Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/cBu6w4rJcgYPAzfCMoPO8Yop43Q.roa
File:                     cBu6w4rJcgYPAzfCMoPO8Yop43Q.roa (raw, json)
Hash identifier:          oqHNtDejq9/436YFDRy5bVlg1H7IU+QxaESWCti1xfs=
Subject key identifier:   70:1B:BA:C3:8A:C9:72:06:0F:03:37:C2:32:83:CE:F1:8A:29:E3:74
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       08E9
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/cBu6w4rJcgYPAzfCMoPO8Yop43Q.roa
Signing time:             Tue 31 Mar 2026 07:44:28 +0000
ROA not before:           Tue 31 Mar 2026 07:44:28 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        211.10.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2281 (0x8e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:44:28 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=701BBAC38AC972060F0337C23283CEF18A29E374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:be:11:7f:98:3a:5f:7c:53:a5:b5:1a:89:c0:
                    4b:f6:bb:b9:0d:3e:9c:b0:c1:f1:43:09:a2:f2:9f:
                    f3:cf:96:59:52:c1:5e:8c:e5:38:76:b1:e9:98:e0:
                    53:38:c7:0e:4d:b7:44:a1:df:b2:2d:dc:07:b2:3b:
                    2d:6e:c3:87:3a:b7:18:a9:a5:73:44:a5:cc:94:62:
                    35:19:79:59:4f:4c:71:72:57:e2:84:7a:26:87:a2:
                    cf:49:23:1a:7b:71:d6:30:e1:27:ae:ee:46:ac:68:
                    d9:c9:08:5d:f4:50:bc:88:3f:22:84:1b:e4:ec:f7:
                    e5:90:7e:38:be:e6:6f:ca:0a:25:5f:17:a6:02:fb:
                    c5:b9:fc:4a:55:bb:f2:4a:4b:6a:3e:38:a7:30:53:
                    5b:6d:e7:b1:ff:87:23:aa:9d:20:3b:e7:ac:aa:26:
                    b1:85:56:e1:44:af:48:e4:84:0d:f1:5a:70:01:2d:
                    02:17:e7:9d:5b:ec:49:a1:4c:a3:66:1e:d2:b9:73:
                    3b:af:13:eb:52:d8:11:01:9c:f5:d8:69:67:13:ab:
                    b3:43:36:96:1b:e8:00:2e:e6:2c:ee:09:ee:ca:3e:
                    c1:4b:1d:8f:6c:82:13:51:68:16:b2:d4:2d:4c:cb:
                    79:64:f4:fa:83:5c:a4:08:93:98:57:88:30:9e:ab:
                    1b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:1B:BA:C3:8A:C9:72:06:0F:03:37:C2:32:83:CE:F1:8A:29:E3:74
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/cBu6w4rJcgYPAzfCMoPO8Yop43Q.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.10.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:d2:e1:51:ca:5f:01:e8:c3:de:bd:20:43:b1:92:89:38:ba:
         7f:53:3f:41:f6:c0:c1:74:7c:46:18:bc:ed:c7:c5:5f:2e:d7:
         53:c6:43:79:24:a9:33:4f:ed:13:24:49:1d:12:61:e0:60:e6:
         90:a0:d7:79:c5:a4:42:42:1b:38:f7:9f:2e:0e:64:a3:b7:dc:
         bc:59:a9:44:25:0f:86:76:b3:c8:fe:8a:81:c0:ad:fc:e7:ff:
         ed:6d:5f:43:5b:f0:87:7d:d6:28:85:60:c6:e6:99:d5:c4:68:
         e9:af:8b:8c:8c:14:a6:48:88:cf:f0:43:3f:58:7e:88:4b:45:
         88:73:88:24:86:6e:56:22:5a:74:18:b7:5c:5b:d8:38:82:72:
         e6:bd:4f:8a:87:c6:e9:02:f6:3b:eb:61:e7:9f:6b:ca:bd:09:
         55:5d:79:0e:75:40:1e:9f:aa:3c:61:a0:a0:9d:dd:6c:02:e0:
         6e:08:1c:7d:67:8f:73:76:b2:9b:dd:ff:36:ee:e0:54:09:85:
         96:3f:c8:1c:f9:31:98:9f:ad:f5:61:db:2c:4c:5e:4f:42:ce:
         b6:d9:85:6b:ad:2a:0e:00:f8:9c:9a:b7:1b:e9:51:d3:62:a8:
         88:93:eb:d5:b9:2c:3b:ea:84:77:91:94:f8:08:1c:6b:43:f3:
         e0:34:f6:df
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICCOkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw
NzQ0MjhaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDcwMUJCQUMzOEFDOTcy
MDYwRjAzMzdDMjMyODNDRUYxOEEyOUUzNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDCvhF/mDpffFOltRqJwEv2u7kNPpywwfFDCaLyn/PPlllSwV6M
5Th2semY4FM4xw5Nt0Sh37It3AeyOy1uw4c6txippXNEpcyUYjUZeVlPTHFyV+KE
eiaHos9JIxp7cdYw4Seu7kasaNnJCF30ULyIPyKEG+Ts9+WQfji+5m/KCiVfF6YC
+8W5/EpVu/JKS2o+OKcwU1tt57H/hyOqnSA756yqJrGFVuFEr0jkhA3xWnABLQIX
551b7EmhTKNmHtK5czuvE+tS2BEBnPXYaWcTq7NDNpYb6AAu5izuCe7KPsFLHY9s
ghNRaBay1C1My3lk9PqDXKQIk5hXiDCeqxtPAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUcBu6w4rJcgYPAzfCMoPO8Yop43QwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTYxL2NCdTZ3NHJKY2dZUEF6ZkNNb1BPOFlvcDQzUS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADTCqIwDQYJKoZIhvcNAQELBQADggEB
AGLS4VHKXwHow969IEOxkok4un9TP0H2wMF0fEYYvO3HxV8u11PGQ3kkqTNP7RMk
SR0SYeBg5pCg13nFpEJCGzj3ny4OZKO33LxZqUQlD4Z2s8j+ioHArfzn/+1tX0Nb
8Id91iiFYMbmmdXEaOmvi4yMFKZIiM/wQz9YfohLRYhziCSGblYiWnQYt1xb2DiC
cua9T4qHxukC9jvrYeefa8q9CVVdeQ51QB6fqjxhoKCd3WwC4G4IHH1nj3N2spvd
/zbu4FQJhZY/yBz5MZifrfVh2yxMXk9CzrbZhWutKg4A+JyatxvpUdNiqIiT69W5
LDvqhHeRlPgIHGtD8+A09t8=
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:20:05 2026 by rpki-client