Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/OZZSeME_wu0OVJ3ARIeKdHKiZ-k.roa
File:                     OZZSeME_wu0OVJ3ARIeKdHKiZ-k.roa (raw, json)
Hash identifier:          h/slc2Wp53sjL8qj6xhUwbJOdomvyBKpH+AclEbl/xc=
Subject key identifier:   39:96:52:78:C1:3F:C2:ED:0E:54:9D:C0:44:87:8A:74:72:A2:67:E9
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       08DC
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/OZZSeME_wu0OVJ3ARIeKdHKiZ-k.roa
Signing time:             Tue 31 Mar 2026 07:44:23 +0000
ROA not before:           Tue 31 Mar 2026 07:44:23 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        211.10.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2268 (0x8dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:44:23 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=39965278C13FC2ED0E549DC044878A7472A267E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3f:78:03:bd:94:13:b3:f9:1d:f8:2d:d6:b6:
                    c0:b1:1b:19:c6:03:7b:89:06:76:67:d0:d9:e6:63:
                    e5:6a:d4:bc:9d:00:cf:ad:50:98:a3:f5:a7:17:58:
                    11:d8:49:3e:16:d1:74:09:12:9f:ae:2c:60:a3:3b:
                    cf:36:b5:6f:6a:6c:9a:bb:92:0b:c5:7b:bf:e0:9a:
                    a8:de:9c:01:11:e7:04:bb:ba:9c:ec:5b:07:35:58:
                    af:fc:dd:22:4d:20:59:26:45:a0:16:34:a7:6c:92:
                    c4:90:d1:21:2e:02:89:ff:ee:9e:9f:6a:a0:c0:48:
                    b7:27:1c:92:20:f7:4c:ca:f0:70:0a:ee:31:cb:4d:
                    cf:b8:01:47:fd:ea:d7:30:e9:0c:1c:4b:d9:ca:e3:
                    0d:b8:48:f2:61:c6:50:43:4a:a9:fa:c1:14:bf:2d:
                    a4:01:1b:de:a7:d1:d5:3f:38:c7:ad:ef:d0:19:a3:
                    25:38:2d:7e:bb:b2:f8:40:47:14:50:b9:13:d0:6b:
                    b3:6e:dd:7c:4b:02:ca:b9:20:a2:3b:eb:d7:c6:2a:
                    33:30:06:69:40:bd:99:5b:05:4e:cf:42:e1:bf:b8:
                    7b:3a:67:4a:21:b1:66:15:2d:2a:a6:9b:c0:36:f4:
                    93:c3:12:0b:3c:56:9d:2f:f4:eb:f9:69:6e:53:07:
                    10:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:96:52:78:C1:3F:C2:ED:0E:54:9D:C0:44:87:8A:74:72:A2:67:E9
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/OZZSeME_wu0OVJ3ARIeKdHKiZ-k.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.10.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:a2:fe:db:f6:67:99:88:ba:d4:fd:14:36:79:a7:52:a9:68:
         a6:4d:23:4f:fb:41:25:84:99:b9:66:93:e2:25:63:dc:e3:c8:
         db:79:c8:fd:68:a7:42:53:f5:7b:b4:a4:a7:d0:86:1d:60:55:
         0c:96:e0:d3:54:1e:82:e2:ab:e6:50:71:b9:00:f3:4f:1b:59:
         a9:89:15:ba:d3:17:25:b7:b3:c8:e0:4f:c3:ab:56:5f:48:99:
         4a:9d:be:c7:74:77:89:0d:c1:96:0b:c2:7d:6b:a1:60:bb:c6:
         f2:1a:a3:d4:f6:e1:39:7d:cd:2a:7c:c3:92:19:e8:57:75:aa:
         de:ed:5c:7e:36:b9:fb:40:3a:80:ad:28:4f:6c:96:63:11:01:
         07:09:85:7e:e2:2c:ec:87:6b:c2:df:6e:b2:5d:87:e7:1a:4f:
         21:1d:77:32:e6:75:31:55:82:80:45:e5:b9:f6:0a:12:e8:76:
         88:23:63:10:68:19:4e:15:4c:d8:00:58:7f:d8:eb:8a:b9:d3:
         ff:65:3a:7b:7f:b2:b7:6b:78:f6:3e:02:d2:a0:c6:b7:4b:50:
         5e:01:58:40:fd:75:f8:eb:de:30:1c:1a:3a:0e:80:eb:3b:e3:
         d4:94:e8:2d:ca:32:6c:83:9f:05:5e:03:17:68:16:dc:4e:db:
         52:04:1d:fb
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICCNwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw
NzQ0MjNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDM5OTY1Mjc4QzEzRkMy
RUQwRTU0OURDMDQ0ODc4QTc0NzJBMjY3RTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDNP3gDvZQTs/kd+C3WtsCxGxnGA3uJBnZn0NnmY+Vq1LydAM+t
UJij9acXWBHYST4W0XQJEp+uLGCjO882tW9qbJq7kgvFe7/gmqjenAER5wS7upzs
Wwc1WK/83SJNIFkmRaAWNKdsksSQ0SEuAon/7p6faqDASLcnHJIg90zK8HAK7jHL
Tc+4AUf96tcw6QwcS9nK4w24SPJhxlBDSqn6wRS/LaQBG96n0dU/OMet79AZoyU4
LX67svhARxRQuRPQa7Nu3XxLAsq5IKI769fGKjMwBmlAvZlbBU7PQuG/uHs6Z0oh
sWYVLSqmm8A29JPDEgs8Vp0v9Ov5aW5TBxA3AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUOZZSeME/wu0OVJ3ARIeKdHKiZ+kwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTYxL09aWlNlTUVfd3UwT1ZKM0FSSWVLZEhLaVotay5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADTCoUwDQYJKoZIhvcNAQELBQADggEB
AD2i/tv2Z5mIutT9FDZ5p1KpaKZNI0/7QSWEmblmk+IlY9zjyNt5yP1op0JT9Xu0
pKfQhh1gVQyW4NNUHoLiq+ZQcbkA808bWamJFbrTFyW3s8jgT8OrVl9ImUqdvsd0
d4kNwZYLwn1roWC7xvIao9T24Tl9zSp8w5IZ6Fd1qt7tXH42uftAOoCtKE9slmMR
AQcJhX7iLOyHa8LfbrJdh+caTyEddzLmdTFVgoBF5bn2ChLodogjYxBoGU4VTNgA
WH/Y64q50/9lOnt/srdrePY+AtKgxrdLUF4BWED9dfjr3jAcGjoOgOs749SU6C3K
MmyDnwVeAxdoFtxO21IEHfs=
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:38 2026 by rpki-client