Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/glGFKlGNhlMi6jgGcf8ZyFbm7ns.roa
File:                     glGFKlGNhlMi6jgGcf8ZyFbm7ns.roa (raw, json)
Hash identifier:          pmSFerqW90ctMhgRx7JTdcvjwdQSxT5FjH4XGdfrFQE=
Subject key identifier:   82:51:85:2A:51:8D:86:53:22:EA:38:06:71:FF:19:C8:56:E6:EE:7B
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       075D
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/glGFKlGNhlMi6jgGcf8ZyFbm7ns.roa
Signing time:             Tue 31 Mar 2026 07:41:17 +0000
ROA not before:           Tue 31 Mar 2026 07:41:17 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        210.233.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1885 (0x75d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:41:17 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=8251852A518D865322EA380671FF19C856E6EE7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d9:d5:e1:c7:41:32:ed:9a:ba:3d:17:b2:65:
                    22:78:bd:1d:c9:c3:2e:1a:08:7a:50:f1:b9:59:61:
                    f6:ba:40:1a:bd:67:39:87:d7:0b:6f:2e:21:b7:e7:
                    2e:d7:ab:43:ef:58:97:e5:22:e1:f0:37:c5:67:7e:
                    e8:91:82:b0:37:84:49:9c:92:bd:1a:36:b0:bb:56:
                    9e:e0:28:9e:1c:f6:49:98:a8:4f:16:ed:46:34:fa:
                    f2:9f:b7:66:42:f1:1c:f8:39:5d:14:98:9c:1e:20:
                    75:24:ce:e6:25:a5:a3:5d:91:3d:28:b5:4c:a4:d9:
                    e9:7c:dc:d9:29:be:4d:82:b4:ba:f4:37:77:1d:6b:
                    c3:c0:65:43:ce:66:90:53:e7:6a:88:0a:06:49:0b:
                    4d:ad:00:f8:70:1e:be:c1:25:0f:8e:0b:38:e1:c2:
                    3b:39:85:f1:7b:08:eb:c1:bc:9c:8a:cd:da:37:23:
                    cb:64:b7:be:17:7e:ee:9c:1c:25:01:43:85:e0:82:
                    eb:0b:ef:68:5e:bf:02:0c:58:69:49:55:80:fa:b2:
                    3c:05:88:9a:cb:2d:f5:68:31:19:d4:64:5a:15:20:
                    33:34:7d:b1:53:5e:1d:d3:1a:9d:b2:7c:3c:9d:29:
                    be:c3:8d:6e:5e:98:78:87:c5:5b:31:32:1d:8d:85:
                    79:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:51:85:2A:51:8D:86:53:22:EA:38:06:71:FF:19:C8:56:E6:EE:7B
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/glGFKlGNhlMi6jgGcf8ZyFbm7ns.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.233.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         23:d1:7d:39:78:c3:ff:b9:13:69:cf:0f:10:80:7a:68:54:5a:
         b1:64:02:7d:4b:00:04:19:c9:f5:67:ac:97:ed:cd:b0:42:c8:
         3a:de:0c:fc:35:0b:04:6e:a5:80:ea:1e:87:eb:11:58:3c:d2:
         5a:e7:31:38:20:0a:c9:21:74:09:3e:23:30:14:63:ca:ba:63:
         8d:0e:81:1f:88:59:cc:54:e0:f8:ec:b0:c3:d0:29:84:0e:d8:
         18:6f:f8:dc:17:0c:4e:fe:0d:02:ef:2e:93:ff:56:a0:8d:8a:
         d1:cb:14:b0:08:9a:f3:63:1d:f6:41:1c:4a:7a:10:d3:0f:6c:
         da:6e:c6:56:c4:8b:09:2b:31:4c:53:fd:f1:95:0b:74:d2:b8:
         12:45:3c:8f:db:b1:dc:65:d9:08:77:a1:f5:3e:c7:a8:f2:55:
         b3:7d:73:25:20:29:25:21:06:29:c7:b6:be:3d:69:18:a2:32:
         1c:d7:7f:77:0f:22:63:4c:59:93:1a:58:9b:00:8f:48:6f:35:
         76:ef:cc:bc:c6:ec:f2:34:98:d9:ae:23:70:c3:80:d2:16:e1:
         1e:38:7f:19:b7:66:c1:e4:4b:2a:8d:04:98:6c:95:0f:68:ae:
         b6:9a:b3:5b:37:bf:33:a6:79:3a:58:31:63:b2:29:60:f1:cb:
         de:29:3a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:13:30 2026 by rpki-client