Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/WazbooZMBRFyqdTND-Kcnapq3e8.roa
File:                     WazbooZMBRFyqdTND-Kcnapq3e8.roa (raw, json)
Hash identifier:          7Nj1D0q2/qcVQFDibxZQ6D8R8QZYdBfQ8tGVm1OSlgw=
Subject key identifier:   59:AC:DB:A2:86:4C:05:11:72:A9:D4:CD:0F:E2:9C:9D:AA:6A:DD:EF
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0794
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/WazbooZMBRFyqdTND-Kcnapq3e8.roa
Signing time:             Tue 31 Mar 2026 07:41:42 +0000
ROA not before:           Tue 31 Mar 2026 07:41:42 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        124.215.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1940 (0x794)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:41:42 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=59ACDBA2864C051172A9D4CD0FE29C9DAA6ADDEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a7:70:d7:f5:96:ef:4f:b4:37:1f:5d:c0:6c:
                    21:5e:2f:d8:e0:a5:d1:29:06:c9:c7:e2:76:5f:7f:
                    1c:b0:95:7d:e5:25:00:50:80:56:44:b6:a6:40:b3:
                    5a:36:e5:c1:d0:d2:5e:69:a2:6d:96:b6:97:59:5f:
                    cc:1b:2b:49:f9:08:3b:ec:75:be:b8:1f:c1:5e:a6:
                    bf:fb:94:90:94:15:1b:ec:1c:2c:b8:58:cb:08:6c:
                    32:54:43:b5:24:1c:c5:f6:2c:b5:c8:f3:5b:58:1b:
                    58:e6:2f:d2:d1:4d:23:e8:b4:6a:12:39:ac:7d:0b:
                    01:e2:f2:86:a1:33:ca:c5:e6:95:9b:be:4c:a8:4d:
                    88:1c:7a:43:8d:ec:22:ab:3d:8a:03:26:00:9c:87:
                    7d:00:60:0b:35:f0:d2:24:63:ad:69:5c:2a:6f:f1:
                    d4:7e:ea:47:22:b4:e9:2c:35:62:ec:2f:a6:88:6a:
                    55:e7:94:b2:6c:b9:c9:f1:6d:01:c0:09:ba:cf:66:
                    b5:3e:8d:f1:67:f7:9b:00:b8:f5:da:5a:7a:92:5e:
                    22:b7:11:68:ef:f7:d8:64:ea:fa:d3:b7:04:29:8a:
                    e8:96:a7:49:2c:61:7a:6b:73:b7:9a:0f:bb:94:e5:
                    2f:0c:7c:fd:7a:ed:59:b2:f3:84:11:04:13:5d:26:
                    1a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:AC:DB:A2:86:4C:05:11:72:A9:D4:CD:0F:E2:9C:9D:AA:6A:DD:EF
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/WazbooZMBRFyqdTND-Kcnapq3e8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.215.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         77:44:fd:42:42:e0:d2:b2:1c:53:a7:83:ce:27:84:a3:f4:87:
         b4:22:a1:3b:35:0b:d4:2b:4a:1c:8c:2f:d2:85:b0:07:92:eb:
         b9:c8:47:7d:2f:59:6c:9a:65:2f:6d:06:db:91:91:dd:6d:47:
         d0:f8:0a:4b:f0:e3:f4:2d:dd:90:b3:a1:70:9c:0d:ba:7c:3f:
         0b:69:04:b2:ca:a1:fd:40:e1:0e:ce:76:f9:5e:62:78:5e:2f:
         83:85:d6:c9:d9:de:7f:b3:85:a5:5d:bb:8e:f4:cf:9c:ab:50:
         74:6f:8d:b2:8f:80:c7:22:9c:66:9f:d2:53:eb:ed:a0:a6:45:
         44:2e:3a:f1:59:cf:36:69:84:b4:3b:d0:fd:9e:1a:ce:a9:fa:
         52:64:09:63:a6:95:fa:45:22:58:3e:03:9d:20:66:59:b8:4b:
         bb:c3:52:d3:0c:5b:4d:07:6d:a6:28:dd:6a:e7:06:48:99:d1:
         b6:42:5e:fa:46:ba:d6:f2:3d:92:0a:2b:0d:0b:6e:b3:f7:0d:
         ba:9e:83:a7:22:90:4f:d7:89:1d:48:94:9b:54:91:c8:49:ca:
         63:8c:3a:1c:e9:51:85:12:86:3e:18:fe:e2:16:ba:c6:cc:19:
         98:37:94:a8:7b:a0:e4:88:31:b3:57:0e:68:78:f2:82:ef:6a:
         03:e4:ca:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:13:05 2026 by rpki-client