Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/UQ2XkUjO4k-H7IFkbD66jcHAnoY.roa
File:                     UQ2XkUjO4k-H7IFkbD66jcHAnoY.roa (raw, json)
Hash identifier:          G65CaEdUDmalt/Qid0MALYmULG+pab5I4AlabVwkq9o=
Subject key identifier:   51:0D:97:91:48:CE:E2:4F:87:EC:81:64:6C:3E:BA:8D:C1:C0:9E:86
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       08D5
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/UQ2XkUjO4k-H7IFkbD66jcHAnoY.roa
Signing time:             Tue 31 Mar 2026 07:44:21 +0000
ROA not before:           Tue 31 Mar 2026 07:44:21 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        210.235.158.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2261 (0x8d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:44:21 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=510D979148CEE24F87EC81646C3EBA8DC1C09E86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2c:10:73:eb:12:a7:68:c1:fe:d2:02:db:d3:
                    d5:6c:52:10:ef:73:4c:8b:be:c7:b8:99:1b:03:f9:
                    e0:b6:fa:30:51:3a:24:9d:46:eb:6e:22:cd:67:00:
                    be:8b:c0:a7:e8:59:bb:48:cb:36:9c:8b:f1:3a:63:
                    2f:0a:15:a7:97:ec:2c:02:bf:72:9f:18:35:e6:ef:
                    31:06:f3:03:27:99:ab:ea:33:df:8a:d7:16:89:fe:
                    40:4e:90:f3:87:42:17:3e:8f:19:34:d0:3f:31:67:
                    6d:15:f8:c6:8a:70:14:05:ea:20:19:05:d0:e2:14:
                    e4:4c:cc:2b:e3:be:b7:fc:be:16:d8:67:f7:45:aa:
                    10:32:b2:ec:0d:7b:93:4f:f8:52:f4:89:8b:4c:14:
                    73:0a:5e:d6:7e:a5:f4:10:4e:c5:c1:09:ff:ec:ba:
                    bd:32:ac:2c:ed:49:c5:58:63:18:57:5e:32:51:2c:
                    1f:2a:ea:18:3b:a0:25:11:6a:0b:70:7f:91:a7:04:
                    d0:8f:e4:87:60:e5:c7:8a:ad:85:d4:67:0f:21:83:
                    ff:8f:bd:40:66:33:ed:5c:7c:81:67:36:cf:cf:93:
                    50:79:c0:e3:02:62:57:d6:27:89:b8:bf:c4:42:80:
                    5c:00:ab:9a:24:4a:24:6c:f5:2f:16:c7:6d:1f:7f:
                    6b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:0D:97:91:48:CE:E2:4F:87:EC:81:64:6C:3E:BA:8D:C1:C0:9E:86
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/UQ2XkUjO4k-H7IFkbD66jcHAnoY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.235.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:5f:1a:5a:81:53:da:62:43:38:7f:0a:c6:9b:65:ab:1f:62:
         9a:00:fd:de:37:31:4b:c2:1f:0f:9b:5a:05:de:69:ae:9f:e4:
         37:7d:41:5d:15:e3:fa:19:e7:32:16:d8:42:8e:72:6c:7e:73:
         cd:94:8f:13:63:25:2e:45:9a:22:05:db:87:7f:a1:1a:ef:fe:
         8e:d9:b0:46:7f:88:74:f6:d4:9d:d6:36:6d:2e:5b:63:80:90:
         62:06:d0:84:67:48:82:60:9b:19:7b:44:13:e5:62:b2:5a:1b:
         a5:e1:4f:12:d8:a3:c6:63:3e:45:07:30:4b:ee:2d:ba:e5:c4:
         64:c7:a3:a1:02:43:e3:1f:76:d6:f2:d5:c9:b8:93:6e:dc:03:
         a7:71:e0:83:92:5e:5d:96:81:d4:39:3b:55:cb:b9:12:d2:7a:
         78:f3:74:75:77:1a:26:17:46:20:ad:9e:b5:f0:65:d7:cd:cf:
         96:06:4c:5b:00:f1:11:e0:8d:50:1e:7e:3b:da:ff:29:c4:80:
         9f:31:39:32:4a:17:96:0b:1b:2e:49:0d:db:0e:09:9b:24:c4:
         88:8e:34:a0:57:1e:29:35:1b:12:00:29:1a:89:5c:b1:22:d4:
         28:9f:a0:eb:61:dc:02:07:ad:b0:f3:32:b2:c1:35:16:2d:94:
         8c:12:91:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:34 2026 by rpki-client