Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/U4m9nSllwU3LfcpjWK3-bFdZUbA.roa
File:                     U4m9nSllwU3LfcpjWK3-bFdZUbA.roa (raw, json)
Hash identifier:          S00o0I8O/6bL/h2v1KU89nO1c+FEErKiFaqIbXI5BqM=
Subject key identifier:   53:89:BD:9D:29:65:C1:4D:CB:7D:CA:63:58:AD:FE:6C:57:59:51:B0
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       089D
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/U4m9nSllwU3LfcpjWK3-bFdZUbA.roa
Signing time:             Tue 31 Mar 2026 07:43:54 +0000
ROA not before:           Tue 31 Mar 2026 07:43:54 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        210.199.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2205 (0x89d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:43:54 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=5389BD9D2965C14DCB7DCA6358ADFE6C575951B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e3:68:45:4c:b4:d8:f4:9f:b9:24:85:49:40:
                    7c:86:72:22:ec:41:42:8c:b0:dd:d8:c7:a1:cc:9d:
                    a0:90:f3:aa:49:b8:4f:2e:31:02:dd:53:d4:8d:c3:
                    92:cf:95:d0:f1:65:8c:70:2d:07:12:52:ce:6a:17:
                    21:b4:1a:49:c0:a4:4d:26:bb:75:85:53:34:e8:c7:
                    4b:7d:a9:56:21:37:77:75:da:23:90:66:9c:72:3c:
                    0c:ef:01:b3:e7:d5:de:df:55:a5:d3:15:92:46:2f:
                    59:0f:87:db:99:bf:2f:c2:d2:9a:4c:51:a0:47:78:
                    55:e0:e9:4a:7f:e1:18:6d:5a:e9:77:09:18:ad:09:
                    12:eb:a7:13:65:46:0b:ae:64:cc:a0:b9:28:1c:44:
                    4b:cf:6c:97:28:25:ae:9c:5e:35:b3:2a:eb:60:7e:
                    9b:d7:b5:9e:52:b1:1b:2f:c1:fa:e4:16:a1:dd:31:
                    f6:5b:93:b1:df:94:a1:96:b1:c2:91:31:66:3b:34:
                    f3:d1:bd:f8:d3:02:cf:20:ce:40:32:fa:41:e5:72:
                    35:43:8c:72:3d:40:3e:e0:03:36:2b:fa:0f:d8:ab:
                    d0:44:80:2f:38:09:08:50:9b:60:e3:7c:2f:b5:48:
                    43:88:b7:6b:5f:4c:41:36:e1:af:a0:df:d2:61:2e:
                    c6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:89:BD:9D:29:65:C1:4D:CB:7D:CA:63:58:AD:FE:6C:57:59:51:B0
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/U4m9nSllwU3LfcpjWK3-bFdZUbA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.199.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         3a:4e:34:1f:57:29:fa:5a:6d:a0:5c:1c:a5:5b:0a:35:5a:82:
         42:30:3e:8a:48:66:e7:1c:dc:76:a7:99:57:79:c0:0c:95:38:
         b2:ce:5f:95:4e:9b:37:ec:6d:41:05:d5:0b:12:a2:06:25:2a:
         9f:8e:4c:d6:51:81:01:0b:93:d9:5a:76:91:0a:62:a2:73:80:
         48:06:fe:fa:7b:ed:87:47:98:ad:52:1d:12:6e:89:f1:a9:5c:
         6c:5b:71:f4:a8:93:e0:42:8c:14:f8:b0:7c:b4:ae:17:83:5e:
         b7:65:f8:7f:a6:05:9a:48:86:cd:6c:18:66:5d:35:9a:c1:cb:
         86:a4:6d:73:a1:d8:1a:ea:60:70:e2:c2:14:98:8c:3c:41:69:
         c2:9c:db:36:11:34:ae:b3:68:3b:5b:14:4f:17:0c:04:34:d1:
         a4:f0:59:56:bb:88:13:d1:d2:dd:a2:30:bc:17:a1:2b:8f:6b:
         df:4a:12:b4:40:a1:97:ea:81:bf:fb:16:51:35:20:e4:3c:38:
         25:8f:ec:f3:c6:0a:e2:5b:55:d1:40:24:d8:6e:2c:c5:75:01:
         7b:f7:9e:dd:6c:3b:de:56:21:a3:3d:2b:ca:8f:64:d2:43:e7:
         66:85:50:a4:66:76:36:80:03:75:9a:95:21:b3:02:a8:07:42:
         88:3f:05:b8
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICCJ0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw
NzQzNTRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDUzODlCRDlEMjk2NUMx
NERDQjdEQ0E2MzU4QURGRTZDNTc1OTUxQjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDL42hFTLTY9J+5JIVJQHyGciLsQUKMsN3Yx6HMnaCQ86pJuE8u
MQLdU9SNw5LPldDxZYxwLQcSUs5qFyG0GknApE0mu3WFUzTox0t9qVYhN3d12iOQ
ZpxyPAzvAbPn1d7fVaXTFZJGL1kPh9uZvy/C0ppMUaBHeFXg6Up/4RhtWul3CRit
CRLrpxNlRguuZMyguSgcREvPbJcoJa6cXjWzKutgfpvXtZ5SsRsvwfrkFqHdMfZb
k7HflKGWscKRMWY7NPPRvfjTAs8gzkAy+kHlcjVDjHI9QD7gAzYr+g/Yq9BEgC84
CQhQm2DjfC+1SEOIt2tfTEE24a+g39JhLsZ7AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUU4m9nSllwU3LfcpjWK3+bFdZUbAwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTYxL1U0bTluU2xsd1UzTGZjcGpXSzMtYkZkWlViQS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAfSx4AwDQYJKoZIhvcNAQELBQADggEB
ADpONB9XKfpabaBcHKVbCjVagkIwPopIZucc3HanmVd5wAyVOLLOX5VOmzfsbUEF
1QsSogYlKp+OTNZRgQELk9ladpEKYqJzgEgG/vp77YdHmK1SHRJuifGpXGxbcfSo
k+BCjBT4sHy0rheDXrdl+H+mBZpIhs1sGGZdNZrBy4akbXOh2BrqYHDiwhSYjDxB
acKc2zYRNK6zaDtbFE8XDAQ00aTwWVa7iBPR0t2iMLwXoSuPa99KErRAoZfqgb/7
FlE1IOQ8OCWP7PPGCuJbVdFAJNhuLMV1AXv3nt1sO95WIaM9K8qPZNJD52aFUKRm
djaAA3WalSGzAqgHQog/Bbg=
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:13:41 2026 by rpki-client