Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/cG1xe0jrQABhptoc0h61HQ9a6So.roa
File:                     cG1xe0jrQABhptoc0h61HQ9a6So.roa (raw, json)
Hash identifier:          xDwIW1H1TRx+LgN2lAjD0mvxqtLtH5gAIwluTN6Uvvo=
Subject key identifier:   70:6D:71:7B:48:EB:40:00:61:A6:DA:1C:D2:1E:B5:1D:0F:5A:E9:2A
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0777
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/cG1xe0jrQABhptoc0h61HQ9a6So.roa
Signing time:             Tue 31 Mar 2026 07:41:28 +0000
ROA not before:           Tue 31 Mar 2026 07:41:28 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        36.8.0.0/13 maxlen: 13
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1911 (0x777)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:41:28 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=706D717B48EB400061A6DA1CD21EB51D0F5AE92A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c4:8e:1b:e4:2a:ab:3d:96:2b:01:68:88:5f:
                    42:00:2a:31:c4:06:66:10:90:2c:a2:45:d6:95:66:
                    ae:30:28:4f:00:18:be:4f:9f:c4:da:17:8f:e4:a5:
                    ab:5d:d7:ff:52:23:f1:e3:24:f3:73:fc:e5:42:28:
                    a3:64:84:cf:f1:3b:37:32:bc:21:04:73:b6:ef:d9:
                    7d:53:36:d1:57:c7:7e:db:1f:82:7e:2c:4a:07:a5:
                    71:68:0f:3d:9d:7b:6c:52:b0:10:22:bc:a3:af:64:
                    06:01:23:2f:d3:5a:1c:76:c5:62:03:dd:3a:d0:d9:
                    4f:b7:12:0f:28:00:e9:ba:76:9c:a6:3c:33:52:90:
                    14:66:ab:c0:31:e2:54:2b:f3:19:9c:fc:aa:e6:09:
                    87:37:dc:70:e5:f0:0b:ce:2e:2b:bf:b8:6f:a0:bf:
                    c2:0e:ee:48:50:8b:eb:ef:4d:6f:53:4c:79:d9:6c:
                    c6:8c:ad:2e:81:12:9d:96:09:66:1c:22:c2:4a:56:
                    26:2e:c9:b2:24:37:b6:f9:e9:a8:f8:2c:16:48:f7:
                    31:8e:d9:3b:b0:b2:59:92:de:68:54:bd:4f:a9:65:
                    e4:c8:e9:83:6a:bd:16:c8:57:6e:79:91:d7:25:58:
                    c6:4a:5b:82:da:0c:68:a7:a6:64:ae:36:f1:f0:23:
                    00:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:6D:71:7B:48:EB:40:00:61:A6:DA:1C:D2:1E:B5:1D:0F:5A:E9:2A
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/cG1xe0jrQABhptoc0h61HQ9a6So.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.8.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         39:f8:fe:34:cb:ea:19:cb:59:72:6e:e0:a6:7f:71:81:6d:29:
         2c:d4:85:b2:7c:83:09:25:87:ea:eb:c7:1c:2b:31:27:4e:13:
         4c:3d:5e:3c:60:2d:66:f0:6e:0c:e9:13:61:99:f2:d1:1a:b7:
         f2:28:67:6f:0b:8f:33:a3:cc:e0:1f:0a:84:5f:30:45:dd:ac:
         5a:38:a7:6d:2c:60:76:d7:d0:8f:51:83:50:31:e1:85:41:27:
         ad:35:0c:ae:e1:75:38:ea:2a:50:d3:43:73:e5:25:5a:00:68:
         62:4f:41:2c:b1:6e:3a:be:84:ad:51:bd:6d:19:4f:a5:a5:e6:
         71:64:51:25:f6:56:31:78:14:c1:13:97:c6:2f:2e:42:e4:56:
         de:7c:fa:41:ba:f4:0f:5e:68:27:ad:9c:45:5f:1d:41:78:38:
         b5:46:9b:d6:17:80:b3:cd:b0:97:a4:06:9f:75:ef:66:6f:c0:
         85:e8:41:d8:fb:3f:d5:7f:91:9e:3b:8f:15:5f:1a:68:8e:e7:
         69:e1:bf:c2:3f:e3:2b:a3:32:8a:65:bd:9f:8a:d5:49:e8:a8:
         0a:9f:61:cc:b7:30:71:c8:90:88:df:b7:ed:18:de:8d:fe:8e:
         b9:6f:ee:38:09:c3:27:66:12:b4:2a:92:ab:f8:29:b0:c2:97:
         1e:d6:cc:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:37 2026 by rpki-client