Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/fbA9SaY2V_W0UYlvJfxTDJAQ3XU.roa
File:                     fbA9SaY2V_W0UYlvJfxTDJAQ3XU.roa (raw, json)
Hash identifier:          /rh97zH02UQILrMi2Rdadz15ygKC9bcW/ehMrQOKBzg=
Subject key identifier:   7D:B0:3D:49:A6:36:57:F5:B4:51:89:6F:25:FC:53:0C:90:10:DD:75
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       080A
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/fbA9SaY2V_W0UYlvJfxTDJAQ3XU.roa
Signing time:             Tue 31 Mar 2026 07:42:39 +0000
ROA not before:           Tue 31 Mar 2026 07:42:39 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        210.236.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2058 (0x80a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:42:39 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7DB03D49A63657F5B451896F25FC530C9010DD75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ea:77:57:36:04:52:da:68:17:4a:46:43:3d:
                    cb:78:7c:52:ea:9a:dd:4f:bf:08:43:2f:84:f0:c6:
                    7a:78:fa:81:be:b0:42:09:1d:d6:8a:33:51:a1:e4:
                    40:b6:0c:11:00:7d:f2:f4:d1:ae:3c:46:e5:07:26:
                    8d:90:f1:33:e5:f6:f5:56:d7:52:7a:bb:e5:65:43:
                    e9:e0:9d:ae:8e:fc:2c:85:67:fa:24:b7:ca:77:43:
                    b7:e1:e3:cc:ce:9c:4e:dc:09:bf:2f:f8:fc:97:57:
                    74:ea:0a:6e:66:4d:fb:00:e1:d4:4a:71:0d:0c:83:
                    de:01:21:c9:f8:c5:f1:3c:fc:f2:a6:ba:9e:b3:41:
                    98:fd:26:e0:37:d7:ba:31:13:ab:36:87:43:c8:fe:
                    67:9a:04:72:a2:80:8e:42:bb:4f:26:4d:36:0f:89:
                    90:67:a3:38:85:6d:27:02:ef:e2:d9:ba:46:63:7c:
                    5e:74:b1:2c:84:c8:0d:6c:ad:aa:84:2b:6f:de:ab:
                    99:b2:01:0b:08:a9:a0:1d:e4:eb:16:71:7d:58:ac:
                    3f:42:54:1e:a2:ae:fb:0c:5c:92:6b:c1:5c:bd:f2:
                    10:9f:21:cb:bd:fc:60:b6:24:20:ca:21:68:66:1d:
                    ed:5c:2d:3d:eb:95:88:e0:79:96:0a:d5:27:d5:02:
                    f7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:B0:3D:49:A6:36:57:F5:B4:51:89:6F:25:FC:53:0C:90:10:DD:75
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/fbA9SaY2V_W0UYlvJfxTDJAQ3XU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.236.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         29:bb:76:21:65:fa:9b:36:3c:89:5c:72:85:82:1b:8c:b6:2b:
         11:12:75:6f:41:6e:5e:cc:8b:1d:1c:40:91:eb:4f:f0:6a:95:
         90:e8:e8:3e:1b:20:83:07:1e:79:c1:05:6b:f5:9b:0c:f4:c9:
         9e:78:f7:26:9c:14:18:90:63:63:13:31:97:95:82:f2:a3:76:
         f9:66:20:41:19:46:16:c6:9e:57:1b:b7:fa:b8:aa:3e:9d:46:
         b7:29:91:b7:06:2c:e7:4a:77:f8:4a:2d:62:93:a0:0e:2f:b3:
         25:c5:59:b1:12:4f:e8:ad:49:d3:73:c6:17:f2:69:af:8a:6c:
         ee:9f:46:77:37:8f:d6:f9:b6:c9:0f:78:8a:41:29:76:72:92:
         73:c2:14:24:5a:94:c6:0b:e0:bb:9f:53:78:7b:aa:6d:aa:ab:
         0d:97:40:f2:6d:13:a8:15:9d:e1:8f:de:dd:d7:c9:69:8b:33:
         f5:a1:c9:87:6a:b6:87:1f:19:0f:34:3f:81:4b:66:a5:9a:ca:
         a0:aa:2a:3a:ae:f9:42:f9:dc:a0:ba:33:c1:4a:7a:e9:9a:a2:
         1f:13:15:29:26:39:a4:25:c3:01:b9:2c:c0:3a:2d:c8:39:ac:
         ad:79:70:7a:34:7d:df:e1:c4:50:1c:32:c8:ae:16:22:ba:ab:
         aa:9c:3f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:34 2026 by rpki-client