Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/XXALjPk9nVxREKTbU229Qq0ZX94.roa
File:                     XXALjPk9nVxREKTbU229Qq0ZX94.roa (raw, json)
Hash identifier:          LM2XGsQLCuLQ/AS6U0176xWgWrhxDGZ3G2ALMWmRWyY=
Subject key identifier:   5D:70:0B:8C:F9:3D:9D:5C:51:10:A4:DB:53:6D:BD:42:AD:19:5F:DE
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       08FE
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/XXALjPk9nVxREKTbU229Qq0ZX94.roa
Signing time:             Tue 31 Mar 2026 07:44:37 +0000
ROA not before:           Tue 31 Mar 2026 07:44:37 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        210.234.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2302 (0x8fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:44:37 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=5D700B8CF93D9D5C5110A4DB536DBD42AD195FDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:51:6b:17:81:69:29:b9:84:0b:70:45:49:b5:
                    c9:af:03:a3:83:83:1e:2d:f8:65:2b:de:96:d4:0b:
                    6f:2d:45:02:4e:c5:f6:ab:06:19:16:32:20:d7:e8:
                    5e:b4:17:0f:50:1e:82:40:a5:85:f9:8b:99:de:f4:
                    5b:7f:f7:13:0f:28:ef:91:95:59:7c:eb:b6:7e:17:
                    5d:3c:54:90:02:a1:14:89:e9:ce:1a:1d:fb:31:9d:
                    58:0b:55:bb:87:3b:f8:69:54:ed:79:09:5b:eb:1a:
                    9f:3d:e1:fd:c2:98:51:a7:06:74:06:38:39:6f:f4:
                    53:77:53:7d:39:f4:c1:9d:c5:bc:d4:f2:6f:ac:b2:
                    c1:e6:6f:ab:cb:a2:bb:71:27:5d:04:0e:a5:04:4d:
                    d4:1d:84:1b:8d:4b:03:77:d3:9d:76:54:2f:e7:95:
                    1f:f7:62:48:cf:f7:cf:5d:ff:f5:84:8f:bd:46:9a:
                    40:2f:2c:93:62:cd:86:4d:a7:f8:e4:e8:76:f6:07:
                    59:1f:05:12:60:c3:c0:b5:67:7d:02:89:0f:b9:ea:
                    c7:0d:f1:d3:8a:51:f0:11:9e:4b:8a:bd:0f:00:89:
                    7e:00:14:73:98:79:be:3f:e8:57:85:ca:46:b4:85:
                    71:d2:fe:42:49:dc:8e:f0:8f:94:70:57:b6:47:61:
                    66:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:70:0B:8C:F9:3D:9D:5C:51:10:A4:DB:53:6D:BD:42:AD:19:5F:DE
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/XXALjPk9nVxREKTbU229Qq0ZX94.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.234.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         05:64:52:86:f6:fb:7b:5e:0a:6b:00:7e:7f:61:cc:29:20:1f:
         ae:8e:0f:81:b2:46:e6:17:e3:f9:62:d7:ad:9c:4c:85:1b:87:
         d5:6c:15:17:40:74:03:91:e0:eb:40:02:0e:5e:3f:af:c0:c5:
         4d:a4:c4:0a:f8:72:a1:0c:9a:55:ef:19:ce:08:bb:42:6b:61:
         5d:bd:1a:ca:07:da:6a:7d:72:2f:b6:b0:ee:56:ee:24:e5:b7:
         56:b6:2b:f2:6f:a4:e7:73:0b:c2:a7:47:f0:78:6d:1c:6a:5b:
         90:7c:2e:18:2f:d8:9f:6b:0d:fe:53:c9:63:d3:94:9a:29:1b:
         a7:8d:30:dd:26:59:a9:80:7e:0a:45:d0:9a:71:36:fd:19:ab:
         04:fa:59:40:77:62:88:7c:cf:4c:4d:c0:c4:9a:dd:34:ea:3e:
         27:8a:32:90:d0:6b:9a:d9:55:22:1a:72:8a:df:5b:f3:2c:fb:
         19:ad:5c:42:eb:61:e7:20:9b:29:2b:67:00:c1:54:53:78:16:
         96:aa:4d:27:5a:30:f3:33:0b:b1:20:19:7a:0b:ec:26:cd:a1:
         1c:df:d7:5e:76:7a:41:38:92:d7:84:c0:60:59:65:f1:9a:91:
         15:46:0f:14:c6:37:26:dd:3b:8e:fa:e6:df:5e:c5:28:22:6d:
         68:f8:df:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:49:17 2026 by rpki-client