Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/fvsQNv5dNz6TPe0HoEFq-U0nwRE.roa
File:                     fvsQNv5dNz6TPe0HoEFq-U0nwRE.roa (raw, json)
Hash identifier:          U0nBTUuX1IZdFZK3f9QMENO8m6+UL5nJWuFh4rZLohE=
Subject key identifier:   7E:FB:10:36:FE:5D:37:3E:93:3D:ED:07:A0:41:6A:F9:4D:27:C1:11
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       08F0
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/fvsQNv5dNz6TPe0HoEFq-U0nwRE.roa
Signing time:             Tue 31 Mar 2026 07:44:31 +0000
ROA not before:           Tue 31 Mar 2026 07:44:31 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        211.1.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2288 (0x8f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:44:31 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7EFB1036FE5D373E933DED07A0416AF94D27C111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:69:e5:6e:fa:22:df:b1:1e:71:3f:f7:b7:69:
                    e0:5a:bf:66:b6:16:d8:3d:fc:40:e0:f3:c7:af:1d:
                    e2:8e:f5:e3:34:56:fa:e7:33:26:c5:5f:d2:bd:99:
                    4d:8a:15:ca:e1:01:71:35:1d:ac:98:71:a5:1d:a9:
                    01:e8:ef:dc:e1:25:56:78:d3:aa:b7:fb:a8:1f:87:
                    27:48:bc:34:74:f6:18:6d:61:59:7f:48:34:12:08:
                    77:82:64:38:19:90:0c:d5:e8:0b:fa:38:00:b7:84:
                    58:6a:98:37:b8:31:6a:30:35:f8:88:1d:05:da:7e:
                    b0:21:80:76:31:a4:78:89:94:53:5a:d1:26:64:74:
                    3f:bd:df:36:10:1f:46:6f:70:74:99:f2:e7:86:23:
                    b3:50:39:bb:94:2b:19:75:a6:45:0b:8d:59:af:8e:
                    77:8f:29:96:4f:4b:20:66:f5:4d:b7:30:52:5f:c5:
                    1c:20:b0:8f:0d:d9:14:93:3b:4c:af:b3:54:e0:79:
                    0a:c6:d1:50:66:01:b7:86:4c:ab:41:be:07:36:13:
                    e0:2e:a8:91:69:d1:d1:0b:da:c9:59:d5:04:bc:e4:
                    a0:14:ab:43:11:73:a9:af:5f:d1:8d:94:2b:db:81:
                    77:f8:70:f0:16:43:a8:76:b5:84:29:df:40:bb:88:
                    f6:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:FB:10:36:FE:5D:37:3E:93:3D:ED:07:A0:41:6A:F9:4D:27:C1:11
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/fvsQNv5dNz6TPe0HoEFq-U0nwRE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.1.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:f5:bd:ff:a2:29:db:db:b2:1f:eb:fe:a2:b8:c5:8c:85:8a:
         ad:71:d4:f7:ed:c2:e7:b4:f3:a0:9d:52:17:75:82:6c:78:8e:
         a8:ad:32:73:d4:92:1c:32:26:54:de:41:95:14:7b:da:e0:28:
         41:bb:68:1a:c0:82:88:75:9c:94:76:14:6b:92:72:95:65:23:
         a1:40:19:88:32:1b:fb:91:d2:84:63:d5:26:7d:e2:45:8e:b2:
         07:a0:c3:66:fc:e0:aa:3f:7e:42:7f:3d:a1:9d:a0:9a:f8:01:
         d4:74:d5:f8:6c:59:3a:44:dd:2e:77:ff:63:c3:bf:80:51:94:
         b7:d2:3b:e6:56:27:d4:ff:ce:a9:91:d4:8f:6e:a9:8c:85:c3:
         cc:57:1e:de:8e:f6:b4:51:be:cf:aa:f4:70:1d:5d:a3:36:18:
         89:08:ad:88:30:c6:30:06:da:4c:9f:15:dd:9a:19:b4:72:84:
         bf:f2:2d:2e:ae:e4:0f:3d:95:e8:92:65:c0:29:34:ac:ac:e8:
         bb:57:18:6e:fb:eb:4c:a7:b6:8c:04:28:b4:06:91:2a:18:59:
         2f:cd:35:2f:f5:6b:64:fc:8d:a4:82:f6:62:c8:e3:14:6d:00:
         67:f5:a5:e2:c7:46:3b:fa:7b:37:1c:b4:23:80:59:08:c2:f5:
         a0:c2:19:1a
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICCPAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw
NzQ0MzFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDdFRkIxMDM2RkU1RDM3
M0U5MzNERUQwN0EwNDE2QUY5NEQyN0MxMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGaeVu+iLfsR5xP/e3aeBav2a2Ftg9/EDg88evHeKO9eM0Vvrn
MybFX9K9mU2KFcrhAXE1HayYcaUdqQHo79zhJVZ406q3+6gfhydIvDR09hhtYVl/
SDQSCHeCZDgZkAzV6Av6OAC3hFhqmDe4MWowNfiIHQXafrAhgHYxpHiJlFNa0SZk
dD+93zYQH0ZvcHSZ8ueGI7NQObuUKxl1pkULjVmvjnePKZZPSyBm9U23MFJfxRwg
sI8N2RSTO0yvs1TgeQrG0VBmAbeGTKtBvgc2E+AuqJFp0dEL2slZ1QS85KAUq0MR
c6mvX9GNlCvbgXf4cPAWQ6h2tYQp30C7iPb9AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUfvsQNv5dNz6TPe0HoEFq+U0nwREwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTYxL2Z2c1FOdjVkTno2VFBlMEhvRUZxLVUwbndSRS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADTAUUwDQYJKoZIhvcNAQELBQADggEB
AKz1vf+iKdvbsh/r/qK4xYyFiq1x1Pftwue086CdUhd1gmx4jqitMnPUkhwyJlTe
QZUUe9rgKEG7aBrAgoh1nJR2FGuScpVlI6FAGYgyG/uR0oRj1SZ94kWOsgegw2b8
4Ko/fkJ/PaGdoJr4AdR01fhsWTpE3S53/2PDv4BRlLfSO+ZWJ9T/zqmR1I9uqYyF
w8xXHt6O9rRRvs+q9HAdXaM2GIkIrYgwxjAG2kyfFd2aGbRyhL/yLS6u5A89leiS
ZcApNKys6LtXGG7760yntowEKLQGkSoYWS/NNS/1a2T8jaSC9mLI4xRtAGf1peLH
Rjv6ezcctCOAWQjC9aDCGRo=
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:50:21 2026 by rpki-client