Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/UX5xPo7OQ_sYIuw4BuNL_GtCK_4.roa
File:                     UX5xPo7OQ_sYIuw4BuNL_GtCK_4.roa (raw, json)
Hash identifier:          wGpweSUGYDzdH+3TGFVThoVHSpJ1bfIccqyRuENVfnI=
Subject key identifier:   51:7E:71:3E:8E:CE:43:FB:18:22:EC:38:06:E3:4B:FC:6B:42:2B:FE
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0876
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/UX5xPo7OQ_sYIuw4BuNL_GtCK_4.roa
Signing time:             Tue 31 Mar 2026 07:43:35 +0000
ROA not before:           Tue 31 Mar 2026 07:43:35 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        210.229.146.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2166 (0x876)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:43:35 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=517E713E8ECE43FB1822EC3806E34BFC6B422BFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:da:db:09:2d:00:c5:5d:57:e8:31:1d:5d:16:
                    3c:5b:21:11:1c:77:0b:15:7f:b5:82:80:ab:0c:10:
                    a9:20:75:d2:8e:29:2f:79:52:99:e6:33:92:f9:32:
                    2b:c5:e5:fa:62:90:9e:e5:15:d2:b5:55:40:56:c7:
                    db:07:03:6a:7c:40:2c:98:60:4e:9d:a4:04:81:4b:
                    2d:a1:d5:c4:7c:bb:a4:b6:99:63:57:e6:13:3a:67:
                    fc:a1:f2:df:cb:6d:fb:d1:62:ee:63:ff:2e:c3:ea:
                    a7:61:cf:01:d1:fb:58:c4:69:af:ca:5d:5e:b3:c8:
                    1c:67:39:3e:90:43:bc:49:38:13:00:e9:c3:3f:11:
                    26:57:45:9d:84:3b:16:b7:51:e4:39:ac:b5:5b:47:
                    d2:7f:87:bf:7f:64:c8:cc:8f:7e:8d:e1:f9:71:b6:
                    6c:75:05:41:51:c5:f0:6f:de:e3:29:8b:79:6f:b1:
                    34:e6:34:52:a4:c4:9d:50:4b:e4:ee:1e:f0:72:76:
                    37:49:88:ad:3b:6e:75:50:f5:61:de:f7:bf:10:1d:
                    f1:c8:31:50:5a:b2:2a:d5:72:6a:92:82:88:e3:e1:
                    06:b1:a7:8a:73:68:a7:a1:b0:84:b9:1a:1e:47:3c:
                    9a:1d:cc:ca:7a:83:ce:a8:38:d3:7f:12:44:a0:9c:
                    57:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:7E:71:3E:8E:CE:43:FB:18:22:EC:38:06:E3:4B:FC:6B:42:2B:FE
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/UX5xPo7OQ_sYIuw4BuNL_GtCK_4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.229.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:b9:c4:23:67:53:4f:2f:28:4f:dc:f6:f0:74:58:b1:98:9f:
         75:d3:5a:0b:0a:35:dc:e9:20:4a:b7:eb:9e:7f:31:34:8f:84:
         85:ff:31:ff:8d:aa:bc:7b:f5:e7:31:20:8b:8f:27:f2:24:ac:
         f7:4f:03:ee:38:4a:3c:9c:f7:a1:71:42:47:10:c1:45:49:57:
         6c:88:d2:d1:33:7b:ad:82:15:c8:86:89:f4:ed:49:0a:82:2e:
         7a:4e:9d:96:df:a0:46:40:a4:f3:6c:4b:74:0e:64:37:d7:cc:
         5c:b0:50:ef:bd:9b:ed:74:f8:22:b9:fb:a2:63:63:06:a4:d6:
         20:3b:cf:0d:13:63:29:2c:b0:32:63:f4:d5:eb:00:c2:cf:a1:
         af:5c:80:71:9b:65:3d:02:4b:1a:64:dd:9a:00:ce:dd:14:87:
         c6:f4:3b:c2:57:d4:58:86:93:cc:93:e2:4b:1f:1b:20:de:72:
         7d:63:57:9c:fb:86:3d:4c:86:1b:95:4b:cf:f0:ef:12:e8:ea:
         68:32:49:46:be:b8:58:4d:63:75:40:89:5b:63:3c:d1:77:d0:
         cb:0f:69:1c:6f:02:9f:3c:c8:bc:c3:8c:4d:8c:88:71:d7:d5:
         43:85:64:6c:f7:56:cf:f4:d5:7c:79:de:f4:34:eb:ba:21:92:
         3e:51:18:62
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICCHYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw
NzQzMzVaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDUxN0U3MTNFOEVDRTQz
RkIxODIyRUMzODA2RTM0QkZDNkI0MjJCRkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCg2tsJLQDFXVfoMR1dFjxbIREcdwsVf7WCgKsMEKkgddKOKS95
UpnmM5L5MivF5fpikJ7lFdK1VUBWx9sHA2p8QCyYYE6dpASBSy2h1cR8u6S2mWNX
5hM6Z/yh8t/LbfvRYu5j/y7D6qdhzwHR+1jEaa/KXV6zyBxnOT6QQ7xJOBMA6cM/
ESZXRZ2EOxa3UeQ5rLVbR9J/h79/ZMjMj36N4flxtmx1BUFRxfBv3uMpi3lvsTTm
NFKkxJ1QS+TuHvBydjdJiK07bnVQ9WHe978QHfHIMVBasirVcmqSgojj4Qaxp4pz
aKehsIS5Gh5HPJodzMp6g86oONN/EkSgnFc5AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUUX5xPo7OQ/sYIuw4BuNL/GtCK/4wHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTYxL1VYNXhQbzdPUV9zWUl1dzRCdU5MX0d0Q0tfNC5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHS5ZIwDQYJKoZIhvcNAQELBQADggEB
AAq5xCNnU08vKE/c9vB0WLGYn3XTWgsKNdzpIEq3655/MTSPhIX/Mf+Nqrx79ecx
IIuPJ/IkrPdPA+44Sjyc96FxQkcQwUVJV2yI0tEze62CFciGifTtSQqCLnpOnZbf
oEZApPNsS3QOZDfXzFywUO+9m+10+CK5+6JjYwak1iA7zw0TYykssDJj9NXrAMLP
oa9cgHGbZT0CSxpk3ZoAzt0Uh8b0O8JX1FiGk8yT4ksfGyDecn1jV5z7hj1MhhuV
S8/w7xLo6mgySUa+uFhNY3VAiVtjPNF30MsPaRxvAp88yLzDjE2MiHHX1UOFZGz3
Vs/01Xx53vQ067ohkj5RGGI=
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:44:32 2026 by rpki-client