Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/SNs5pGU8y3CpRZBfouqckgVOFuU.roa
File:                     SNs5pGU8y3CpRZBfouqckgVOFuU.roa (raw, json)
Hash identifier:          3fd/JCsyCgJLyS7SxIhfQoqUF+yuM94uAIxc5wntRI4=
Subject key identifier:   48:DB:39:A4:65:3C:CB:70:A9:45:90:5F:A2:EA:9C:92:05:4E:16:E5
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0849
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/SNs5pGU8y3CpRZBfouqckgVOFuU.roa
Signing time:             Tue 31 Mar 2026 07:43:13 +0000
ROA not before:           Tue 31 Mar 2026 07:43:13 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        175.134.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2121 (0x849)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:43:13 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=48DB39A4653CCB70A945905FA2EA9C92054E16E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ec:22:8b:59:9d:cd:c3:fe:76:e0:07:b1:af:
                    76:88:47:81:c2:98:22:c4:c5:30:31:e8:d1:77:f1:
                    8a:b7:7e:86:f4:25:8c:ee:78:b3:2e:a4:69:2f:44:
                    4f:46:b9:ff:86:de:7d:00:10:3d:e5:69:49:5b:48:
                    ee:bc:f2:82:08:41:81:a1:d0:2a:ef:2b:fa:2c:bb:
                    c2:9a:61:c0:63:84:ca:88:a1:d8:45:b0:a6:1b:4a:
                    8c:3e:a9:d5:3e:fe:66:4c:14:ab:95:75:99:1c:ea:
                    b1:32:16:f5:58:d8:0e:5b:0f:1a:4b:a9:00:6e:56:
                    7e:3c:e1:96:46:70:e2:c1:e2:0a:02:8d:30:63:f6:
                    3e:80:62:ff:05:de:69:cd:fc:cd:30:f6:48:36:74:
                    4e:19:6c:b5:29:02:d7:14:d9:c1:fc:82:36:df:e9:
                    1f:76:ef:b8:29:ed:c7:a8:bf:44:b3:82:3f:34:21:
                    5e:a1:e3:72:9b:48:43:82:8d:a7:6d:35:11:04:f9:
                    8d:b1:96:b5:6c:6c:57:13:e0:74:db:91:8c:33:63:
                    c1:55:fa:03:a6:b7:b9:d9:ea:35:d0:f7:0d:22:28:
                    04:cc:d6:f4:46:f7:a8:0a:9f:c7:70:7f:f8:21:9a:
                    fc:ea:2c:45:55:93:5a:9f:4d:16:18:ed:4d:e1:a7:
                    f3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:DB:39:A4:65:3C:CB:70:A9:45:90:5F:A2:EA:9C:92:05:4E:16:E5
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/SNs5pGU8y3CpRZBfouqckgVOFuU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.134.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         30:e7:dc:1f:c3:ff:46:52:0c:f5:04:ac:13:c8:0b:10:00:53:
         77:76:35:d4:ef:c6:1b:ea:e6:3b:b0:cf:41:e8:29:d9:c9:c3:
         7f:f2:c7:17:07:73:d3:3a:25:bc:0a:79:73:c4:6f:4a:52:c1:
         2a:fa:95:26:f5:2b:7c:94:2b:7a:c8:d1:6a:58:c9:f2:89:fe:
         6d:ef:dd:f7:b7:37:55:93:17:56:61:11:fa:d9:5c:3e:97:fa:
         c0:9f:d9:23:02:8b:4a:38:0b:74:fd:4d:db:5a:9d:2e:20:13:
         ed:9c:49:63:71:03:a7:3f:f2:56:8e:15:45:12:e6:6c:39:f3:
         93:fb:6e:3b:1b:55:d0:21:3b:5e:9d:d6:4c:22:ed:a3:e1:9a:
         cd:fb:e6:1e:93:b2:16:54:cc:f5:97:e6:71:0b:73:14:7d:f3:
         e1:4f:d9:6b:ca:b6:15:fd:1a:d7:71:73:37:d7:48:bf:74:e7:
         50:7e:a9:9f:a9:59:81:93:d5:77:1a:f0:06:15:4e:c5:74:65:
         42:8b:11:77:9d:ef:93:ab:93:37:1d:28:b0:d4:12:73:5d:19:
         21:7d:40:ef:b9:7c:3c:36:77:87:9d:15:e6:cc:61:a0:84:8d:
         08:2b:d9:8e:0d:bf:67:0f:95:d6:1c:1e:18:56:58:28:a0:bf:
         eb:14:f0:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:27:46 2026 by rpki-client