Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/PIKoiMjWUlL4XI0iPwsBOGz4hus.roa
File:                     PIKoiMjWUlL4XI0iPwsBOGz4hus.roa (raw, json)
Hash identifier:          oh8vCi/EGJXI93SuCq77rD5FYTGCd/AW7cBGaKXARgs=
Subject key identifier:   3C:82:A8:88:C8:D6:52:52:F8:5C:8D:22:3F:0B:01:38:6C:F8:86:EB
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0771
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/PIKoiMjWUlL4XI0iPwsBOGz4hus.roa
Signing time:             Tue 31 Mar 2026 07:41:25 +0000
ROA not before:           Tue 31 Mar 2026 07:41:25 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        175.128.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1905 (0x771)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:41:25 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=3C82A888C8D65252F85C8D223F0B01386CF886EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:33:9d:fe:09:e0:cf:98:ba:30:9d:e5:fb:d7:
                    cd:d6:1b:f1:6c:f0:7a:be:92:39:6f:8e:58:0a:d0:
                    26:0f:43:9c:09:a3:29:90:59:2c:76:1c:04:35:f2:
                    3e:f3:f3:e3:06:42:11:32:87:03:13:22:1c:13:3e:
                    55:ae:d7:f2:10:c2:bb:a4:21:cf:fa:08:e4:a3:73:
                    87:f3:0b:59:12:53:9b:fb:b1:3a:ee:be:e0:fb:f0:
                    91:79:55:83:81:cf:ce:f9:ff:b1:ee:9e:e0:f8:bf:
                    15:3a:71:c0:b9:2e:fb:76:82:30:e2:98:ee:1c:32:
                    99:79:5b:5b:46:bb:ab:99:c3:4d:d5:e5:4f:fe:23:
                    65:da:8f:1f:88:31:37:4a:d6:e5:9f:1a:0c:07:3d:
                    c4:f3:a0:79:fc:be:27:8c:75:66:9c:0b:d9:47:9e:
                    8a:0c:91:ca:1c:b8:2f:9e:02:75:97:9a:a8:fd:f8:
                    da:22:cb:24:72:59:57:3c:6a:7c:c3:2e:ba:a5:b2:
                    ee:d2:4b:35:ac:65:5e:c8:50:03:d2:4d:eb:86:e2:
                    fd:07:22:16:2c:cb:ae:69:7b:0b:1f:21:63:b5:5a:
                    1f:d5:b8:fc:e8:e8:d4:5f:18:aa:c8:05:79:53:a8:
                    c4:2d:9c:97:70:70:2f:bc:19:74:ea:ba:82:95:7e:
                    16:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:82:A8:88:C8:D6:52:52:F8:5C:8D:22:3F:0B:01:38:6C:F8:86:EB
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/PIKoiMjWUlL4XI0iPwsBOGz4hus.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.128.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2a:a0:64:3c:78:23:4f:7f:8b:82:b3:59:cc:14:4e:e8:23:1e:
         94:22:b3:92:46:aa:10:f9:70:17:d1:ef:57:dc:a9:c8:9e:84:
         a8:13:72:a5:c8:4c:1a:58:0c:44:31:43:99:62:f2:b4:37:a0:
         ec:19:58:0f:96:b0:e0:9e:fd:c9:30:90:ec:f8:7e:ca:eb:79:
         ea:b7:c2:4e:1b:1e:48:eb:85:8f:9c:6d:1c:83:80:ef:3a:64:
         78:88:9b:66:4d:a5:37:07:3a:ba:3e:21:fd:1a:49:f2:11:97:
         2f:79:7b:62:4d:62:b3:c1:9c:24:66:58:c2:04:ab:51:33:9f:
         97:bf:b2:23:6b:ee:2d:26:db:50:b5:5b:04:25:50:dc:f3:7e:
         78:0d:c5:a8:07:c6:08:de:ab:b5:c0:be:0e:25:cf:d7:5f:bc:
         b9:67:cf:54:00:83:a3:4a:de:f6:d0:36:61:66:73:29:21:ac:
         b6:74:a6:ad:dc:fd:ed:27:9b:86:7f:22:ae:1d:03:f4:b8:6a:
         dc:31:d5:34:76:d7:25:9e:29:04:0c:6d:9d:10:e9:ba:61:86:
         1a:78:ce:7f:bb:85:2c:9f:f1:cf:fb:37:50:a2:65:18:99:69:
         11:69:a7:3f:88:ab:de:35:e0:b1:a1:c1:0b:55:ef:62:a2:7e:
         10:f8:de:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:12:32 2026 by rpki-client