Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/g_GX_PE-YmnhA04vBKKnb5Gzn5k.roa
File:                     g_GX_PE-YmnhA04vBKKnb5Gzn5k.roa (raw, json)
Hash identifier:          fn67OkH9qj7pKEV7v/bnCSzrmnCFi44jHOyxWuMHZfI=
Subject key identifier:   83:F1:97:FC:F1:3E:62:69:E1:03:4E:2F:04:A2:A7:6F:91:B3:9F:99
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0877
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/g_GX_PE-YmnhA04vBKKnb5Gzn5k.roa
Signing time:             Tue 31 Mar 2026 07:43:36 +0000
ROA not before:           Tue 31 Mar 2026 07:43:36 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        211.7.52.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2167 (0x877)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:43:36 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=83F197FCF13E6269E1034E2F04A2A76F91B39F99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:53:bf:d4:34:78:c0:42:03:52:ee:d5:74:6d:
                    b1:e5:76:6d:4f:33:f3:0a:36:b2:b5:59:d5:ea:c3:
                    8c:67:72:d3:2f:58:ba:f9:18:0c:51:a1:23:32:27:
                    2f:6a:3e:79:e2:94:c1:06:cb:48:4d:27:75:79:08:
                    d8:e3:e2:82:7c:5c:a9:7b:b4:83:bf:8b:a3:48:d7:
                    a3:6e:68:f9:f6:e0:e9:31:6c:b8:5c:43:5d:60:09:
                    ab:b4:be:de:56:83:25:5e:c6:1d:82:4b:30:ed:60:
                    61:05:2d:48:bb:cd:26:ab:91:db:a6:46:9c:05:20:
                    ac:1c:e5:49:67:70:e2:f3:33:97:b2:ce:96:42:02:
                    6b:61:ba:ec:d9:e4:c8:7b:f9:bd:95:24:7a:23:fd:
                    22:88:ad:3e:25:21:3c:f2:bd:f2:9a:ac:cb:ec:3b:
                    60:69:76:c6:e1:04:7a:e0:81:c2:51:b3:83:cb:cc:
                    ce:62:71:9e:e4:d2:56:a5:85:f8:08:fc:be:db:7d:
                    90:94:e0:47:e0:e2:23:01:93:a2:16:0a:8e:40:a0:
                    22:f1:3e:5b:54:96:fb:0d:9f:44:1c:a7:e8:25:8a:
                    de:77:14:4c:08:ef:b8:05:f3:c7:66:42:ea:28:2e:
                    cf:6b:bc:d8:b5:76:82:e8:aa:91:cf:9d:93:ec:e4:
                    9b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:F1:97:FC:F1:3E:62:69:E1:03:4E:2F:04:A2:A7:6F:91:B3:9F:99
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/g_GX_PE-YmnhA04vBKKnb5Gzn5k.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.7.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:6a:17:ca:18:99:01:84:03:3f:fb:66:c3:4b:29:2b:23:e3:
         39:0c:38:62:83:36:cd:23:a5:c5:b2:d9:71:d7:9c:85:b7:b4:
         49:2e:ae:a1:b8:d7:84:a9:7c:d7:b8:96:93:a8:64:c7:b1:66:
         28:7d:85:b8:35:48:04:f2:13:1b:5a:86:93:2b:aa:ab:bb:ef:
         0d:cf:7f:6e:be:b8:6a:d0:16:67:fc:3b:cd:34:98:0a:81:3b:
         16:b2:11:68:0e:53:c2:ea:f2:8e:7d:ab:2f:78:ae:5d:aa:af:
         28:6f:d2:c0:22:dd:53:89:f1:62:48:ca:ec:a4:1f:af:60:8b:
         98:23:19:39:4c:90:f5:96:39:f3:f1:72:53:d1:2d:a8:c8:01:
         da:ff:1c:7a:d8:f9:bd:45:29:7e:45:e9:02:9c:5a:21:5b:a2:
         26:97:db:7a:17:1b:f6:2d:7d:18:b8:83:65:80:0c:d6:1d:28:
         a6:7e:9e:b9:a9:5c:24:5e:c7:2a:19:82:f3:66:a5:ca:5e:13:
         9b:d2:b9:2d:85:12:32:72:bd:f6:5e:3c:80:70:c1:2d:65:ae:
         44:d0:42:a3:68:1c:74:83:b5:ee:6c:78:36:51:77:76:74:fd:
         7a:71:2d:70:42:3d:b4:bc:eb:16:7b:d6:29:79:dd:5b:88:5a:
         51:7e:be:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:57:05 2026 by rpki-client