Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/bPkn-aKnvVbTr3u0jFBAGwbyfgs.roa
File:                     bPkn-aKnvVbTr3u0jFBAGwbyfgs.roa (raw, json)
Hash identifier:          TJwzG9S3ajzbENHuvC0F6gf45xZyhoT5c+z6AZDi7N4=
Subject key identifier:   6C:F9:27:F9:A2:A7:BD:56:D3:AF:7B:B4:8C:50:40:1B:06:F2:7E:0B
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       08CC
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/bPkn-aKnvVbTr3u0jFBAGwbyfgs.roa
Signing time:             Tue 31 Mar 2026 07:44:16 +0000
ROA not before:           Tue 31 Mar 2026 07:44:16 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        210.168.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2252 (0x8cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:44:16 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=6CF927F9A2A7BD56D3AF7BB48C50401B06F27E0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:67:51:50:88:4c:17:9b:9a:84:2a:b9:26:93:
                    31:1c:37:6c:77:9f:37:b0:2d:a6:cd:15:26:b9:8a:
                    4f:88:6d:ba:dc:95:2b:95:c1:b5:39:af:11:39:88:
                    d8:f5:4d:cc:5b:b0:05:c4:02:11:01:5c:ea:78:8c:
                    da:7b:c0:e7:02:68:db:6c:ad:89:92:42:71:88:ea:
                    19:17:bc:0a:6a:e6:07:89:f3:bd:ef:36:f2:41:e8:
                    2f:a4:f9:96:08:eb:b1:e3:50:58:65:22:3c:9d:06:
                    fe:58:b8:4f:e2:f6:e3:51:10:d2:ed:f3:06:af:12:
                    2d:36:7f:54:7c:8f:71:b9:53:bb:4f:3b:f4:37:07:
                    ba:14:69:27:2a:f0:70:c9:4a:69:81:7e:39:ee:66:
                    35:c9:c3:34:61:e0:0c:f4:87:93:73:fe:4d:e4:06:
                    e5:47:55:c6:0f:e5:f4:4e:c7:76:9f:01:b9:64:67:
                    91:a3:b4:56:6b:24:50:6a:95:26:bb:54:fa:d7:91:
                    be:e9:56:44:59:b8:da:20:e8:63:4b:0e:e5:3a:30:
                    d8:94:22:79:fe:42:bb:ca:a6:db:75:f1:fc:e7:02:
                    75:4f:13:03:e5:c2:4b:d3:f1:fb:0b:c1:ca:e4:4a:
                    72:4f:3d:a8:9e:1c:1f:97:31:05:39:a7:5a:42:cb:
                    01:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:F9:27:F9:A2:A7:BD:56:D3:AF:7B:B4:8C:50:40:1B:06:F2:7E:0B
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/bPkn-aKnvVbTr3u0jFBAGwbyfgs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.168.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         7c:6d:ba:f8:9d:0b:a6:a0:a7:c2:28:8a:ae:eb:f6:67:e3:9b:
         bc:38:55:47:54:2d:29:f9:1c:6c:cf:4e:05:44:11:82:b7:a4:
         eb:1e:2e:3b:45:3b:56:dc:29:bb:65:d0:b4:17:4a:2c:d3:f6:
         6d:46:c7:c7:f4:48:3f:9c:62:3b:56:fe:c9:63:df:bf:68:d5:
         9c:91:aa:3c:eb:b2:7e:d7:85:99:02:be:e5:0e:cc:9d:8c:be:
         e0:5e:ba:10:32:f3:f1:23:35:8e:a6:ef:20:97:1e:80:51:8d:
         60:13:ab:34:37:53:20:c4:a5:c5:b6:a2:62:b8:44:04:eb:a5:
         d4:f7:0d:33:4e:df:24:25:57:16:89:a9:e7:53:3e:7d:3f:1f:
         e4:6b:02:bc:96:ee:43:dd:06:06:db:f5:6e:de:92:a3:20:2e:
         9f:15:93:64:41:4c:67:74:26:b8:10:d3:b1:f5:8e:21:14:b7:
         cb:1e:9d:a1:e2:7a:80:44:25:2d:5c:b1:b7:db:f3:be:02:3f:
         1b:9b:69:f2:ea:51:cf:63:dc:f5:ea:e1:2b:79:e5:e5:cc:59:
         dd:db:58:ea:50:ee:65:b4:95:02:ea:30:4d:73:2c:49:2f:4b:
         e9:80:60:23:18:10:d9:83:6f:b1:e8:e1:8a:f5:90:4e:b8:c6:
         46:67:c0:63
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICCMwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw
NzQ0MTZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDZDRjkyN0Y5QTJBN0JE
NTZEM0FGN0JCNDhDNTA0MDFCMDZGMjdFMEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCcZ1FQiEwXm5qEKrkmkzEcN2x3nzewLabNFSa5ik+IbbrclSuV
wbU5rxE5iNj1TcxbsAXEAhEBXOp4jNp7wOcCaNtsrYmSQnGI6hkXvApq5geJ873v
NvJB6C+k+ZYI67HjUFhlIjydBv5YuE/i9uNRENLt8wavEi02f1R8j3G5U7tPO/Q3
B7oUaScq8HDJSmmBfjnuZjXJwzRh4Az0h5Nz/k3kBuVHVcYP5fROx3afAblkZ5Gj
tFZrJFBqlSa7VPrXkb7pVkRZuNog6GNLDuU6MNiUInn+QrvKptt18fznAnVPEwPl
wkvT8fsLwcrkSnJPPaieHB+XMQU5p1pCywHXAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUbPkn+aKnvVbTr3u0jFBAGwbyfgswHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTYxL2JQa24tYUtudlZiVHIzdTBqRkJBR3dieWZncy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAbSqIAwDQYJKoZIhvcNAQELBQADggEB
AHxtuvidC6agp8Ioiq7r9mfjm7w4VUdULSn5HGzPTgVEEYK3pOseLjtFO1bcKbtl
0LQXSizT9m1Gx8f0SD+cYjtW/slj379o1ZyRqjzrsn7XhZkCvuUOzJ2MvuBeuhAy
8/EjNY6m7yCXHoBRjWATqzQ3UyDEpcW2omK4RATrpdT3DTNO3yQlVxaJqedTPn0/
H+RrAryW7kPdBgbb9W7ekqMgLp8Vk2RBTGd0JrgQ07H1jiEUt8senaHieoBEJS1c
sbfb874CPxubafLqUc9j3PXq4St55eXMWd3bWOpQ7mW0lQLqME1zLEkvS+mAYCMY
ENmDb7Ho4Yr1kE64xkZnwGM=
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:13:37 2026 by rpki-client