Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/YwyC0YeupNkSy0qQeaCOKPhqmaI.roa
File:                     YwyC0YeupNkSy0qQeaCOKPhqmaI.roa (raw, json)
Hash identifier:          i3dpjNkgmKUYDxgf/yrOOin4Y/z+WzM3Bu5nBzgZyr0=
Subject key identifier:   63:0C:82:D1:87:AE:A4:D9:12:CB:4A:90:79:A0:8E:28:F8:6A:99:A2
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       08EC
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/YwyC0YeupNkSy0qQeaCOKPhqmaI.roa
Signing time:             Tue 31 Mar 2026 07:44:30 +0000
ROA not before:           Tue 31 Mar 2026 07:44:30 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        124.109.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2284 (0x8ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:44:30 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=630C82D187AEA4D912CB4A9079A08E28F86A99A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2a:6d:bd:ce:41:85:94:ce:fe:82:c0:28:59:
                    ef:2c:50:cf:05:26:c5:ce:e0:b4:8b:81:11:ab:32:
                    52:55:89:d3:bd:7d:ae:1c:2e:4d:85:f4:73:49:bd:
                    d0:b5:d0:42:0b:ff:93:95:b5:a4:07:41:e0:2d:d4:
                    23:ff:de:5d:0c:b9:c6:e9:94:9f:07:d2:28:93:f1:
                    9f:ea:c4:31:4e:49:9d:6b:36:ab:25:0a:0a:87:98:
                    3c:ef:0e:6f:cb:f3:c1:7d:c4:c8:7c:ef:1e:13:91:
                    7d:39:ab:35:57:0a:63:f7:52:91:bc:4a:bf:4a:bd:
                    13:d2:ef:5c:01:3f:cf:99:bd:a4:ec:7e:8f:3d:f1:
                    5e:25:0b:0d:6c:1d:ba:23:62:34:87:d7:95:2c:d8:
                    a6:68:78:03:90:31:d5:97:91:fe:62:3e:63:ed:19:
                    ab:3b:93:4b:27:b9:cb:42:25:5e:2b:bb:8e:3f:65:
                    79:9c:00:c4:e9:79:4c:61:62:98:0c:91:96:44:bf:
                    47:a6:f1:4f:45:9c:60:b5:2b:3f:a6:e8:92:21:57:
                    8e:c0:b3:09:17:b0:cf:bd:f9:26:dd:c6:8a:2f:b6:
                    85:3d:b8:70:b1:d5:49:00:de:cb:e5:52:1a:9e:30:
                    30:09:68:5f:b3:19:41:79:d0:86:72:5f:5e:33:97:
                    41:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:0C:82:D1:87:AE:A4:D9:12:CB:4A:90:79:A0:8E:28:F8:6A:99:A2
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/YwyC0YeupNkSy0qQeaCOKPhqmaI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.109.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:76:72:59:e7:af:09:fc:3a:92:ce:f9:c5:7f:75:e9:06:22:
         2d:27:aa:83:19:85:81:93:9a:3c:ac:c3:60:d4:a8:2d:ac:50:
         02:3f:83:c8:15:2c:fe:b1:14:b9:94:04:5e:e8:26:60:dd:4a:
         b8:03:ca:7e:7e:be:cd:7e:80:13:48:52:d5:54:e5:af:fa:2d:
         6b:13:31:35:3c:7b:9f:0f:bf:6d:ec:77:0c:24:dd:a0:3d:c4:
         70:c4:fa:0c:d7:d6:48:36:02:eb:df:f6:76:6b:ab:c3:0c:23:
         3e:dc:e2:8e:ac:12:d6:7c:39:34:cf:cf:b2:ab:f3:9b:94:2e:
         d0:b2:1a:5b:3b:bd:de:91:48:d2:1b:cc:60:9b:9c:61:91:9f:
         d4:bd:46:f2:23:39:b5:52:68:77:a9:0f:02:25:e5:4f:4d:86:
         ba:f9:2e:21:38:f8:72:14:90:f4:f7:79:cc:09:d5:69:eb:32:
         f5:a4:35:1b:cc:33:1f:ff:46:39:d0:30:63:03:92:b4:f9:b5:
         a5:df:98:29:ca:db:18:53:b7:28:63:13:5a:68:ec:01:de:54:
         de:69:7b:68:3b:a5:f2:7b:76:c8:11:5e:63:77:0b:15:df:66:
         a5:95:72:02:fd:0e:72:1f:9e:80:2e:02:56:09:ff:60:0a:df:
         85:11:ec:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:10:50 2026 by rpki-client