Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/S9iPJhCqXqeAw637LLCqQFOyUEw.roa
File:                     S9iPJhCqXqeAw637LLCqQFOyUEw.roa (raw, json)
Hash identifier:          syNFdCqV4DALdArKwd+RgGjWLL/s+8suBjqpcEr8ldg=
Subject key identifier:   4B:D8:8F:26:10:AA:5E:A7:80:C3:AD:FB:2C:B0:AA:40:53:B2:50:4C
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0847
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/S9iPJhCqXqeAw637LLCqQFOyUEw.roa
Signing time:             Tue 31 Mar 2026 07:43:12 +0000
ROA not before:           Tue 31 Mar 2026 07:43:12 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        119.107.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2119 (0x847)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:43:12 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=4BD88F2610AA5EA780C3ADFB2CB0AA4053B2504C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ac:d8:a4:9a:48:8b:ba:2f:53:14:1e:24:7d:
                    53:bb:bc:87:21:5d:af:10:28:aa:fa:5e:6d:be:94:
                    eb:73:e8:74:4a:37:fa:16:15:f1:9b:9d:26:f2:ec:
                    b2:9c:37:03:d3:51:1a:3d:86:e2:4c:8e:e4:20:d8:
                    65:3a:b8:5a:99:44:14:b8:5a:8d:44:55:9e:d5:05:
                    84:39:7c:5a:2a:f7:1e:6b:14:20:c5:b0:42:26:52:
                    f4:f1:e5:36:59:08:af:35:50:cb:56:22:82:1e:71:
                    20:a8:09:79:ff:d3:43:d7:f9:a6:98:27:15:f3:ac:
                    73:b5:7f:9f:c6:a3:62:10:80:9c:30:eb:bb:22:a1:
                    d9:04:f4:20:8c:60:70:e8:19:35:75:69:b0:92:3f:
                    a4:e1:61:6f:b6:80:00:15:b0:66:62:3c:c3:c1:78:
                    f5:35:46:2e:de:5f:22:78:81:25:a8:25:37:fe:ea:
                    11:9d:57:d7:08:8b:6c:57:16:58:89:67:0f:4b:27:
                    82:06:36:d0:98:92:93:3e:d0:35:7f:58:8b:81:fc:
                    d0:ae:7f:ff:97:c7:e9:1f:bb:57:6c:e4:fd:cc:c7:
                    43:66:fb:81:2b:ff:27:77:2b:c2:1e:fe:f6:e6:98:
                    11:ab:12:b0:6f:f1:ee:6b:fe:2f:1b:75:d1:e0:6a:
                    b8:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:D8:8F:26:10:AA:5E:A7:80:C3:AD:FB:2C:B0:AA:40:53:B2:50:4C
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/S9iPJhCqXqeAw637LLCqQFOyUEw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.107.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         1f:cb:0f:c3:65:73:fc:b7:58:91:06:d0:54:37:21:9a:c4:3b:
         67:af:78:64:81:ae:77:2e:e9:99:a7:34:b9:54:35:c3:88:04:
         9c:9e:f5:38:29:ba:9f:fd:36:c3:bf:a6:5d:1e:fb:ca:1d:a1:
         c9:ce:98:d9:e9:1b:1d:49:c3:bc:d0:94:b0:6c:ad:69:7b:54:
         59:66:3e:a6:96:f5:d0:0e:01:25:84:86:33:e4:4b:56:08:9f:
         ba:90:d0:da:3f:a8:0f:01:ce:cd:ff:00:22:4a:00:9a:8d:e5:
         89:ba:5c:02:e5:5d:cd:bb:56:f5:84:73:9f:98:fd:08:aa:e5:
         6d:1c:a8:c2:f1:de:90:62:c3:0d:9a:99:83:d6:10:4f:22:80:
         54:08:79:98:cf:3a:37:4c:69:be:90:01:5b:44:ee:18:77:54:
         23:4c:91:47:a8:d7:68:e9:03:5e:f4:b8:6c:81:cb:c6:72:78:
         20:ca:cb:41:36:60:12:da:02:b5:e2:09:44:79:0b:4b:06:42:
         5c:20:2f:b0:ed:96:e7:11:a4:c7:c1:dd:6a:0f:72:6d:ea:fd:
         62:c1:01:fa:e5:c4:5f:25:08:dc:f9:5b:46:a9:68:1d:18:01:
         bc:8d:5d:f9:31:7a:c9:06:f4:0c:b0:3b:af:fe:7d:45:5c:4e:
         66:15:2a:f7
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICCEcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw
NzQzMTJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDRCRDg4RjI2MTBBQTVF
QTc4MEMzQURGQjJDQjBBQTQwNTNCMjUwNEMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCdrNikmkiLui9TFB4kfVO7vIchXa8QKKr6Xm2+lOtz6HRKN/oW
FfGbnSby7LKcNwPTURo9huJMjuQg2GU6uFqZRBS4Wo1EVZ7VBYQ5fFoq9x5rFCDF
sEImUvTx5TZZCK81UMtWIoIecSCoCXn/00PX+aaYJxXzrHO1f5/Go2IQgJww67si
odkE9CCMYHDoGTV1abCSP6ThYW+2gAAVsGZiPMPBePU1Ri7eXyJ4gSWoJTf+6hGd
V9cIi2xXFliJZw9LJ4IGNtCYkpM+0DV/WIuB/NCuf/+Xx+kfu1ds5P3Mx0Nm+4Er
/yd3K8Ie/vbmmBGrErBv8e5r/i8bddHgargzAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUS9iPJhCqXqeAw637LLCqQFOyUEwwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTYxL1M5aVBKaENxWHFlQXc2MzdMTENxUUZPeVVFdy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAd3awAwDQYJKoZIhvcNAQELBQADggEB
AB/LD8Nlc/y3WJEG0FQ3IZrEO2eveGSBrncu6ZmnNLlUNcOIBJye9Tgpup/9NsO/
pl0e+8odocnOmNnpGx1Jw7zQlLBsrWl7VFlmPqaW9dAOASWEhjPkS1YIn7qQ0No/
qA8Bzs3/ACJKAJqN5Ym6XALlXc27VvWEc5+Y/Qiq5W0cqMLx3pBiww2amYPWEE8i
gFQIeZjPOjdMab6QAVtE7hh3VCNMkUeo12jpA170uGyBy8ZyeCDKy0E2YBLaArXi
CUR5C0sGQlwgL7DtlucRpMfB3WoPcm3q/WLBAfrlxF8lCNz5W0apaB0YAbyNXfkx
eskG9AywO6/+fUVcTmYVKvc=
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:48 2026 by rpki-client