Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/YIzkvY-jrf1prb9WWukK0739cvo.roa
File:                     YIzkvY-jrf1prb9WWukK0739cvo.roa (raw, json)
Hash identifier:          IENx3qkD/FrJ2+tpHWeamGsGS+xeZXNUo4vsbhjs7yU=
Subject key identifier:   60:8C:E4:BD:8F:A3:AD:FD:69:AD:BF:56:5A:E9:0A:D3:BD:FD:72:FA
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       087E
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/YIzkvY-jrf1prb9WWukK0739cvo.roa
Signing time:             Tue 31 Mar 2026 07:43:39 +0000
ROA not before:           Tue 31 Mar 2026 07:43:39 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        124.109.182.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2174 (0x87e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:43:39 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=608CE4BD8FA3ADFD69ADBF565AE90AD3BDFD72FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3f:37:22:ca:b3:30:3b:8f:4d:6a:14:d7:bb:
                    2b:8d:e2:f2:3b:16:6b:6c:25:ac:2d:ed:ee:70:fe:
                    43:91:79:58:e0:be:32:38:6c:77:e4:8f:e7:53:e6:
                    84:b0:1a:b6:9c:bc:e8:94:d6:bb:8a:34:d5:1b:bb:
                    73:1f:53:84:f0:79:40:df:e8:bd:4f:95:01:37:b5:
                    f6:82:db:01:10:a5:07:d7:d7:aa:d5:e0:5c:d7:ae:
                    9f:77:29:13:c6:09:19:7d:1e:d1:6d:0b:53:65:e1:
                    53:67:26:f0:3d:1e:fb:a5:33:31:df:10:09:4c:40:
                    df:31:78:fc:94:a2:ca:1d:b3:1e:f9:8d:48:f5:43:
                    83:e8:8f:84:22:d0:a9:6c:52:2a:45:ef:1d:a7:55:
                    9b:ba:62:c8:65:3b:3f:2d:92:e1:0f:37:f3:14:56:
                    c2:a4:fc:53:71:c9:e1:ef:7e:b2:73:1e:f5:51:64:
                    89:ca:72:8a:24:87:e9:04:c1:84:7f:1d:9c:d1:99:
                    dc:88:f3:86:94:0a:62:0c:ce:5a:f2:19:5d:c1:fa:
                    9e:7e:23:92:c2:0f:15:54:86:7a:ae:af:47:a8:2a:
                    89:ba:67:98:3b:9a:98:f2:b5:a9:12:18:48:52:94:
                    dc:44:c7:b9:aa:90:50:c5:bd:ff:cf:8b:a3:86:92:
                    91:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:8C:E4:BD:8F:A3:AD:FD:69:AD:BF:56:5A:E9:0A:D3:BD:FD:72:FA
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/YIzkvY-jrf1prb9WWukK0739cvo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.109.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:6a:10:3b:21:37:e5:47:0d:35:03:0b:00:8f:91:36:8f:f6:
         1a:74:d6:a0:de:0f:95:06:4b:50:81:71:0a:94:37:45:79:60:
         0a:cd:0e:d6:ce:94:71:f4:75:ef:f5:f1:b3:61:25:2e:1e:19:
         fe:bf:e6:a6:8e:10:41:2b:6b:fe:cf:c4:bc:e7:3d:a8:b7:26:
         91:72:1d:63:0b:46:ab:48:eb:3a:fb:a3:9a:6f:1f:29:71:c2:
         77:02:b3:71:f9:31:78:89:11:bd:1e:8e:e1:d0:6c:d1:15:58:
         9f:c9:e5:57:fd:66:82:d1:dc:1f:01:3c:2f:cc:71:6a:72:19:
         08:a2:98:d2:31:01:af:82:bc:83:0d:63:d8:5d:6b:dc:9f:4e:
         58:0d:aa:6a:01:53:92:41:67:a2:fa:27:54:18:51:34:9a:7b:
         92:d4:9d:76:a1:02:1d:48:6e:ed:dd:2a:0e:87:b4:d4:5b:7b:
         73:bb:bc:ee:7c:6e:63:45:7f:f5:3a:6c:b2:4d:e2:b3:1e:55:
         ff:02:69:52:da:1f:52:29:78:8b:8c:85:2f:7e:88:ce:78:b8:
         65:f1:24:32:26:ea:75:90:e3:a2:c1:57:79:89:3c:67:d7:0c:
         51:ae:2f:1b:7e:55:5f:81:f5:f0:f1:de:ea:d0:b6:1a:a2:ba:
         e1:03:41:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:48:26 2026 by rpki-client