Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/UTDiEadDvqZperbdAlhFkuXrtc4.roa
File:                     UTDiEadDvqZperbdAlhFkuXrtc4.roa (raw, json)
Hash identifier:          HoCJVehhmWp0Z4eHNVAk0e1AjC1WmtMoE/VQKJSzXAQ=
Subject key identifier:   51:30:E2:11:A7:43:BE:A6:69:7A:B6:DD:02:58:45:92:E5:EB:B5:CE
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       08C4
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/UTDiEadDvqZperbdAlhFkuXrtc4.roa
Signing time:             Tue 31 Mar 2026 07:44:12 +0000
ROA not before:           Tue 31 Mar 2026 07:44:12 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        210.254.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 13:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2244 (0x8c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:44:12 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=5130E211A743BEA6697AB6DD02584592E5EBB5CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:38:a1:df:45:7c:52:51:5c:52:d3:67:26:5a:
                    62:f7:10:a9:4a:81:1e:64:d8:ca:f9:d6:18:b2:4e:
                    da:f0:f2:d4:7d:5c:59:0f:37:81:43:ec:98:0d:8a:
                    76:5c:72:40:0c:9f:56:01:20:c4:30:a1:74:60:48:
                    5d:5f:68:64:d9:25:0b:8f:1e:dc:00:93:1a:18:df:
                    8f:ba:8e:c9:fc:42:4d:b6:50:de:fa:45:09:0d:ad:
                    ba:3d:30:ca:00:9d:9d:b9:2f:28:a8:22:2c:6b:3b:
                    38:d5:26:10:6d:bc:3e:29:ca:c1:4e:d7:ff:62:ef:
                    5e:81:11:15:ee:a7:5e:d5:9b:9f:99:cd:96:ed:1d:
                    6f:47:73:31:26:d1:a2:6c:19:7f:d7:8a:22:58:f0:
                    cc:eb:3c:fd:e4:73:be:93:84:f9:21:f8:fc:86:93:
                    76:08:29:2e:94:77:c4:59:e8:d4:5c:29:ae:65:0f:
                    0c:e9:ac:c1:2e:13:5d:4b:85:e0:05:2f:03:ed:5b:
                    8e:fc:62:94:d3:24:be:98:41:9a:6c:6c:b0:84:e2:
                    ee:ba:8d:3a:03:5d:32:e2:6f:5c:6d:b5:81:39:4c:
                    5c:56:be:f5:df:f4:27:65:6c:f3:7f:9b:1a:cb:ce:
                    c1:9a:ea:8c:77:97:16:1c:ac:12:c8:bc:f6:ac:9b:
                    d6:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:30:E2:11:A7:43:BE:A6:69:7A:B6:DD:02:58:45:92:E5:EB:B5:CE
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/UTDiEadDvqZperbdAlhFkuXrtc4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.254.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:a7:65:3b:38:62:a4:a9:c0:b8:ef:36:89:29:b4:81:70:e8:
         5a:1b:ca:00:b4:16:86:3c:ee:77:60:a0:01:0c:fa:d5:be:8f:
         c9:2b:e7:79:f7:8e:27:a1:05:12:f5:68:61:ef:d0:f4:bc:0d:
         2c:04:e7:c2:f5:5b:3c:7e:18:f6:15:4e:ce:00:b0:70:6a:2e:
         ff:4e:e4:f3:37:dc:f1:31:43:a8:b8:6a:66:8a:da:95:ae:72:
         3d:a5:9a:05:10:50:89:ec:a7:b1:31:e7:e7:de:b0:b2:7f:22:
         6e:d2:66:3c:b0:6e:77:d8:c3:ee:10:8a:c0:94:7a:99:77:f6:
         cd:9f:34:7b:a4:17:04:92:3b:de:31:0b:34:cd:cb:6d:14:7b:
         ec:d4:e0:f4:a2:02:80:38:ef:c5:cc:fe:d0:6d:50:de:05:cf:
         f3:52:d0:c8:91:d2:23:3a:a4:18:74:a9:64:09:62:e3:8a:66:
         fe:87:ab:28:6e:3a:be:ae:c6:9b:5b:13:33:e3:0e:c9:c9:07:
         59:48:20:9a:29:6b:d3:c5:7a:82:ab:a1:0b:f9:35:d3:e0:34:
         f7:16:96:4a:f0:08:23:5d:d1:be:0b:88:b3:13:a7:40:24:af:
         77:48:f3:58:8e:fb:af:8a:89:04:01:92:2b:74:31:cf:4b:df:
         52:24:f5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:02:26 2026 by rpki-client