Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/g7DVz1noTdzMI_CikmXILRWImgk.roa
File:                     g7DVz1noTdzMI_CikmXILRWImgk.roa (raw, json)
Hash identifier:          sERLTEYXDnkooccjx+bW45DJxV2S/XMye6E1UPKQuu8=
Subject key identifier:   83:B0:D5:CF:59:E8:4D:DC:CC:23:F0:A2:92:65:C8:2D:15:88:9A:09
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       07BE
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/g7DVz1noTdzMI_CikmXILRWImgk.roa
Signing time:             Tue 31 Mar 2026 07:42:01 +0000
ROA not before:           Tue 31 Mar 2026 07:42:01 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        125.29.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1982 (0x7be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:42:01 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=83B0D5CF59E84DDCCC23F0A29265C82D15889A09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:55:ed:51:5e:c6:69:f8:6e:13:b3:71:b6:96:
                    b7:f2:df:df:8e:5c:fe:e8:dd:26:ea:50:a3:61:2a:
                    09:35:71:88:5d:17:47:43:e3:7b:2d:f2:a7:ea:15:
                    d7:6b:b6:17:f2:1f:69:1f:8b:93:ae:9f:e2:df:6a:
                    34:17:e5:12:39:8f:8d:fe:26:6a:0a:86:5e:e9:bd:
                    87:74:a4:dc:9b:3e:ba:1a:00:c5:7c:84:9e:69:34:
                    c3:ed:d2:30:fd:c9:15:bf:78:f1:87:4f:cf:2a:ba:
                    4c:e6:59:ca:22:4f:1e:d2:04:76:c2:87:21:c7:5f:
                    9a:17:4c:44:b3:36:6d:9b:f6:eb:23:22:97:b5:08:
                    a9:55:6d:0c:77:25:5e:2c:94:c4:e5:bb:a4:8a:19:
                    28:e1:4c:ae:10:1a:92:ff:48:bc:04:d1:87:dc:80:
                    20:0f:fd:b1:1d:86:dc:be:22:4c:5f:d8:27:8f:10:
                    d1:a8:9c:c8:b4:e9:c8:f0:ce:7d:49:6b:7d:85:13:
                    e3:c0:70:5d:9b:73:32:52:f6:09:f9:f5:f6:4e:85:
                    38:87:ba:07:45:35:b7:9f:36:06:57:79:e1:9e:fe:
                    1b:97:89:28:f7:b9:5f:8b:e1:6a:c3:87:4e:92:16:
                    7a:06:ad:fe:84:51:27:aa:5b:f3:0e:77:2c:e6:59:
                    06:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:B0:D5:CF:59:E8:4D:DC:CC:23:F0:A2:92:65:C8:2D:15:88:9A:09
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/g7DVz1noTdzMI_CikmXILRWImgk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.29.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         46:63:6e:bb:f6:46:90:e5:54:b8:53:4a:0d:36:be:39:1d:13:
         cf:d4:3b:3d:78:da:90:00:88:7b:f9:bc:42:17:92:f1:63:46:
         9e:59:30:1b:f1:58:50:d0:73:5f:1e:5a:be:a3:be:fd:e1:33:
         f7:1a:13:c3:0f:62:3a:75:c0:96:7c:9d:04:d9:8c:da:5d:25:
         67:bb:ab:9c:9d:e4:0e:1a:ec:bf:cc:14:70:18:24:74:2a:ca:
         c7:28:b8:e6:d9:16:8d:2a:36:f3:62:e6:c1:71:aa:35:46:fe:
         81:25:81:77:0f:b0:6e:b9:02:a1:d0:83:73:67:d6:e5:85:20:
         70:1a:db:2a:22:be:48:99:3e:e1:29:ad:a5:6b:4b:e8:77:5b:
         c1:4d:c3:f5:e5:d4:a3:68:bb:ca:34:c2:00:e3:90:b8:6d:54:
         5a:2b:ac:95:6f:0d:95:a3:40:79:50:06:47:b1:6b:23:6c:78:
         23:56:ac:53:f9:1a:56:20:b4:94:c1:c7:38:bd:34:df:a9:84:
         08:51:fc:8c:e5:ae:d5:08:a5:79:f9:de:c2:64:91:57:b8:64:
         8d:9c:8a:99:fb:7a:87:c1:e9:13:88:27:c4:af:7e:e1:a6:0d:
         10:40:6e:d8:b8:e9:72:a8:07:c4:28:52:8d:66:3b:db:5e:e9:
         4a:b6:39:ca
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICB74wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw
NzQyMDFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDgzQjBENUNGNTlFODRE
RENDQzIzRjBBMjkyNjVDODJEMTU4ODlBMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLVe1RXsZp+G4Ts3G2lrfy39+OXP7o3SbqUKNhKgk1cYhdF0dD
43st8qfqFddrthfyH2kfi5Oun+LfajQX5RI5j43+JmoKhl7pvYd0pNybProaAMV8
hJ5pNMPt0jD9yRW/ePGHT88qukzmWcoiTx7SBHbChyHHX5oXTESzNm2b9usjIpe1
CKlVbQx3JV4slMTlu6SKGSjhTK4QGpL/SLwE0YfcgCAP/bEdhty+Ikxf2CePENGo
nMi06cjwzn1Ja32FE+PAcF2bczJS9gn59fZOhTiHugdFNbefNgZXeeGe/huXiSj3
uV+L4WrDh06SFnoGrf6EUSeqW/MOdyzmWQafAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUg7DVz1noTdzMI/CikmXILRWImgkwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTYxL2c3RFZ6MW5vVGR6TUlfQ2lrbVhJTFJXSW1nay5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZ9HUAwDQYJKoZIhvcNAQELBQADggEB
AEZjbrv2RpDlVLhTSg02vjkdE8/UOz142pAAiHv5vEIXkvFjRp5ZMBvxWFDQc18e
Wr6jvv3hM/caE8MPYjp1wJZ8nQTZjNpdJWe7q5yd5A4a7L/MFHAYJHQqyscouObZ
Fo0qNvNi5sFxqjVG/oElgXcPsG65AqHQg3Nn1uWFIHAa2yoivkiZPuEpraVrS+h3
W8FNw/Xl1KNou8o0wgDjkLhtVForrJVvDZWjQHlQBkexayNseCNWrFP5GlYgtJTB
xzi9NN+phAhR/IzlrtUIpXn53sJkkVe4ZI2cipn7eofB6ROIJ8SvfuGmDRBAbti4
6XKoB8QoUo1mO9te6Uq2Oco=
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:12:46 2026 by rpki-client