Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/Zddr4My4AOqOc3wfpSau8UeRQzA.roa
File:                     Zddr4My4AOqOc3wfpSau8UeRQzA.roa (raw, json)
Hash identifier:          pYvUvAT8oUeNF8jJCJCMqzqmbtiNoRRvuAl2dEd7d2I=
Subject key identifier:   65:D7:6B:E0:CC:B8:00:EA:8E:73:7C:1F:A5:26:AE:F1:47:91:43:30
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       087B
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Zddr4My4AOqOc3wfpSau8UeRQzA.roa
Signing time:             Tue 31 Mar 2026 07:43:37 +0000
ROA not before:           Tue 31 Mar 2026 07:43:37 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        210.250.10.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2171 (0x87b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:43:37 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=65D76BE0CCB800EA8E737C1FA526AEF147914330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ce:d9:5a:0e:35:56:e7:06:57:82:e7:73:c3:
                    ee:a1:73:db:3c:c4:c1:ba:c3:aa:81:d5:f6:c8:2f:
                    32:83:d4:42:f1:82:a9:8d:bc:68:ce:46:a4:08:59:
                    0e:83:79:33:49:7a:82:de:74:34:33:ca:11:7e:f6:
                    4c:e1:f5:24:66:61:da:a9:e1:f2:ca:38:57:cb:4c:
                    d5:fe:5f:47:94:99:37:19:52:fa:d1:57:bc:bb:c4:
                    e8:e3:2d:a9:d1:d8:a4:22:ef:cc:4d:32:f2:a2:40:
                    55:6e:ce:fd:59:13:42:a4:97:15:2a:51:57:a4:dc:
                    65:c1:9a:d1:01:59:0d:b6:73:55:e3:d0:3f:7f:f2:
                    15:6c:ab:0a:f0:04:6e:60:c2:38:f7:26:75:b1:01:
                    1b:5e:13:3d:29:f2:20:5c:9b:26:ff:ee:92:c3:1d:
                    36:5f:72:ce:d6:d4:02:2c:7c:62:a8:94:0c:4d:70:
                    2e:4f:45:ea:dc:d7:9f:2a:f4:02:c1:5f:22:85:9c:
                    e3:94:ec:37:7c:5d:71:b5:d7:d1:d6:47:80:2e:eb:
                    1e:e5:3e:c1:74:69:45:95:41:c9:58:6a:68:ea:15:
                    4b:3b:98:9f:d4:0a:6c:e6:28:46:a8:f9:b9:bf:e4:
                    25:68:38:9a:41:49:f8:a4:b4:ef:c4:79:7b:90:ff:
                    51:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:D7:6B:E0:CC:B8:00:EA:8E:73:7C:1F:A5:26:AE:F1:47:91:43:30
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Zddr4My4AOqOc3wfpSau8UeRQzA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.250.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:7f:ce:4d:cf:3d:db:a3:1a:8c:2d:33:39:87:0f:8b:77:b3:
         ad:c7:f3:1e:fa:dd:92:4b:4d:50:08:c6:42:b2:5a:51:4d:16:
         1f:17:8c:19:42:93:c4:76:b4:0b:a6:2e:6b:fc:a5:79:9d:57:
         ab:23:c7:2d:3c:fc:ff:65:4f:d0:1e:cb:db:c2:a8:c7:ff:88:
         a0:e1:86:78:b6:26:49:c9:dd:aa:02:1c:98:c5:18:1b:95:6d:
         9a:eb:ee:43:d4:cb:5b:60:63:6f:f5:35:b1:01:da:0f:38:29:
         b8:56:ca:87:d0:fc:3b:75:85:78:5e:f9:d3:25:ca:a5:9e:c4:
         2d:2d:5b:ea:ec:6d:39:30:95:67:29:8f:f5:42:81:71:2e:26:
         76:ca:7a:2d:ec:a0:1e:ae:fb:c8:3c:d9:43:e0:af:be:36:86:
         66:96:e7:d6:4a:9d:16:96:a1:2c:e0:3b:13:54:93:c6:6e:a5:
         23:cb:44:38:d1:68:01:13:92:d4:fc:e2:ce:07:46:35:3c:52:
         08:5b:f9:0f:64:41:ba:ab:71:ac:5a:66:02:15:55:69:1a:62:
         fd:2c:53:7f:60:66:25:27:43:fb:5f:21:45:23:ff:fb:4a:9d:
         ed:33:eb:d8:f8:c0:6b:bb:fc:64:8c:e9:32:16:f2:61:8f:0d:
         17:70:70:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:36 2026 by rpki-client