Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/T_Esui2wESVgb28Y8EbJ2snVM9U.roa
File:                     T_Esui2wESVgb28Y8EbJ2snVM9U.roa (raw, json)
Hash identifier:          uebTDSdMccG2pFA3l/pqxsYs/LxB6bZJ2TXKoKgBoM4=
Subject key identifier:   4F:F1:2C:BA:2D:B0:11:25:60:6F:6F:18:F0:46:C9:DA:C9:D5:33:D5
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0908
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/T_Esui2wESVgb28Y8EbJ2snVM9U.roa
Signing time:             Tue 31 Mar 2026 07:44:41 +0000
ROA not before:           Tue 31 Mar 2026 07:44:41 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        111.87.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2312 (0x908)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:44:41 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=4FF12CBA2DB01125606F6F18F046C9DAC9D533D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:02:be:99:d4:e6:e6:42:c2:b6:74:4d:89:1d:
                    fc:bf:bc:3e:06:da:34:0b:fb:bb:9d:aa:53:ec:8c:
                    1a:48:32:4a:2b:24:47:b1:79:70:90:30:0c:0e:cf:
                    cb:ab:34:67:33:a8:4b:23:4a:61:d6:f7:af:df:89:
                    22:2d:19:61:e5:bf:21:64:77:af:bb:f2:48:8c:ab:
                    1f:87:e5:63:ac:b9:ae:cd:75:f0:93:19:a1:69:13:
                    fd:46:90:25:69:23:c6:c6:63:74:ad:5b:23:27:57:
                    d7:6c:e6:9e:c3:3a:a7:d8:e5:a3:6a:99:af:5a:ef:
                    07:c2:2d:58:b7:d4:bb:44:7e:1f:15:1a:c6:b2:5c:
                    72:d2:39:d4:f4:d6:fa:5d:e6:a8:ec:6d:28:05:15:
                    2a:80:56:09:5a:75:56:ae:e2:85:11:10:c5:31:b2:
                    9f:9b:0c:54:30:66:b8:60:4d:f1:b8:22:13:a7:ed:
                    d6:82:b5:0c:84:ab:43:bf:56:3b:d7:0f:ec:b9:c3:
                    2b:41:32:af:29:a1:65:54:9a:05:d6:17:bc:3b:ab:
                    6c:90:6f:5d:62:3d:b6:f8:cf:ca:c1:9f:b6:c3:5d:
                    c2:1e:29:c5:6c:6f:0a:20:d4:cd:cc:a9:25:e4:a0:
                    c6:86:7b:24:d3:bb:9a:93:89:8d:75:96:25:b2:ae:
                    0e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:F1:2C:BA:2D:B0:11:25:60:6F:6F:18:F0:46:C9:DA:C9:D5:33:D5
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/T_Esui2wESVgb28Y8EbJ2snVM9U.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.87.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         a6:c4:bf:12:eb:c7:66:8d:30:ce:26:6c:b6:a1:0f:19:e5:4c:
         51:28:04:42:90:57:10:7b:90:11:59:93:9b:86:b9:d0:da:c7:
         58:6e:1c:4a:34:9e:92:8f:bb:8f:3f:b6:9e:86:be:1d:42:85:
         30:94:96:ce:a0:f9:8e:6c:af:87:14:af:1c:22:38:32:a4:e3:
         09:a9:ee:b2:e8:ea:e2:72:d1:ff:b7:0e:3f:b9:f2:73:1c:42:
         36:7b:02:85:80:e1:17:b5:4e:4a:30:d5:2e:7e:6e:2b:de:8b:
         85:e5:19:82:1c:40:d1:b4:2f:4a:df:42:29:7d:9e:d1:ce:9c:
         d0:7e:cd:f0:3d:ab:32:b5:7a:4b:84:91:db:ba:0e:85:03:c3:
         7d:0b:5f:b2:0d:03:fc:c2:d7:90:a9:2b:b6:1b:68:d0:84:3e:
         0a:91:93:aa:96:e5:34:8c:01:d6:8f:30:c2:dd:e4:5d:27:2a:
         d1:f5:cc:22:c7:67:f1:e4:4d:29:4c:a0:55:51:57:7d:19:9c:
         97:3e:b2:6e:b4:1f:a5:8b:97:99:71:1a:36:4a:76:3f:73:a3:
         ab:3b:44:69:aa:77:cd:12:a7:5a:b0:2f:e0:aa:90:77:58:e2:
         19:a3:3f:39:1b:7e:d4:b2:f8:d7:12:61:05:be:98:fe:78:7d:
         c9:57:62:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:13:31 2026 by rpki-client