Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/ezYdjeBOXTCpp2BoNlPntpGEucA.roa
File:                     ezYdjeBOXTCpp2BoNlPntpGEucA.roa (raw, json)
Hash identifier:          LktHY3jkDbIhslA+DeEyU+jr0TQpQKQtbmEPSGScDGs=
Subject key identifier:   7B:36:1D:8D:E0:4E:5D:30:A9:A7:60:68:36:53:E7:B6:91:84:B9:C0
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       088F
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ezYdjeBOXTCpp2BoNlPntpGEucA.roa
Signing time:             Tue 31 Mar 2026 07:43:47 +0000
ROA not before:           Tue 31 Mar 2026 07:43:47 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        210.254.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2191 (0x88f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:43:47 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7B361D8DE04E5D30A9A760683653E7B69184B9C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:29:57:09:c9:6d:0d:a6:59:0b:59:66:1a:7b:
                    5a:2a:e8:0c:b7:1b:f4:84:e7:b9:51:7e:c4:bd:4b:
                    55:69:7b:e4:f7:28:0b:5e:d8:c4:f0:31:0d:d5:28:
                    18:e1:ee:79:24:e0:b5:a5:5a:a8:fa:8a:1f:27:c7:
                    6a:3b:a4:df:85:be:b2:bf:7b:09:30:dd:07:65:18:
                    d1:32:42:47:6f:18:df:8e:c9:32:4e:a9:d4:97:ef:
                    a5:8f:d5:12:6c:e5:e7:39:6d:e4:25:09:31:ca:04:
                    4b:de:04:58:57:d8:45:be:2e:43:c7:ad:cc:64:39:
                    4e:7e:de:ca:4e:98:50:7f:24:06:96:73:c0:ff:13:
                    74:c5:ca:bd:1a:39:e5:5b:59:72:8a:d5:bf:8d:90:
                    a2:14:b7:bc:17:fc:e7:9e:e9:6a:c4:57:49:d8:5b:
                    79:3e:1a:4f:67:e8:e7:f7:d2:8f:62:80:91:f2:39:
                    b5:1b:c6:35:df:af:5a:e1:53:52:8b:e5:54:b0:eb:
                    29:5e:b3:84:6a:12:3e:e8:08:67:94:02:8a:da:e2:
                    be:d9:91:48:71:3b:58:97:af:3c:d5:6f:5b:51:4a:
                    a6:c0:ad:85:c4:ae:dc:8b:d6:77:30:0a:4a:fe:a9:
                    20:6c:83:d7:b3:df:eb:3a:b3:a2:98:54:b4:d1:e0:
                    cd:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:36:1D:8D:E0:4E:5D:30:A9:A7:60:68:36:53:E7:B6:91:84:B9:C0
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ezYdjeBOXTCpp2BoNlPntpGEucA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.254.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:2c:83:9c:1c:45:51:79:6f:06:0a:4b:66:b5:db:52:2b:93:
         a2:75:58:6c:2c:d7:5c:48:87:ac:6f:f1:6c:47:9e:89:a1:b7:
         c8:8d:ad:12:ff:42:85:0b:13:ed:b9:e0:06:f4:1e:27:b2:be:
         e7:09:b0:e9:9c:9f:12:13:aa:c4:ac:88:c8:ee:11:21:3b:0e:
         89:98:39:d2:7a:bc:78:4b:6d:ec:e9:7b:60:e1:db:53:73:27:
         13:5a:95:71:bc:11:5f:0c:18:3c:e1:8d:4b:e4:11:84:10:4b:
         71:32:4c:97:7b:12:bb:96:ad:61:88:8d:8c:c3:98:0b:88:ef:
         8f:c1:10:ae:4b:8c:dd:f5:24:09:02:12:7c:64:9f:3d:e3:5b:
         40:66:b0:da:ca:90:40:98:71:8d:98:c0:06:97:8c:ab:1c:92:
         20:80:02:77:2c:81:06:da:20:4f:af:19:8d:1a:80:d4:5c:2c:
         cd:ce:1a:9c:f6:26:76:d9:c9:b9:5f:b8:da:3f:5e:b7:77:05:
         b1:c4:6f:f0:78:d3:e4:b1:11:cd:5f:b7:31:95:f6:dd:54:3f:
         c9:ad:87:38:f0:c4:a7:f6:5e:a6:c7:d4:b2:05:f1:ed:9a:6c:
         15:d9:24:31:58:e8:0a:7a:d7:3d:3a:3b:9d:d1:ee:37:1b:83:
         e7:62:c7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:12:23 2026 by rpki-client