Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/XI60ccsNq8u0x7KLW8cSiYHpaOw.roa
File:                     XI60ccsNq8u0x7KLW8cSiYHpaOw.roa (raw, json)
Hash identifier:          f8CrqMTr9a7wmGSrkcrW1KqM7SEsHMwWRrBsr2u2G3s=
Subject key identifier:   5C:8E:B4:71:CB:0D:AB:CB:B4:C7:B2:8B:5B:C7:12:89:81:E9:68:EC
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0851
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/XI60ccsNq8u0x7KLW8cSiYHpaOw.roa
Signing time:             Tue 31 Mar 2026 07:43:17 +0000
ROA not before:           Tue 31 Mar 2026 07:43:17 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        106.172.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2129 (0x851)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:43:17 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=5C8EB471CB0DABCBB4C7B28B5BC7128981E968EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b0:3a:b6:6b:8e:72:e5:85:b0:64:55:cd:4d:
                    48:80:1f:37:48:26:ee:89:25:06:80:4e:2d:28:e3:
                    30:cf:3c:8d:30:60:8d:65:19:9e:c8:af:99:76:68:
                    84:9e:6a:9e:94:4e:5d:3c:28:81:14:9b:dc:11:bd:
                    ed:bb:32:bc:74:58:5d:b7:70:92:dc:93:42:19:93:
                    94:78:6c:59:cd:9a:d2:52:59:d7:5c:cd:96:2d:57:
                    7d:8d:65:d3:f1:36:d0:5c:80:5a:05:7e:29:31:7f:
                    92:b5:e2:85:db:ff:c2:fe:f7:2a:6d:2a:54:8f:8c:
                    08:e7:46:71:7f:3f:e5:bb:b6:81:7d:a8:4c:5b:99:
                    58:73:98:47:b9:5f:73:74:56:cc:60:1b:04:09:ed:
                    05:ba:21:48:a6:61:2c:a0:ac:6f:36:12:2c:4a:23:
                    7d:a2:d9:df:64:44:a0:44:91:c9:4d:2a:e9:ef:66:
                    6a:60:e1:31:f4:de:ee:0d:5e:c2:1f:00:ab:7e:85:
                    3d:ce:95:47:ae:4b:6c:bd:58:31:a2:de:95:86:d9:
                    50:11:4e:fc:49:7a:ae:b6:1c:c3:ea:a2:0f:f6:ac:
                    bc:59:c5:77:b3:e9:48:2e:3a:c6:33:ff:6d:7f:19:
                    dd:c6:28:27:6b:09:db:48:4f:2f:44:f5:54:e2:06:
                    fc:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:8E:B4:71:CB:0D:AB:CB:B4:C7:B2:8B:5B:C7:12:89:81:E9:68:EC
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/XI60ccsNq8u0x7KLW8cSiYHpaOw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.172.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         08:cc:fd:ef:2e:9d:04:84:de:30:4f:d0:3e:b1:7d:70:3b:bc:
         25:12:5c:8b:52:39:d7:92:46:f5:de:37:79:55:0b:f9:c8:1d:
         85:f7:4b:af:66:ad:0b:bb:a0:57:67:f7:ad:54:41:2a:36:f9:
         9e:c7:e1:2d:37:2a:00:dd:50:b8:e7:21:ad:52:8e:c2:1e:5e:
         f5:34:1b:42:81:51:9f:7b:a3:10:3a:8a:97:d0:f4:e5:31:d7:
         56:d7:78:35:15:9d:de:ae:36:db:ce:f1:07:ca:0e:da:02:d0:
         ce:fd:53:b7:b0:3d:5f:32:48:f6:29:c7:6b:2b:3a:fb:b1:87:
         82:f9:7b:da:d8:ba:05:8f:a1:31:ce:cf:94:3b:a9:d0:02:dc:
         e9:64:bb:48:3d:c9:b6:ea:47:85:7b:d4:7b:d2:d9:c2:73:36:
         30:08:2e:27:ea:91:c4:b7:50:bc:21:6f:5d:f5:e6:33:dc:4d:
         a9:e3:78:36:1f:4e:87:15:66:5b:ad:9d:44:01:cd:cd:56:69:
         07:77:0b:41:4b:c4:79:1c:72:42:9d:8f:ef:bf:ae:af:eb:94:
         78:49:82:0b:a0:ed:a0:0b:88:0d:bf:9a:de:9c:74:d7:3f:4e:
         d4:fa:91:6c:79:34:57:d0:49:9a:3c:eb:b6:1f:77:b5:77:16:
         5e:2d:7b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:23:26 2026 by rpki-client