Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/gzqiwPqnL5DP2xuk1Wr764oKuKQ.roa
File:                     gzqiwPqnL5DP2xuk1Wr764oKuKQ.roa (raw, json)
Hash identifier:          Ix8tOcSmjEYWM4G1WzYlIvvhzEepS3o/+w0n0F05c/I=
Subject key identifier:   83:3A:A2:C0:FA:A7:2F:90:CF:DB:1B:A4:D5:6A:FB:EB:8A:0A:B8:A4
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       08D8
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/gzqiwPqnL5DP2xuk1Wr764oKuKQ.roa
Signing time:             Tue 31 Mar 2026 07:44:22 +0000
ROA not before:           Tue 31 Mar 2026 07:44:22 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        211.10.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2264 (0x8d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:44:22 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=833AA2C0FAA72F90CFDB1BA4D56AFBEB8A0AB8A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c3:49:b7:81:e5:e2:f5:c4:d6:c6:de:89:a6:
                    15:a5:bd:a7:38:99:75:ea:7c:b0:3f:d6:fc:ca:56:
                    83:b9:f3:ce:ad:26:f3:22:75:fa:d5:8d:01:b2:f1:
                    74:ad:2d:45:27:93:54:aa:eb:01:c2:3c:ac:09:42:
                    c5:bd:75:4b:91:b6:55:e2:92:1e:b5:58:5d:94:48:
                    9c:d5:75:24:05:4e:7d:bb:53:21:b8:9d:3f:69:17:
                    b6:10:ba:6d:c1:d3:d4:ab:41:ef:ab:4d:ea:24:a4:
                    8f:4f:43:33:70:88:d9:1c:d3:fd:19:25:23:9b:50:
                    fa:8e:a3:7d:f3:eb:9a:d6:fd:6a:3b:b8:76:59:50:
                    04:00:13:21:e9:5f:89:8b:f1:0f:cb:c7:40:d5:23:
                    8d:9f:63:d8:d1:e2:80:9a:9c:02:ae:05:78:5b:53:
                    1b:0e:07:d5:de:eb:1a:f5:91:10:13:b4:0e:f1:1a:
                    11:50:a8:c2:fc:cb:a6:22:82:2c:c8:5b:20:90:81:
                    d4:d3:a1:6c:62:2a:96:6b:0b:c3:43:9e:45:5c:ab:
                    77:1b:95:4b:71:b5:ab:8f:90:eb:85:1f:f3:35:0f:
                    41:82:fb:89:3e:4b:d2:2c:c4:82:fb:de:9b:08:8c:
                    55:66:43:cd:72:cc:d3:75:76:d1:75:24:42:2c:29:
                    8d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:3A:A2:C0:FA:A7:2F:90:CF:DB:1B:A4:D5:6A:FB:EB:8A:0A:B8:A4
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/gzqiwPqnL5DP2xuk1Wr764oKuKQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.10.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:2d:e3:ac:01:31:77:a2:fe:74:88:0e:e5:4d:7d:61:52:eb:
         28:0a:db:ef:44:61:c6:3b:d7:be:77:57:b9:b0:69:eb:44:05:
         64:9c:49:5f:ef:78:ed:62:0d:0a:67:3e:b3:0d:98:86:af:5c:
         e1:e9:97:6b:7a:8d:04:26:ad:c9:70:da:40:46:09:58:06:73:
         b5:e3:b7:a7:bb:61:80:09:44:98:44:fb:08:0f:d5:de:f1:ab:
         6a:d4:dd:f2:4e:0f:c2:7f:77:31:af:fe:e9:99:a6:68:36:ce:
         ea:90:b7:7f:5e:4f:dd:a7:59:ce:4c:f6:a5:2a:4e:af:b0:fd:
         92:a6:db:ca:9a:87:3d:27:1b:f1:eb:f6:b6:92:cb:86:67:e1:
         9a:b7:6a:a2:59:2a:97:3b:40:4f:e7:1c:85:1a:6d:b6:63:28:
         57:a2:30:9b:c0:f8:42:68:29:bb:01:9e:0b:44:7d:cd:06:a3:
         71:12:cc:5a:87:c8:8c:14:77:cc:96:cf:c4:f6:69:dd:4d:b0:
         77:22:b4:a0:fc:e6:6f:7c:80:34:d2:d3:49:a6:6c:73:0f:70:
         3b:82:2f:44:35:be:4b:b2:ce:69:43:89:0a:c1:13:b8:3a:38:
         bc:fe:2f:9b:ee:ae:de:8a:f9:e7:ff:82:33:99:49:8f:f3:4b:
         2c:73:58:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:33 2026 by rpki-client