Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/TJeQLLN1z1t0nnUAaPeBl9-VHag.roa
File:                     TJeQLLN1z1t0nnUAaPeBl9-VHag.roa (raw, json)
Hash identifier:          VmiUE/xDRovRTtPexyOinTnOq+aDG7ryD6D3v5eRneo=
Subject key identifier:   4C:97:90:2C:B3:75:CF:5B:74:9E:75:00:68:F7:81:97:DF:95:1D:A8
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       07C4
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/TJeQLLN1z1t0nnUAaPeBl9-VHag.roa
Signing time:             Tue 31 Mar 2026 07:42:05 +0000
ROA not before:           Tue 31 Mar 2026 07:42:05 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        27.84.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1988 (0x7c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:42:05 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=4C97902CB375CF5B749E750068F78197DF951DA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:27:c3:a8:8b:af:71:8c:c7:b9:fb:6c:d8:67:
                    3d:95:30:48:4b:ac:ee:61:0d:e2:48:9c:b1:cf:ed:
                    b8:73:49:ec:dc:e1:64:28:c6:ed:44:b4:d2:fd:53:
                    62:60:ee:b4:dd:ea:40:62:d7:a4:db:9f:95:a8:e2:
                    49:d5:cd:b6:9b:75:a8:6d:66:ce:24:79:59:6a:c7:
                    fa:e2:eb:87:c0:8d:aa:dc:66:06:cc:b3:0e:ba:34:
                    3f:e9:1d:ee:20:d7:1f:4b:8c:0e:04:c8:18:b7:1b:
                    e4:3e:e6:17:35:7e:61:cc:8a:50:b3:08:68:a3:fa:
                    44:bd:ec:a1:8b:63:e7:26:06:c7:49:b0:c4:ce:37:
                    e3:25:cf:8b:1e:78:8d:fb:74:9e:d5:b0:e9:15:ed:
                    27:9c:47:48:cd:8d:a6:6b:b8:5f:33:d7:82:37:59:
                    75:bb:82:11:37:2b:fb:67:7b:25:66:23:45:d3:b0:
                    bc:3d:bd:d3:2d:ca:a7:81:f9:c7:b6:8d:a7:4a:7c:
                    b1:1e:0f:ba:3d:91:cb:0a:f9:03:7d:0e:a0:e0:8c:
                    b7:3c:e7:0a:e2:64:c5:ca:39:19:6d:67:30:62:ee:
                    dc:c1:36:f1:72:7b:f2:4f:48:fd:0f:2b:41:a8:54:
                    99:0c:9f:05:72:a1:3d:d0:1c:20:e5:f8:db:27:21:
                    bb:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:97:90:2C:B3:75:CF:5B:74:9E:75:00:68:F7:81:97:DF:95:1D:A8
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/TJeQLLN1z1t0nnUAaPeBl9-VHag.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.84.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         28:99:c2:f3:10:d8:4a:43:6f:a4:c1:4b:01:f0:1d:38:3f:00:
         15:0c:6c:ed:7f:ab:d1:74:1b:ec:63:92:a5:03:f3:c5:e2:3f:
         cc:ca:22:d8:dc:e2:db:d0:1c:06:bd:e4:55:61:31:71:fa:8b:
         1c:4f:d8:64:59:93:9a:0a:e8:c2:d6:45:ac:da:63:45:5b:f1:
         a9:cc:21:82:59:cb:9d:04:49:0c:f8:17:b3:59:7c:5d:ee:f5:
         c6:95:67:f4:53:d3:5b:f4:02:1e:8f:86:9a:f8:a7:7e:e1:3d:
         c9:25:85:03:fd:4a:64:31:01:41:3e:8d:53:fe:8b:cd:c8:24:
         8b:99:ef:f0:61:ca:d8:08:de:5e:ae:65:f6:c9:d2:54:63:da:
         14:cf:d6:76:09:0c:c2:10:ce:10:c5:7e:e6:e6:f9:7f:33:04:
         b4:44:e4:15:5b:be:74:f6:5e:fe:c5:59:77:28:d6:e7:79:fe:
         0f:a6:35:5f:07:4a:59:1e:58:5f:13:c7:b5:6e:50:af:04:70:
         a7:37:ac:85:38:ec:e8:7d:15:e2:de:93:69:5e:fb:03:32:9a:
         88:32:05:7f:1b:d3:48:a2:f1:87:93:db:b6:26:31:94:32:fe:
         48:9b:46:60:26:b2:bc:a8:56:bc:97:10:69:af:51:05:7a:cf:
         bb:fa:c7:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:40 2026 by rpki-client