ouH32KDyPIps.roa
File:                     O4LwXgI5JPyKzl3ouH32KDyPIps.roa (raw, json)
Hash identifier:          vBhrTshM4bCigmySt7W5Dj4BpJUirl7vLx1ytpLhdLM=
Subject key identifier:   3B:82:F0:5E:02:39:24:FC:8A:CE:5D:E8:B8:7D:F6:28:3C:8F:22:9B
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       07FC
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/O4LwXgI5JPyKzl3ouH32KDyPIps.roa
Signing time:             Tue 31 Mar 2026 07:42:34 +0000
ROA not before:           Tue 31 Mar 2026 07:42:34 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        113.153.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2044 (0x7fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:42:34 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=3B82F05E023924FC8ACE5DE8B87DF6283C8F229B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b8:ed:6c:77:31:d9:06:dd:a8:60:7f:fd:9e:
                    3d:69:d6:01:84:d5:18:bf:08:ee:1b:83:fc:e4:cb:
                    89:5a:aa:cd:3f:1d:47:23:51:28:94:c0:63:97:ec:
                    6c:ce:70:30:0f:ef:fd:89:12:eb:5e:49:20:77:f5:
                    12:17:87:cd:e2:9b:fe:85:18:a4:d0:62:da:d3:31:
                    7b:44:35:b6:58:7c:10:5f:0b:6a:1d:8b:cb:93:63:
                    4f:ca:4f:1c:22:60:37:d0:16:bf:17:f3:0f:86:0e:
                    5d:73:f6:3c:da:2d:ca:5c:62:66:13:9c:4c:6b:e1:
                    46:a5:80:17:26:66:14:a7:22:70:47:06:db:9b:6c:
                    e7:18:89:d9:d4:94:0d:48:c3:b1:21:50:7b:44:dc:
                    b8:e6:68:fc:fb:b4:e4:8d:26:ef:20:8f:8d:44:64:
                    2c:8d:9b:4a:ef:b1:15:8a:69:03:4e:b8:7c:e6:f9:
                    e4:2f:b3:ce:9e:cc:bc:c2:1a:5a:a1:5d:fc:07:96:
                    ed:37:84:46:a8:05:83:40:38:f3:42:32:5f:19:7e:
                    29:4c:ae:77:2c:48:f0:36:46:37:42:f5:64:13:6b:
                    be:fd:31:d6:61:45:36:a7:b2:3c:c9:f7:43:61:b2:
                    56:75:92:7a:0c:b3:77:18:0b:08:c2:ac:81:85:1e:
                    76:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:82:F0:5E:02:39:24:FC:8A:CE:5D:E8:B8:7D:F6:28:3C:8F:22:9B
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/O4LwXgI5JPyKzl3ouH32KDyPIps.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.153.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         93:68:f8:8b:73:51:80:9f:ca:95:81:36:ac:0a:88:5e:54:da:
         2a:36:74:77:aa:e0:ef:41:36:1c:d4:ae:4a:ba:db:cd:bd:c0:
         66:99:9b:91:a2:98:c2:f3:a2:54:15:97:17:19:d3:52:91:6a:
         58:88:11:d1:72:4a:0c:4f:12:67:24:e8:31:ed:83:64:11:25:
         a8:18:0e:08:e9:aa:32:2c:d9:8b:03:8a:7e:d1:2a:4d:32:93:
         31:bd:8e:47:da:e9:6f:f2:34:8e:ce:50:94:e5:ca:2f:a0:8f:
         4f:5c:76:e5:f4:76:66:e7:85:eb:3d:83:06:44:48:7c:a0:7c:
         8d:9d:6e:e4:22:e8:2a:a6:64:11:12:f4:4b:51:e8:03:38:d6:
         9f:8e:90:b4:02:a7:97:93:8d:5c:f3:28:74:bf:ce:d7:cb:71:
         63:08:f3:b1:c7:9e:72:63:19:b0:3f:a1:e4:5a:e7:44:6e:54:
         b3:51:8e:35:c4:c1:0a:65:ae:de:3e:0a:27:91:83:f1:d6:66:
         62:f6:e6:38:80:25:fc:81:38:b2:99:52:06:6c:b8:8e:9f:6e:
         af:3a:aa:f4:19:96:87:8e:a8:f4:b3:24:a1:28:91:1c:da:1c:
         da:1f:bf:0c:21:3f:9f:3b:a0:e2:83:f3:0e:8e:a8:77:fb:76:
         42:75:26:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:16:20 2026 by rpki-client