Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/WmVa4-4-xdRiBzt9oV62LFwrLKM.roa
File:                     WmVa4-4-xdRiBzt9oV62LFwrLKM.roa (raw, json)
Hash identifier:          FMuk7oxLkCevYoGNI6tFxmNBLL1sw+EiCBI5vpPuqIk=
Subject key identifier:   5A:65:5A:E3:EE:3E:C5:D4:62:07:3B:7D:A1:5E:B6:2C:5C:2B:2C:A3
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       07EC
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/WmVa4-4-xdRiBzt9oV62LFwrLKM.roa
Signing time:             Tue 31 Mar 2026 07:42:25 +0000
ROA not before:           Tue 31 Mar 2026 07:42:25 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        111.100.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2028 (0x7ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:42:25 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=5A655AE3EE3EC5D462073B7DA15EB62C5C2B2CA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0f:0d:b6:4d:85:e3:6d:d8:4d:5d:fb:40:36:
                    02:fb:13:7a:66:f3:d6:40:54:f9:97:bb:68:9d:6a:
                    a7:52:ee:d0:b2:19:d1:bb:eb:38:d3:40:13:51:54:
                    52:21:a0:cb:93:9f:6d:b5:bb:25:7a:1e:c7:ae:1c:
                    90:1d:9a:72:9c:db:fa:03:d2:a1:43:ac:68:70:20:
                    28:4e:1a:2f:7c:cc:12:b3:b3:73:2f:69:f5:e8:c1:
                    07:5e:98:b0:fa:29:e1:1f:2f:44:85:a2:56:38:79:
                    63:d4:12:04:eb:8e:4b:a7:0e:a7:d2:5a:4f:6c:a4:
                    dc:12:51:0c:f0:84:65:cd:b9:5f:9a:30:6f:e2:1e:
                    1e:bb:97:35:6a:d7:37:29:3d:f5:bb:5c:1f:f3:20:
                    44:7d:6b:28:53:0c:66:04:bb:d5:44:31:0b:4e:e8:
                    f9:1a:5b:a7:55:44:d9:9c:b9:88:19:76:8b:eb:36:
                    e1:2c:45:95:4c:47:31:d9:c5:5c:eb:3f:77:a6:1f:
                    a0:9f:92:4b:30:27:5e:f1:6d:96:37:70:52:69:92:
                    ba:37:35:6a:0b:b4:d4:f8:1a:e7:b2:4d:21:0a:40:
                    ca:59:fd:f4:f9:c6:6e:47:93:99:5e:04:a8:35:67:
                    1c:ec:b7:06:7f:a7:3c:06:37:3f:b5:f4:83:12:d1:
                    05:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:65:5A:E3:EE:3E:C5:D4:62:07:3B:7D:A1:5E:B6:2C:5C:2B:2C:A3
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/WmVa4-4-xdRiBzt9oV62LFwrLKM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.100.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8e:a4:bd:74:06:a4:59:fa:f2:dd:e7:ad:cb:48:87:2a:ea:73:
         e0:6e:39:e7:a5:2f:b4:bd:53:a7:8c:90:20:85:8d:7f:ef:a0:
         ab:d0:9e:d9:94:70:6f:11:48:69:6a:2b:9b:6e:de:27:0d:0f:
         3f:50:17:38:c1:9d:49:21:60:39:c6:4a:43:e6:a3:73:32:78:
         de:c2:0e:cb:db:b9:0f:c8:78:e6:ac:03:54:a3:ba:c6:89:1c:
         2a:79:8e:55:60:55:7d:1c:a6:b4:6c:ee:e0:20:b0:e9:70:50:
         e9:08:8a:28:65:0e:82:68:23:c8:f9:32:64:11:24:74:c1:82:
         ad:e2:4d:c6:1a:6e:23:ed:8f:37:c2:32:ee:e0:83:8d:40:45:
         ed:f1:9f:1c:e5:da:75:5a:c1:c1:0e:66:5e:7f:35:b9:97:85:
         2d:00:1e:f4:a6:c1:87:25:8a:eb:40:ad:f6:cd:18:a3:53:aa:
         54:6b:41:63:f0:3e:e2:b4:6a:66:89:63:90:b0:af:aa:b0:72:
         12:68:d9:b5:c0:72:7b:65:32:b1:32:4d:39:b7:8f:b9:ea:c4:
         13:8c:a6:fb:24:5b:b3:5a:82:b6:d9:f3:dc:f0:ba:28:01:9c:
         e5:a6:99:3f:37:fa:26:ab:c4:5c:0e:0b:4a:9a:49:79:c1:e5:
         16:3c:44:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:36 2026 by rpki-client