Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/caK-7thS97GKcYVY8HNXeGjv5Ls.roa
File:                     caK-7thS97GKcYVY8HNXeGjv5Ls.roa (raw, json)
Hash identifier:          DQyIwMpufASHSZOxoGJ9dBr1V4q8KBZbSD6MjZWJ/Ew=
Subject key identifier:   71:A2:BE:EE:D8:52:F7:B1:8A:71:85:58:F0:73:57:78:68:EF:E4:BB
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       085B
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/caK-7thS97GKcYVY8HNXeGjv5Ls.roa
Signing time:             Tue 31 Mar 2026 07:43:22 +0000
ROA not before:           Tue 31 Mar 2026 07:43:22 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        27.93.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2139 (0x85b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:43:22 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=71A2BEEED852F7B18A718558F073577868EFE4BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:44:bc:e4:11:07:6b:1a:64:5a:47:0b:00:c0:
                    2e:7f:a0:de:61:4a:21:8d:f9:99:75:16:6d:45:bd:
                    54:7e:13:8b:e8:c9:41:f1:2f:fb:e6:85:dc:9e:c1:
                    74:23:e5:db:87:41:60:f1:9e:f2:d4:2b:7c:ae:16:
                    01:12:1c:a4:fd:84:fa:d9:8c:30:4a:d2:35:81:6d:
                    be:ce:31:ee:fc:68:91:6a:ac:71:42:04:3a:8b:1a:
                    a3:7a:af:ed:81:f1:b5:80:c8:b5:d9:0e:75:96:17:
                    8b:47:d1:48:de:2e:f5:a7:72:6d:52:f7:b3:9a:f0:
                    73:6b:75:49:4e:39:e7:55:8a:44:f2:25:3e:26:78:
                    12:2e:3f:f4:f2:89:8e:b5:23:19:fb:49:fa:a3:36:
                    6d:84:d6:e9:15:ac:c6:e8:53:bd:48:1b:1c:1a:e3:
                    b4:b5:9a:36:07:58:d3:01:35:f9:e2:b0:f2:e0:f7:
                    54:7f:1c:17:6a:85:f8:dc:15:2f:96:c9:11:0a:5e:
                    6c:0d:52:21:e9:5c:2f:77:55:f2:ac:8f:e8:ec:dc:
                    2c:02:6f:c1:4d:12:45:75:24:3c:2d:0c:ca:c0:b7:
                    c3:4f:64:e7:50:16:1e:e2:3b:06:83:89:1a:c9:1f:
                    7b:94:90:9c:a7:ee:a9:cf:fd:a7:23:8a:55:db:b6:
                    d3:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:A2:BE:EE:D8:52:F7:B1:8A:71:85:58:F0:73:57:78:68:EF:E4:BB
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/caK-7thS97GKcYVY8HNXeGjv5Ls.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.93.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6e:9f:e4:1e:bd:bb:7e:d2:04:e3:c4:d6:e1:36:6e:b5:76:dd:
         01:32:91:e2:de:a4:d8:6a:cf:39:b3:6a:55:9b:1a:96:67:ad:
         23:41:a8:5e:d2:51:fe:d6:99:ae:15:f1:8f:58:e3:a7:ca:a1:
         2a:aa:3d:fb:9f:09:fb:64:07:2f:70:b4:9b:c5:28:5e:1a:27:
         58:2e:2b:21:16:cc:57:ce:ef:96:81:2c:87:10:46:dc:63:5e:
         61:b8:2b:c7:49:ac:fc:4b:7b:0c:50:57:c7:86:b8:3e:55:ff:
         ca:86:18:80:35:23:39:a2:6f:4b:61:7c:8e:9e:9f:c0:e7:72:
         f4:2e:04:ab:bf:c3:66:7c:84:cb:5e:92:85:e1:e3:9d:4b:68:
         9e:43:18:bb:35:d1:d7:bc:63:66:5c:0f:d7:fb:cb:b5:86:11:
         3d:a6:23:4d:d8:c2:19:38:1f:90:46:3d:34:45:b6:37:d8:9d:
         0d:8e:42:e6:7c:77:f2:71:b6:5a:94:79:8e:61:d8:16:b1:04:
         3c:42:b1:10:1c:f2:90:f6:dd:68:62:af:67:8f:8e:1b:cf:fd:
         f4:55:31:e9:b8:74:c8:c0:6d:1a:26:17:70:7f:4a:1e:b0:9d:
         0b:61:32:c4:68:00:0d:54:2e:0e:5c:40:e4:2c:eb:d1:5b:b7:
         a9:4c:63:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:13:38 2026 by rpki-client