Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/QVs5aUCnvEnTmbH3U4UhDT7ILlU.roa
File:                     QVs5aUCnvEnTmbH3U4UhDT7ILlU.roa (raw, json)
Hash identifier:          4FPIauRxHeojG4Tn818zxHEx28f7pQ8p7CnAeG+OccA=
Subject key identifier:   41:5B:39:69:40:A7:BC:49:D3:99:B1:F7:53:85:21:0D:3E:C8:2E:55
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       08E3
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/QVs5aUCnvEnTmbH3U4UhDT7ILlU.roa
Signing time:             Tue 31 Mar 2026 07:44:26 +0000
ROA not before:           Tue 31 Mar 2026 07:44:26 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        222.225.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2275 (0x8e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:44:26 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=415B396940A7BC49D399B1F75385210D3EC82E55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:fa:a3:b3:1a:d1:24:4f:b6:c3:22:c3:bf:93:
                    c3:88:70:d9:83:5e:86:98:91:2e:5e:59:42:20:1a:
                    bc:05:81:72:b6:9c:93:06:54:f6:73:60:fd:01:b5:
                    e6:63:2e:ec:b6:fa:0f:58:92:a0:82:24:fb:18:00:
                    8f:70:b9:04:c9:6c:5f:12:ac:ab:e9:bc:d1:db:d7:
                    f6:9f:e8:fc:b9:6e:2f:bf:fe:76:d8:f2:f0:5f:f8:
                    42:d7:4b:1f:4a:c8:20:0a:02:a3:b3:13:98:66:9c:
                    41:23:fc:68:68:a8:9e:d5:87:c1:ba:e8:6d:46:f9:
                    9a:cd:1f:e1:9c:ea:fc:fa:51:b2:63:33:c7:ed:bb:
                    c8:01:c4:3c:3f:7e:25:a2:dc:77:dc:fe:a7:83:4c:
                    21:96:d0:fa:f2:af:97:8e:8b:f9:95:0b:97:31:30:
                    8a:35:86:f5:90:4a:09:5e:c3:fc:e1:de:c4:64:e2:
                    f0:c8:73:51:7f:fa:cf:f9:80:84:9c:34:6a:6d:84:
                    ee:a0:ea:60:8e:a0:fb:fc:fd:71:06:40:00:5a:88:
                    ad:a8:bc:d4:d9:2b:d4:54:35:10:34:8e:0a:da:0a:
                    74:54:8d:9d:c5:d5:82:bf:46:52:42:fe:6d:b9:21:
                    e3:55:14:78:0e:77:35:d1:32:63:0b:e3:85:62:19:
                    22:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:5B:39:69:40:A7:BC:49:D3:99:B1:F7:53:85:21:0D:3E:C8:2E:55
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/QVs5aUCnvEnTmbH3U4UhDT7ILlU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  222.225.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2b:cc:6d:58:56:a2:fc:e3:63:ed:01:43:95:87:04:14:e2:28:
         f7:a5:1a:65:d2:cf:96:6b:33:63:bf:28:9c:9e:5f:7d:f2:45:
         53:7f:9c:88:69:c1:5b:00:28:bb:3b:aa:c4:db:42:28:04:d9:
         42:ee:49:17:c8:1e:c8:aa:c8:fe:05:3c:42:2f:a9:17:a7:92:
         d5:26:fa:3a:0c:cf:93:80:d1:b6:81:c3:c2:64:6a:cc:d5:8f:
         45:8a:49:31:c0:62:65:3d:73:0f:e9:11:4e:8b:29:2c:9c:35:
         c4:1a:c7:f3:d0:71:03:5c:f4:57:a5:1b:f8:02:91:fd:02:af:
         54:6e:51:e2:c2:f4:5f:79:d9:c8:9a:d0:e2:d3:ba:23:b8:a7:
         31:ed:2f:ed:53:27:c9:b8:22:9a:97:2f:c5:11:eb:b8:07:7e:
         90:fc:9b:92:a7:cf:0c:e6:b2:67:4a:48:16:15:17:d1:ca:85:
         15:a0:f4:72:08:59:53:5a:e7:55:34:0d:14:fa:c1:8e:e6:26:
         6f:a7:fa:ca:e9:e7:46:3a:3f:52:2b:8c:a3:28:1b:dd:11:ca:
         f9:41:7b:f8:2e:59:b3:98:88:58:4a:ba:62:c0:6e:fd:68:b1:
         e2:26:aa:43:da:19:4e:12:be:63:a0:90:3a:01:00:3f:93:61:
         31:eb:00:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:13:52 2026 by rpki-client