Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/UTZqLVeXR0pjJe_ZyFt0kqgyekU.roa
File:                     UTZqLVeXR0pjJe_ZyFt0kqgyekU.roa (raw, json)
Hash identifier:          9r3uhThIk8ebom+dcCj4sNW9yeyOrtcWo/+7/69pR4I=
Subject key identifier:   51:36:6A:2D:57:97:47:4A:63:25:EF:D9:C8:5B:74:92:A8:32:7A:45
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       078F
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/UTZqLVeXR0pjJe_ZyFt0kqgyekU.roa
Signing time:             Tue 31 Mar 2026 07:41:40 +0000
ROA not before:           Tue 31 Mar 2026 07:41:40 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        27.88.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1935 (0x78f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:41:40 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=51366A2D5797474A6325EFD9C85B7492A8327A45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:37:77:1b:0d:a1:77:5e:71:06:91:55:ad:6e:
                    9d:44:3d:11:e7:3d:20:01:f8:99:d8:28:e2:9f:f0:
                    73:4c:19:8a:02:13:54:e8:3f:33:4c:24:9e:08:ac:
                    f9:5e:5f:c9:69:21:37:a0:0c:93:78:4e:a0:26:9a:
                    02:81:30:76:84:8f:2b:89:cb:da:c6:a9:2e:e4:ca:
                    b0:d9:7e:97:0b:48:ca:bc:cc:b0:09:1c:ed:2c:1f:
                    15:bb:4f:7f:23:d8:71:d2:c5:60:42:c1:89:c6:ce:
                    c0:c3:5b:0e:94:1a:ba:d2:aa:6f:ab:0c:a6:b3:42:
                    f0:6c:84:28:4b:1c:b2:5d:43:d5:91:f7:25:23:da:
                    f7:11:32:9d:33:fb:42:7e:28:2d:12:3b:f3:b2:19:
                    aa:03:a1:87:f4:cc:d0:17:ce:72:f9:e2:d6:66:c2:
                    18:c5:97:6d:e4:bf:b1:ec:c5:99:5f:37:80:18:81:
                    ed:c4:f5:03:db:22:40:dd:8a:9d:c4:dc:07:5e:20:
                    c8:49:4b:4e:a4:a3:86:8c:de:5d:46:88:d7:47:21:
                    15:18:c8:95:74:7f:d1:2e:58:77:26:23:70:fd:3f:
                    25:77:df:e4:ae:3e:b9:16:31:be:7b:dc:8d:59:cd:
                    43:3a:fb:a9:e7:f4:cf:a8:c3:e8:08:b9:2e:3c:0c:
                    0e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:36:6A:2D:57:97:47:4A:63:25:EF:D9:C8:5B:74:92:A8:32:7A:45
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/UTZqLVeXR0pjJe_ZyFt0kqgyekU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.88.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         54:b6:aa:8b:82:6d:89:d6:7f:ef:cf:6d:e0:a0:8e:69:d5:52:
         16:6c:7f:2a:78:48:44:6e:58:6a:20:c4:14:12:35:12:44:97:
         c3:f2:b9:f0:dd:25:04:ba:af:9f:b5:3b:73:eb:61:dd:b1:51:
         1c:7d:1d:d2:84:e0:7a:d7:60:ce:9a:a1:66:c8:ef:d5:44:c8:
         cf:46:ac:3d:07:92:8a:ea:4c:e5:76:74:a6:85:b6:ae:10:05:
         9c:38:45:5f:d5:30:94:3f:79:23:91:f4:28:bd:91:9d:da:2e:
         bb:b2:bf:7e:08:80:82:b1:d3:7d:63:62:10:ce:32:98:9e:dd:
         b8:ef:d8:2f:6b:76:4d:c1:68:b6:c4:93:7c:4b:8c:4c:99:87:
         78:81:11:88:65:aa:32:bc:6b:3b:ff:f4:0a:d8:54:98:67:9e:
         57:f9:3c:f6:9c:9a:62:cd:21:90:31:40:41:fe:9f:67:78:50:
         7e:0b:af:7a:ce:2c:b3:c6:b1:8f:92:04:50:07:a1:e3:af:20:
         93:41:14:b3:d5:a3:e5:0e:cf:c5:2f:27:d3:83:d5:13:21:24:
         85:b1:36:3e:dc:a5:3b:34:5a:5a:79:3d:32:1e:53:ae:4c:f9:
         7d:d4:f8:59:2a:e2:c7:d0:ee:18:05:c3:15:61:ea:b2:3b:f4:
         3f:6b:03:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:18:20 2026 by rpki-client