Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/eNkcT1uRai8T8k13twf3jqaFavI.roa
File:                     eNkcT1uRai8T8k13twf3jqaFavI.roa (raw, json)
Hash identifier:          9UDJYXxIWvs2A8/qN9Ok06meewlcApQmBurpZrxmVYM=
Subject key identifier:   78:D9:1C:4F:5B:91:6A:2F:13:F2:4D:77:B7:07:F7:8E:A6:85:6A:F2
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0875
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/eNkcT1uRai8T8k13twf3jqaFavI.roa
Signing time:             Tue 31 Mar 2026 07:43:35 +0000
ROA not before:           Tue 31 Mar 2026 07:43:35 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        210.224.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2165 (0x875)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:43:35 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=78D91C4F5B916A2F13F24D77B707F78EA6856AF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5e:cc:bc:23:1b:8d:99:e2:44:1c:de:93:56:
                    1d:87:57:4e:56:63:77:03:66:d4:c6:b6:99:18:53:
                    46:0b:25:64:d5:f8:67:15:14:f5:f4:34:8d:80:61:
                    3c:5d:0e:c1:8d:30:f8:2b:2d:e9:bc:f0:90:74:3a:
                    bb:73:e5:d6:e2:7f:8c:72:15:ea:54:27:b8:c1:ba:
                    6b:78:eb:1d:7c:a8:4b:7c:85:64:27:9a:9f:18:66:
                    02:3e:3e:4c:5e:f2:1d:0a:91:7d:25:89:a0:66:49:
                    d1:b2:5d:d1:e3:3f:a4:07:52:44:f2:34:38:e1:08:
                    dc:29:08:25:95:7e:d5:da:c6:03:69:33:10:53:b6:
                    64:40:5c:75:81:0a:03:85:29:9e:92:b2:3f:0e:a9:
                    97:db:9d:b2:da:68:9a:2a:76:bf:00:65:4f:3b:55:
                    3b:52:dc:65:36:48:56:90:b2:87:e2:6f:41:c6:59:
                    88:08:0d:44:96:3c:5b:95:cc:1e:26:ec:94:1d:5e:
                    24:4f:5e:0a:cd:ba:be:95:f0:90:c8:a5:4b:d1:5f:
                    95:9b:1e:2a:48:c3:52:88:40:b1:7f:65:f2:3b:c5:
                    12:51:6a:89:3f:ab:c9:dd:20:2c:a8:c1:18:bc:6a:
                    01:9d:32:90:dc:e7:54:0c:3e:1e:6c:75:91:2c:c7:
                    13:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:D9:1C:4F:5B:91:6A:2F:13:F2:4D:77:B7:07:F7:8E:A6:85:6A:F2
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/eNkcT1uRai8T8k13twf3jqaFavI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.224.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         0f:18:0e:f5:5f:6c:60:88:8f:66:a6:3c:9b:31:9a:19:9a:53:
         13:2c:cb:12:99:d1:d1:37:8e:59:b2:86:a2:3c:ca:24:9e:e9:
         73:fe:30:2c:78:33:f6:78:78:19:2c:44:e3:4e:d1:10:ac:13:
         2c:74:5c:d3:66:0b:7d:4a:fc:cb:d3:be:d4:97:4d:42:0e:39:
         92:27:7d:b0:29:67:f4:bc:56:8e:81:a4:b9:a8:70:8c:19:91:
         03:14:9a:78:49:46:d2:d6:f7:b8:ee:f9:f9:83:96:b3:ae:65:
         9e:df:f7:5a:12:d5:e3:21:07:60:d6:7c:04:4b:5c:67:b2:97:
         a1:79:31:db:a9:b5:bd:92:bf:d4:9e:12:0f:a2:bd:95:e7:ca:
         37:cf:75:4b:d4:db:95:a9:88:44:ba:a3:94:c5:a1:50:4d:ce:
         c6:90:f1:99:b3:ca:43:e1:17:00:ea:12:b5:bd:3d:f3:ed:42:
         9b:09:ce:13:b7:41:08:e0:7f:ae:87:11:48:dd:41:a7:fd:92:
         f0:b1:9a:13:f3:b3:9f:a1:28:2c:1d:82:54:d3:1e:74:39:5e:
         59:99:f7:2a:9b:67:4c:82:ed:7b:80:28:cb:0b:7a:a5:10:1f:
         ed:c0:9d:be:44:1e:c4:9f:14:22:a6:5c:be:cc:75:d4:bf:5a:
         a2:12:4a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:13:18 2026 by rpki-client