Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/gkeRccVAKGIogcvNK7dT8-X7uq0.roa
File:                     gkeRccVAKGIogcvNK7dT8-X7uq0.roa (raw, json)
Hash identifier:          aUEQArf6xfTj6zck2o9buRll+ct0fgnbpwATrEYzP4M=
Subject key identifier:   82:47:91:71:C5:40:28:62:28:81:CB:CD:2B:B7:53:F3:E5:FB:BA:AD
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0903
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/gkeRccVAKGIogcvNK7dT8-X7uq0.roa
Signing time:             Tue 31 Mar 2026 07:44:39 +0000
ROA not before:           Tue 31 Mar 2026 07:44:39 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        211.1.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2307 (0x903)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:44:39 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=82479171C54028622881CBCD2BB753F3E5FBBAAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:a7:7c:98:b6:c8:9c:c2:1d:2a:74:f7:9c:6f:
                    ad:58:a4:7c:fd:7f:40:c1:3e:6d:24:59:70:6c:32:
                    47:b3:b2:08:51:a4:ad:f2:5c:e5:6a:05:93:a9:b5:
                    c3:91:3f:01:49:d5:e9:b1:50:2a:05:b1:d9:38:1a:
                    6b:2b:f2:a9:45:8c:fd:57:d5:14:fd:f9:f3:25:13:
                    b2:3d:cc:70:21:65:b4:79:2a:92:b3:da:d7:de:fb:
                    ff:8a:fa:bf:68:87:92:42:fe:c3:88:90:29:c3:bf:
                    14:28:9b:5a:fb:ae:37:c4:15:cc:a6:4b:b2:14:47:
                    54:00:b8:41:26:48:8f:be:0d:ee:59:c5:98:be:0b:
                    49:87:0e:a8:e5:f1:a6:72:07:62:a2:45:0b:8e:c1:
                    f2:f5:29:de:57:3e:2e:f5:55:d0:11:40:a3:32:6e:
                    78:a9:69:5d:70:44:2a:43:19:b2:c6:6d:24:ae:bc:
                    b7:7b:57:c2:bb:1d:1a:20:5f:9b:54:01:5a:61:ab:
                    dd:c7:7a:65:97:e9:18:5a:0a:b6:aa:19:34:26:05:
                    6e:b0:cc:50:c0:ab:91:8d:5c:99:8b:27:d3:42:63:
                    2c:c0:ac:72:75:f9:20:d7:04:b5:1e:fd:41:10:4b:
                    49:40:a1:b8:1c:b2:af:78:7e:2b:fb:e1:68:83:52:
                    8b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:47:91:71:C5:40:28:62:28:81:CB:CD:2B:B7:53:F3:E5:FB:BA:AD
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/gkeRccVAKGIogcvNK7dT8-X7uq0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.1.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b2:22:4b:58:89:1c:41:ec:8c:2f:25:9c:b4:9a:2b:31:e6:16:
         14:5d:14:46:8c:ac:1a:ac:bd:8f:7b:a1:e0:90:46:3e:5c:44:
         51:c2:ff:85:b4:3b:5a:70:24:a0:ba:98:f9:08:a0:5a:83:3f:
         1c:ce:8a:ec:01:78:a0:c7:5b:34:c8:89:79:b3:e9:c7:7c:a4:
         9a:8b:d4:87:3d:64:68:c0:43:7a:a7:1d:b1:5a:67:27:15:4b:
         a8:dc:e5:c8:92:0e:b5:61:99:13:97:c7:9b:f4:91:1f:5c:72:
         6a:8c:3b:98:44:83:4d:d6:f2:c9:7a:43:77:43:ad:3d:26:3c:
         12:28:da:d3:82:ae:30:5f:f2:8f:9d:2c:ce:a4:9a:f2:f1:e2:
         f7:95:bc:fb:d0:3f:a5:5f:7e:59:c1:63:ba:75:22:ac:8c:9b:
         e9:00:dc:e2:2f:4a:17:4d:4b:5d:51:62:ed:8d:65:af:ac:0c:
         57:56:be:ce:69:a7:1c:9e:03:4b:78:54:7f:17:91:1c:37:ee:
         8a:56:00:12:66:a9:b9:59:76:eb:74:39:3f:ad:f6:7c:13:ba:
         04:11:b7:b4:39:50:f9:f3:c4:c7:f1:7e:9f:8f:24:b6:27:2b:
         84:21:75:09:e3:90:1b:4e:1a:b3:64:d9:f5:cf:72:3f:38:4a:
         f0:63:9f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:56:14 2026 by rpki-client