Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/TNvippdQZJH0n6Kx5RQBpNznzoE.roa
File:                     TNvippdQZJH0n6Kx5RQBpNznzoE.roa (raw, json)
Hash identifier:          IkE/WSnzYh7rn97zseWWX+Ykis7LpqhAyVwNSoBnHt4=
Subject key identifier:   4C:DB:E2:A6:97:50:64:91:F4:9F:A2:B1:E5:14:01:A4:DC:E7:CE:81
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       07E3
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/TNvippdQZJH0n6Kx5RQBpNznzoE.roa
Signing time:             Tue 31 Mar 2026 07:42:20 +0000
ROA not before:           Tue 31 Mar 2026 07:42:20 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        124.215.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2019 (0x7e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:42:20 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=4CDBE2A697506491F49FA2B1E51401A4DCE7CE81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2e:54:c8:5a:ed:35:d1:2a:9d:b6:7b:9d:5f:
                    3a:22:65:84:cb:9b:dc:5b:47:cc:99:e1:ea:a0:c2:
                    5f:6e:51:8e:cd:da:67:e1:c6:c1:a3:5b:63:a5:ba:
                    30:ed:2c:22:36:1d:a3:c3:54:3f:bb:f7:d9:f1:5b:
                    f8:df:01:cc:02:7e:6d:ea:d3:61:de:97:b5:d9:e4:
                    28:c0:d0:bc:48:ba:fe:4c:ef:f1:49:99:77:6b:34:
                    14:f9:bb:63:68:21:bc:46:52:31:78:b9:ff:29:99:
                    9b:7f:04:e3:10:71:ce:e2:3b:fe:d4:20:2e:56:d4:
                    7e:e7:26:d5:1d:47:3c:de:a1:f9:92:ed:37:d5:ae:
                    82:32:21:0c:aa:67:db:c5:0d:9c:72:11:d6:80:a3:
                    c5:e6:60:59:f1:2b:2c:33:99:0f:29:57:a0:64:8f:
                    ba:bc:3e:e5:95:32:4a:ae:a7:ba:5f:1f:8d:90:91:
                    74:ac:e3:b8:e6:6a:96:cc:4c:79:99:00:0f:d3:ad:
                    2e:78:07:5e:d8:d4:12:0b:5d:78:35:3c:99:d7:98:
                    8f:79:5e:e8:48:a6:9a:2e:47:03:63:ad:eb:6f:0a:
                    44:a5:95:3b:ce:a4:da:49:ac:13:3a:41:19:da:78:
                    2d:dc:12:85:df:af:5f:cd:f4:4d:0a:db:5d:a8:ab:
                    6b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:DB:E2:A6:97:50:64:91:F4:9F:A2:B1:E5:14:01:A4:DC:E7:CE:81
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/TNvippdQZJH0n6Kx5RQBpNznzoE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.215.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         a4:55:5b:3a:71:79:1c:8d:35:96:3c:bc:82:38:d4:b3:1e:da:
         ac:ce:21:2a:1a:1a:42:19:90:ed:85:9c:3f:34:dc:ce:1d:3b:
         a4:1d:b9:b2:57:0d:d9:bc:57:fe:09:3e:40:0b:ea:f1:6c:71:
         f5:8c:7e:28:1c:ef:e4:1a:75:4a:bd:74:3e:01:6e:1d:0c:10:
         8e:09:13:ab:0c:73:e9:ce:26:70:ed:04:17:b5:c3:43:ae:0a:
         e2:5e:55:39:80:eb:99:a8:cc:0e:e8:ca:5c:c7:47:d9:a7:21:
         c0:90:21:38:7c:29:38:5a:07:58:22:87:7b:34:a9:7a:72:de:
         12:4a:37:3a:4e:78:2a:c8:79:cf:61:b7:4e:4e:60:0f:20:3f:
         30:58:11:3b:3c:06:1e:fb:2a:bf:b9:b8:ba:50:45:ba:bb:b5:
         9b:f9:f6:2e:ad:7d:5c:b5:ab:37:6d:32:b1:38:f1:a7:12:31:
         55:1d:a1:fb:05:2b:28:57:11:ab:7e:0a:9e:31:1d:7a:62:6e:
         e6:6f:76:f3:84:f3:f4:98:79:9c:51:a4:b3:50:99:73:ca:13:
         b7:85:72:80:28:dd:07:66:ca:84:9e:c6:16:fe:2d:1e:7b:78:
         30:12:b0:4e:f1:9b:62:4c:e7:0d:3f:c2:e8:fd:3f:83:59:6a:
         ec:ed:e7:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:44 2026 by rpki-client