Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/ab7rjssvWOY_dRPmBUsRlt6Z-Co.roa
File:                     ab7rjssvWOY_dRPmBUsRlt6Z-Co.roa (raw, json)
Hash identifier:          mypynUqkz14nWZGjiieVVYzF0ZyJ7I0UKxC8D3Jxfkw=
Subject key identifier:   69:BE:EB:8E:CB:2F:58:E6:3F:75:13:E6:05:4B:11:96:DE:99:F8:2A
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       08A4
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ab7rjssvWOY_dRPmBUsRlt6Z-Co.roa
Signing time:             Tue 31 Mar 2026 07:43:57 +0000
ROA not before:           Tue 31 Mar 2026 07:43:57 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        210.188.182.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2212 (0x8a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:43:57 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=69BEEB8ECB2F58E63F7513E6054B1196DE99F82A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5b:82:33:6f:be:b1:49:68:fd:9f:76:0d:42:
                    38:c0:0d:18:cd:8b:5a:f6:9b:b7:9d:b8:8a:28:eb:
                    4a:1f:56:89:45:38:6d:6f:78:1b:22:4c:67:d6:1b:
                    24:5a:a9:e5:81:9f:b4:39:11:e8:a9:4f:ec:8d:43:
                    00:5d:16:ca:68:3a:e2:b8:39:7e:85:36:16:94:e0:
                    0c:44:3b:6b:86:41:a1:ea:91:a1:aa:94:5b:15:cd:
                    16:cc:74:ba:3c:7f:65:23:d0:68:77:2f:f6:8b:7a:
                    dc:c3:92:60:71:68:78:fa:8a:de:d6:0c:a7:5b:bf:
                    39:e7:d3:d9:85:1f:2c:30:29:47:11:07:5a:50:51:
                    98:78:20:b7:46:96:e3:57:ff:5e:a8:c0:28:9b:3e:
                    5c:02:32:43:6e:74:59:ba:ab:ba:a2:3d:aa:3c:4e:
                    d2:5d:5e:a1:66:75:be:77:3a:18:72:50:a0:61:2b:
                    19:fd:20:bc:a2:2c:94:a3:f7:ba:58:50:56:83:15:
                    cf:08:5d:66:a5:94:31:f3:ed:4d:fa:07:99:82:41:
                    5a:8c:0c:53:89:26:fa:10:56:20:df:0f:0f:a8:c0:
                    ee:f4:20:3e:8f:1e:31:93:e4:8c:db:a0:13:be:33:
                    86:39:95:00:0c:34:50:59:e1:c5:5b:2f:79:fa:20:
                    cf:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:BE:EB:8E:CB:2F:58:E6:3F:75:13:E6:05:4B:11:96:DE:99:F8:2A
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ab7rjssvWOY_dRPmBUsRlt6Z-Co.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.188.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:ff:0e:55:5a:b2:b5:58:19:9f:6b:5b:5e:38:33:66:ec:45:
         fe:4b:ae:6c:e0:4d:12:70:94:3d:16:30:af:00:e2:45:a4:b3:
         e5:4e:2f:4f:1a:27:40:79:f8:4f:b7:8f:31:01:47:10:33:d3:
         a6:02:ce:48:a8:31:60:72:ef:61:74:1b:cc:9e:4f:88:c6:71:
         2f:14:fd:e5:1b:6b:18:c1:71:02:e1:57:4d:f4:92:f9:29:e9:
         a7:04:d0:69:2d:8c:04:2c:82:d9:95:10:2b:cf:9b:24:14:73:
         13:33:60:ae:2b:d4:99:08:2c:03:17:f2:fe:1c:02:06:32:a0:
         47:1c:b9:db:c5:73:d6:43:a5:66:26:d0:9b:44:b9:0e:9b:c9:
         2e:23:0a:42:2a:02:0e:ae:f6:bd:47:d6:a2:98:b3:3b:df:23:
         31:ab:d2:37:44:12:aa:bc:33:24:2b:3d:89:0e:30:94:c7:02:
         3a:50:6b:7e:82:7f:f7:9f:32:fc:af:8a:67:0d:81:90:91:49:
         65:7d:11:d7:42:a7:13:de:4f:be:fe:e0:91:de:1a:c4:88:e8:
         71:da:73:79:77:88:c3:ae:f3:da:e9:72:9e:5c:81:d0:43:a3:
         39:7e:27:88:ed:42:2e:53:b4:e6:ec:1f:ff:8e:36:e4:aa:65:
         bb:d8:fc:c5
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICCKQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw
NzQzNTdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDY5QkVFQjhFQ0IyRjU4
RTYzRjc1MTNFNjA1NEIxMTk2REU5OUY4MkEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCpW4Izb76xSWj9n3YNQjjADRjNi1r2m7eduIoo60ofVolFOG1v
eBsiTGfWGyRaqeWBn7Q5EeipT+yNQwBdFspoOuK4OX6FNhaU4AxEO2uGQaHqkaGq
lFsVzRbMdLo8f2Uj0Gh3L/aLetzDkmBxaHj6it7WDKdbvznn09mFHywwKUcRB1pQ
UZh4ILdGluNX/16owCibPlwCMkNudFm6q7qiPao8TtJdXqFmdb53OhhyUKBhKxn9
ILyiLJSj97pYUFaDFc8IXWallDHz7U36B5mCQVqMDFOJJvoQViDfDw+owO70ID6P
HjGT5IzboBO+M4Y5lQAMNFBZ4cVbL3n6IM/nAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUab7rjssvWOY/dRPmBUsRlt6Z+CowHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTYxL2FiN3Jqc3N2V09ZX2RSUG1CVXNSbHQ2Wi1Dby5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHSvLYwDQYJKoZIhvcNAQELBQADggEB
AJX/DlVasrVYGZ9rW144M2bsRf5LrmzgTRJwlD0WMK8A4kWks+VOL08aJ0B5+E+3
jzEBRxAz06YCzkioMWBy72F0G8yeT4jGcS8U/eUbaxjBcQLhV030kvkp6acE0Gkt
jAQsgtmVECvPmyQUcxMzYK4r1JkILAMX8v4cAgYyoEccudvFc9ZDpWYm0JtEuQ6b
yS4jCkIqAg6u9r1H1qKYszvfIzGr0jdEEqq8MyQrPYkOMJTHAjpQa36Cf/efMvyv
imcNgZCRSWV9EddCpxPeT77+4JHeGsSI6HHac3l3iMOu89rpcp5cgdBDozl+J4jt
Qi5TtObsH/+ONuSqZbvY/MU=
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:13:20 2026 by rpki-client