Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/ZRBI5nbWbiLZVtm6TbLtWgzeRiQ.roa
File:                     ZRBI5nbWbiLZVtm6TbLtWgzeRiQ.roa (raw, json)
Hash identifier:          del37nmnuYWia8niKNvqSBErsh2XvyT4Wx7tChRvpEI=
Subject key identifier:   65:10:48:E6:76:D6:6E:22:D9:56:D9:BA:4D:B2:ED:5A:0C:DE:46:24
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       08D0
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ZRBI5nbWbiLZVtm6TbLtWgzeRiQ.roa
Signing time:             Tue 31 Mar 2026 07:44:18 +0000
ROA not before:           Tue 31 Mar 2026 07:44:18 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        211.1.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2256 (0x8d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:44:18 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=651048E676D66E22D956D9BA4DB2ED5A0CDE4624
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:65:dc:52:0d:01:98:e5:af:87:85:69:4c:08:
                    52:c4:ed:b7:f3:87:5d:fd:b7:4a:fd:dd:a5:59:b7:
                    15:82:e0:03:66:2b:ca:3e:82:c5:44:a2:3c:cc:a3:
                    1e:57:0e:6e:f1:36:c1:ec:78:29:a5:cf:75:8d:ee:
                    e4:57:8b:de:45:d8:ed:5a:bc:af:ab:65:c2:d0:8e:
                    93:ee:12:fb:8a:37:74:41:a7:9b:c9:f1:5b:f9:1c:
                    a5:fc:3a:10:23:03:e9:d5:e1:58:ed:00:c8:cb:dc:
                    de:ca:c6:f6:11:76:c1:73:74:9a:c8:8f:c4:87:4f:
                    ed:27:d8:4c:8c:be:d9:8b:6f:89:ec:6f:c7:57:2c:
                    a4:1c:21:46:a7:11:d8:90:a6:71:79:03:1e:1f:9f:
                    c2:13:ab:46:83:bb:19:1f:48:81:72:4e:90:d6:5d:
                    64:d4:2f:0b:56:85:c4:81:0d:af:7a:f5:40:65:2f:
                    fd:7c:1e:c8:01:86:ea:15:8c:0a:fd:4f:a1:a9:17:
                    fd:10:d2:cb:18:c5:78:18:03:bf:a5:d5:74:9a:63:
                    6e:37:3a:62:19:65:7f:94:fa:4d:cc:b2:36:fa:57:
                    a2:87:10:54:08:42:67:ea:01:92:e8:24:d0:03:93:
                    f2:b0:b2:e3:be:63:66:96:35:1a:14:01:a9:3b:c8:
                    ed:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:10:48:E6:76:D6:6E:22:D9:56:D9:BA:4D:B2:ED:5A:0C:DE:46:24
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ZRBI5nbWbiLZVtm6TbLtWgzeRiQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.1.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:64:62:ee:7a:d2:c7:ef:dc:5d:fa:bf:98:4e:e7:20:87:7e:
         b7:71:93:4f:63:7a:a5:f5:fb:32:79:90:48:8f:70:8e:4b:d5:
         30:a1:fd:5c:ae:f5:06:47:b6:2e:92:a2:2f:2d:cd:c5:1a:a1:
         31:66:8b:ef:72:50:bf:e5:1f:42:76:3b:20:cb:f8:cc:a9:07:
         03:73:5e:9b:0b:85:c1:bd:bc:7b:ae:8a:1d:28:65:b8:ca:9b:
         ab:42:13:ae:12:d2:65:db:72:88:03:9a:1a:2b:bc:2c:bc:00:
         35:cf:7e:3b:e6:72:c6:a8:44:e9:1c:c3:af:e8:64:05:9e:36:
         c1:58:c0:82:14:68:58:de:b5:d5:e1:3a:28:95:89:80:26:ab:
         c7:cc:eb:1d:65:f6:e8:af:cb:d1:3a:8a:1d:e5:60:14:55:4d:
         5d:c0:87:4f:9d:e8:9c:c8:65:3b:d5:8e:3f:ff:13:a1:df:ba:
         7b:71:9f:d3:38:ac:ea:4c:c1:be:25:87:08:25:95:a4:c2:f2:
         c2:9d:07:51:eb:95:f5:29:45:e0:01:bf:00:d3:be:77:38:9e:
         0f:36:76:b9:58:28:61:7c:ec:4a:c3:5d:e4:24:d8:bb:27:2c:
         4f:67:f8:b2:0d:ac:f8:8e:3a:ce:cf:8d:1f:1e:32:39:2f:84:
         a9:b4:19:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:03:44 2026 by rpki-client