Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/P2TTt16xnwfrD2vppalmJOSDQjI.roa
File:                     P2TTt16xnwfrD2vppalmJOSDQjI.roa (raw, json)
Hash identifier:          2OPKel0cJLtZEOgD7cJPc6t8kYtLZCwiESXhDti3qkQ=
Subject key identifier:   3F:64:D3:B7:5E:B1:9F:07:EB:0F:6B:E9:A5:A9:66:24:E4:83:42:32
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0788
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/P2TTt16xnwfrD2vppalmJOSDQjI.roa
Signing time:             Tue 31 Mar 2026 07:41:36 +0000
ROA not before:           Tue 31 Mar 2026 07:41:36 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        59.138.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1928 (0x788)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:41:36 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=3F64D3B75EB19F07EB0F6BE9A5A96624E4834232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c6:bd:15:72:71:e9:88:88:30:65:55:d7:f4:
                    9e:73:34:44:9a:49:be:f8:2a:ac:45:19:f2:9e:62:
                    dc:1d:23:32:c4:13:26:77:e8:2d:22:c6:da:0c:cb:
                    16:3b:b1:fd:d7:a7:e4:36:ff:dd:47:71:cc:af:43:
                    4c:2c:10:51:79:59:5f:61:10:9b:d4:8c:e8:e1:d4:
                    0e:a3:0f:4e:26:16:26:fa:a8:cd:30:71:cf:39:c8:
                    e3:9c:6b:8b:5e:2e:25:6d:c1:58:d4:11:9f:95:d5:
                    2e:f2:00:33:9f:2a:0d:0d:f5:f2:87:b5:87:20:aa:
                    5f:47:8c:d6:5a:37:48:fe:59:57:ee:03:89:33:11:
                    39:c2:32:1a:92:a2:ac:23:56:0f:49:01:0b:9d:06:
                    12:11:90:80:a6:65:07:a2:07:ea:8c:62:e8:80:15:
                    13:23:b9:82:c0:2e:9b:22:cf:23:bd:8b:0b:b2:80:
                    68:89:ac:47:0d:f4:50:e1:bd:87:83:ce:ba:95:13:
                    3e:15:2e:6d:e4:d8:c3:ff:f1:48:ea:6f:33:1b:d8:
                    91:dc:3c:c3:fc:71:7b:d1:80:ea:05:a1:18:31:0d:
                    68:69:71:45:1f:3a:a1:90:9a:e3:07:3e:d4:6c:39:
                    59:4b:ff:61:f5:76:33:3c:47:0c:a1:b9:cf:52:58:
                    2d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:64:D3:B7:5E:B1:9F:07:EB:0F:6B:E9:A5:A9:66:24:E4:83:42:32
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/P2TTt16xnwfrD2vppalmJOSDQjI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.138.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         99:84:db:0a:2a:03:cb:17:a8:10:ce:b7:77:cd:a7:2e:73:85:
         92:ae:c4:61:95:70:e3:de:82:65:aa:62:a4:93:bf:8c:2f:1b:
         b1:db:80:6b:0e:68:41:a1:c9:8f:64:d4:d0:c9:57:f3:e3:af:
         d4:4b:66:b3:02:24:15:a7:cc:8e:25:c5:19:7b:29:a2:54:4a:
         4c:9f:5e:dc:a9:7f:16:f2:89:ba:e9:2b:c5:e5:fb:2e:97:af:
         9e:53:64:17:95:ad:50:95:c0:11:10:bb:31:73:11:41:f7:82:
         52:77:ae:d0:ef:f9:da:31:27:45:6d:95:d4:1b:30:76:ad:30:
         5c:88:5e:04:eb:f8:5d:0b:e8:69:e1:b4:cd:47:7e:e7:1a:73:
         20:1e:a2:b7:8a:ce:e5:ae:9b:bf:41:14:65:3a:29:ba:96:1e:
         d9:5d:6c:60:8e:d1:a6:a5:a4:7b:f1:88:86:cf:a4:ae:3b:46:
         b9:32:c3:c7:97:1b:20:09:4c:b2:9b:c4:2f:06:e8:a6:fe:e0:
         be:75:9d:09:85:98:1e:ad:c2:82:df:2c:98:46:b4:e1:b3:4e:
         9c:7d:77:e8:6e:12:d4:1c:0d:e9:05:33:ed:35:a3:00:7b:80:
         a5:37:7f:ff:e9:88:e7:f6:88:6f:6e:d4:6b:bc:ef:bf:df:c1:
         19:31:d5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:13:45 2026 by rpki-client