Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/P8LAc-pTajbYKNEN76D18jxigwo.roa
File:                     P8LAc-pTajbYKNEN76D18jxigwo.roa (raw, json)
Hash identifier:          6A/ebsF6FEamseohJWSO6lU/9N+DYcgl9mGL9tqW2TE=
Subject key identifier:   3F:C2:C0:73:EA:53:6A:36:D8:28:D1:0D:EF:A0:F5:F2:3C:62:83:0A
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       090D
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/P8LAc-pTajbYKNEN76D18jxigwo.roa
Signing time:             Tue 31 Mar 2026 07:44:43 +0000
ROA not before:           Tue 31 Mar 2026 07:44:43 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        211.10.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2317 (0x90d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:44:43 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=3FC2C073EA536A36D828D10DEFA0F5F23C62830A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e6:b7:60:de:ed:d8:2d:c4:27:4f:a6:15:38:
                    b6:29:04:71:7d:bd:ff:e3:11:ae:2d:b1:5f:c2:b0:
                    1f:aa:af:2c:12:5a:3c:ae:b4:74:59:20:59:8f:50:
                    45:44:5e:fa:79:61:6a:b3:b1:91:3a:3b:5f:26:e6:
                    0c:74:c2:41:f8:1c:36:1a:fa:47:6c:88:e6:04:13:
                    9b:ed:d6:91:97:27:a9:14:51:8b:fd:33:29:67:cd:
                    07:8e:bc:a8:ef:aa:df:10:49:89:b2:a9:79:82:84:
                    65:b3:0f:b6:ae:af:ac:de:98:86:d6:cc:bd:4c:9e:
                    9a:8b:7d:09:56:03:65:3b:cb:38:84:74:fa:ac:1f:
                    ca:5a:98:d4:37:31:f6:97:8d:05:df:d5:09:ee:a8:
                    80:36:32:b2:3c:1b:74:50:a6:b3:1c:fc:5f:ff:f8:
                    82:82:cd:24:3a:5b:9c:c8:69:d2:33:ae:ad:c2:b4:
                    11:c4:8d:a5:e2:9c:21:61:43:bf:12:b1:52:b5:9a:
                    76:3f:0e:f7:a6:9d:9d:56:e6:33:49:eb:74:ba:85:
                    85:73:96:6d:e5:6f:8e:34:49:29:ab:d1:78:de:d2:
                    eb:34:3f:d8:b9:a8:e5:de:c4:8d:63:71:6e:40:b7:
                    92:b8:d4:7e:0e:8e:8f:b4:a3:1b:59:52:7e:61:ff:
                    bb:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:C2:C0:73:EA:53:6A:36:D8:28:D1:0D:EF:A0:F5:F2:3C:62:83:0A
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/P8LAc-pTajbYKNEN76D18jxigwo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.10.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         94:a3:2f:5f:90:93:82:3e:b4:90:bb:c9:65:a5:d2:3c:03:51:
         a6:71:5c:83:34:e9:fc:34:b2:32:5b:db:e8:2b:7f:26:df:93:
         11:38:d4:b5:96:07:83:0e:a5:d3:67:c5:70:c3:60:e0:3a:08:
         67:4a:e9:64:6c:49:ec:ad:db:9e:ee:b6:b2:15:88:f6:f8:b7:
         25:03:3e:c4:83:0c:34:3d:dd:f7:ab:38:fe:5c:33:4b:df:14:
         31:c2:5d:7c:46:11:c3:30:8e:91:a6:bf:c0:c6:97:66:fd:34:
         98:36:cc:f8:6d:79:90:7c:90:02:d7:00:14:6b:e0:7f:ec:df:
         1d:c1:f1:a1:7b:ca:f9:50:b2:6d:27:ab:95:26:48:d1:19:34:
         87:86:c6:32:98:14:70:a6:77:57:39:8b:b8:7c:1d:8a:39:5d:
         e1:7d:5c:ce:b0:2e:16:49:f6:ed:42:ed:43:17:c6:73:31:9a:
         4d:f6:5b:0a:23:05:1e:c5:db:e8:fb:8e:75:22:13:57:e7:2a:
         01:de:73:ab:e6:a5:d9:03:84:f0:16:30:31:90:00:ef:b5:e3:
         8e:e2:11:9c:27:4d:ef:48:46:4d:1b:66:52:f9:51:5e:f9:c4:
         23:dd:54:48:4f:a5:b5:fb:5b:a9:c6:b0:10:76:08:82:4d:9f:
         75:76:89:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:48:43 2026 by rpki-client