Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/ZR3LR61e9G6Xa54I3mnfdJGEF0c.roa
File:                     ZR3LR61e9G6Xa54I3mnfdJGEF0c.roa (raw, json)
Hash identifier:          f9H8/Qk8M9APTkI8WnGQ6dmmeQOCTVOKXgz5moDqabU=
Subject key identifier:   65:1D:CB:47:AD:5E:F4:6E:97:6B:9E:08:DE:69:DF:74:91:84:17:47
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       08F6
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ZR3LR61e9G6Xa54I3mnfdJGEF0c.roa
Signing time:             Tue 31 Mar 2026 07:44:34 +0000
ROA not before:           Tue 31 Mar 2026 07:44:34 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        210.253.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2294 (0x8f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:44:34 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=651DCB47AD5EF46E976B9E08DE69DF7491841747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ad:fc:b4:69:7b:94:16:86:b3:47:5e:95:c2:
                    a5:28:af:81:05:5e:ad:9c:38:8f:f7:92:af:a6:db:
                    82:c1:03:a2:69:cb:0c:d1:1b:2b:08:ec:08:95:97:
                    65:89:e5:00:1c:4a:9e:da:32:01:a8:51:fc:f6:8f:
                    a3:38:72:b3:44:99:b3:9b:30:9e:f0:44:b2:f1:86:
                    37:da:15:d0:1f:76:83:4b:45:79:91:f4:88:b5:0d:
                    e4:be:c3:14:24:0a:9d:01:da:79:97:5d:29:ab:76:
                    cf:44:6f:80:53:14:b0:99:5e:05:97:12:d5:04:17:
                    e2:98:31:4f:67:60:28:b3:5a:0a:aa:d5:86:2e:62:
                    98:53:31:a2:25:a7:4a:a8:66:f6:dc:34:23:30:2e:
                    a2:f6:5e:12:fa:68:35:e9:5c:b4:4f:90:bf:16:60:
                    81:59:03:f0:9e:2b:ae:2d:5c:48:cc:3f:38:ab:bb:
                    e8:eb:04:7d:d8:0c:e3:09:0a:c3:27:26:f3:f6:b3:
                    95:22:7d:b7:b4:4b:d8:0a:1a:9e:e7:93:a0:ae:65:
                    be:7e:88:44:a5:61:d7:21:80:aa:fb:ad:ef:89:4d:
                    9c:6c:ae:58:6f:27:50:ea:23:43:6a:92:85:bc:56:
                    de:bb:2b:74:85:c1:1d:11:1a:84:4c:f2:2e:20:79:
                    74:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:1D:CB:47:AD:5E:F4:6E:97:6B:9E:08:DE:69:DF:74:91:84:17:47
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ZR3LR61e9G6Xa54I3mnfdJGEF0c.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.253.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:fa:a5:d1:e6:2d:a8:28:7b:ce:6f:e5:d0:95:a3:d1:2c:0b:
         5b:45:e5:dd:0e:4a:82:10:56:63:6c:ea:30:2a:9d:c4:86:52:
         03:dc:79:d8:1d:6f:70:94:aa:a8:af:41:89:a0:d9:bf:74:90:
         85:0c:e9:ce:bf:61:dd:76:9a:a9:10:56:3d:0c:93:be:8d:21:
         ec:5e:03:ba:81:18:ec:2e:f2:bd:12:ba:77:5a:52:22:f8:4b:
         e6:c6:49:4b:e0:b0:fc:a3:17:84:8a:38:a7:43:7f:d2:91:9a:
         56:61:13:e9:3c:7e:a6:32:63:de:47:3c:52:5c:97:a9:c7:e1:
         ad:7b:0d:b5:e0:ae:bc:e1:08:c6:d5:f3:4c:84:dd:28:17:f7:
         98:51:88:69:7f:87:32:05:d3:b4:b7:a4:a9:a2:3d:d0:a3:88:
         86:38:eb:cc:17:f6:61:dd:a5:4b:19:09:01:5c:de:41:2c:49:
         56:7f:38:40:e2:93:b9:21:1e:96:70:f3:c7:ca:0e:d1:10:a9:
         c8:7c:47:d7:7b:02:7b:99:da:80:22:49:c9:be:a9:0f:d5:fb:
         bd:c1:57:48:82:bf:2e:34:d7:21:e0:b6:9c:8c:91:25:f2:1e:
         e3:cf:b3:cb:ed:6f:84:31:4a:3b:e5:9e:d1:ad:2f:f3:bc:a3:
         71:3d:1a:0c
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICCPYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw
NzQ0MzRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDY1MURDQjQ3QUQ1RUY0
NkU5NzZCOUUwOERFNjlERjc0OTE4NDE3NDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCprfy0aXuUFoazR16VwqUor4EFXq2cOI/3kq+m24LBA6JpywzR
GysI7AiVl2WJ5QAcSp7aMgGoUfz2j6M4crNEmbObMJ7wRLLxhjfaFdAfdoNLRXmR
9Ii1DeS+wxQkCp0B2nmXXSmrds9Eb4BTFLCZXgWXEtUEF+KYMU9nYCizWgqq1YYu
YphTMaIlp0qoZvbcNCMwLqL2XhL6aDXpXLRPkL8WYIFZA/CeK64tXEjMPziru+jr
BH3YDOMJCsMnJvP2s5Uifbe0S9gKGp7nk6CuZb5+iESlYdchgKr7re+JTZxsrlhv
J1DqI0NqkoW8Vt67K3SFwR0RGoRM8i4geXR7AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUZR3LR61e9G6Xa54I3mnfdJGEF0cwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTYxL1pSM0xSNjFlOUc2WGE1NEkzbW5mZEpHRUYwYy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADS/bYwDQYJKoZIhvcNAQELBQADggEB
AJ/6pdHmLagoe85v5dCVo9EsC1tF5d0OSoIQVmNs6jAqncSGUgPcedgdb3CUqqiv
QYmg2b90kIUM6c6/Yd12mqkQVj0Mk76NIexeA7qBGOwu8r0SundaUiL4S+bGSUvg
sPyjF4SKOKdDf9KRmlZhE+k8fqYyY95HPFJcl6nH4a17DbXgrrzhCMbV80yE3SgX
95hRiGl/hzIF07S3pKmiPdCjiIY468wX9mHdpUsZCQFc3kEsSVZ/OEDik7khHpZw
88fKDtEQqch8R9d7AnuZ2oAiScm+qQ/V+73BV0iCvy401yHgtpyMkSXyHuPPs8vt
b4QxSjvlntGtL/O8o3E9Ggw=
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:13:41 2026 by rpki-client