Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/bnkKArO--QlUXKVlMw-DDnoJDiM.roa
File:                     bnkKArO--QlUXKVlMw-DDnoJDiM.roa (raw, json)
Hash identifier:          7cR+KACMwk/Csr/BQEeIHBO4PzGmarmxTtSl7tAA40g=
Subject key identifier:   6E:79:0A:02:B3:BE:F9:09:54:5C:A5:65:33:0F:83:0E:7A:09:0E:23
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       080F
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/bnkKArO--QlUXKVlMw-DDnoJDiM.roa
Signing time:             Tue 31 Mar 2026 07:42:42 +0000
ROA not before:           Tue 31 Mar 2026 07:42:42 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        210.230.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2063 (0x80f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:42:42 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=6E790A02B3BEF909545CA565330F830E7A090E23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d6:b3:ed:0b:1d:61:f9:4d:50:53:e1:b9:be:
                    9f:dc:ff:1b:6c:63:38:63:8f:57:01:d9:27:a8:84:
                    1c:d1:20:ce:5a:68:2f:ac:a2:c3:ec:3b:49:52:32:
                    aa:5c:12:cd:18:f8:23:82:d7:2f:ab:66:f1:44:1f:
                    55:a7:61:2f:85:2d:e8:6b:b5:4b:a3:a0:10:b6:9e:
                    51:57:1d:7f:16:00:7b:13:f5:e5:60:03:4b:4e:f9:
                    11:6f:43:be:5b:c1:a3:44:7f:12:2b:2e:3b:99:b7:
                    11:29:db:2c:f7:fb:ba:ef:4c:9d:e1:d3:5c:6b:a4:
                    4b:53:b7:5b:16:aa:4c:42:a2:61:48:e1:54:1a:2a:
                    74:50:1d:76:5f:80:04:d1:2f:bd:d7:34:d6:aa:51:
                    22:cc:79:f3:6c:8f:1a:17:3e:bc:39:18:4c:fe:43:
                    d7:13:ed:99:02:6f:ff:05:ac:8d:21:b4:b1:cb:c8:
                    94:1a:42:c0:09:fe:a8:08:ea:4e:e5:a7:35:57:66:
                    20:94:a4:2e:b7:f7:62:60:67:6d:95:4e:b7:e2:f4:
                    1f:00:a2:74:fa:52:5c:9a:7d:3d:0a:83:3e:76:b8:
                    f1:13:38:d6:1a:e8:c8:32:44:eb:20:1b:af:3a:bf:
                    57:aa:29:bd:b0:d7:92:11:b7:a0:dc:2c:69:76:b9:
                    92:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:79:0A:02:B3:BE:F9:09:54:5C:A5:65:33:0F:83:0E:7A:09:0E:23
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/bnkKArO--QlUXKVlMw-DDnoJDiM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.230.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         17:e6:e5:9c:74:f1:50:ef:85:78:98:6e:02:e8:eb:b7:54:41:
         4a:4f:bb:aa:7f:4e:5c:e6:0f:f6:a6:93:41:33:18:3d:95:5b:
         c0:36:83:e9:fc:34:38:cf:11:fd:98:f8:fb:bc:50:6e:85:2a:
         0e:7f:4f:7e:3f:69:11:8e:d0:08:26:99:b2:f8:00:4e:f1:36:
         1d:c5:b1:a4:11:36:59:5f:4b:9f:9f:46:3e:3a:a5:09:b4:c6:
         b5:25:16:1b:6e:f6:37:c4:df:10:92:00:48:06:53:e3:c3:c8:
         7a:3b:3b:9d:ad:be:0a:58:4b:d4:0a:6b:e2:0d:e0:e4:3e:d7:
         db:fc:d8:b5:d6:b4:1a:db:ec:fe:55:02:b7:c6:1a:9f:e1:d2:
         92:23:86:20:a2:00:da:ff:67:bf:e2:be:0c:38:50:c6:43:b1:
         be:66:92:d5:11:34:7e:67:56:67:12:3d:ff:f3:c9:83:38:e0:
         8a:02:77:04:7f:f2:e4:c6:20:03:7c:20:bc:f0:62:b4:d3:5d:
         2c:6a:0e:ac:b6:0f:fb:25:00:42:da:34:60:87:ac:58:41:39:
         e1:b9:af:07:40:6b:1c:52:ae:05:a6:e5:5c:c6:58:a8:4e:b2:
         e3:2f:d0:15:3b:1a:e5:43:4b:00:dc:ea:3d:20:35:34:20:20:
         55:0d:2c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:33:20 2026 by rpki-client