Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/he8yfcjlEou2Q6jtU6pxSeZVUVs.roa
File:                     he8yfcjlEou2Q6jtU6pxSeZVUVs.roa (raw, json)
Hash identifier:          fwYujC6cvhq/XSANnW/sg4CYZBgMwahXCsAsyuU5Ao8=
Subject key identifier:   85:EF:32:7D:C8:E5:12:8B:B6:43:A8:ED:53:AA:71:49:E6:55:51:5B
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       078D
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/he8yfcjlEou2Q6jtU6pxSeZVUVs.roa
Signing time:             Tue 31 Mar 2026 07:41:39 +0000
ROA not before:           Tue 31 Mar 2026 07:41:39 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        113.146.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1933 (0x78d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:41:39 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=85EF327DC8E5128BB643A8ED53AA7149E655515B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:54:f3:c6:b4:80:c7:f2:c2:87:de:bd:9b:e0:
                    90:37:5e:be:ed:04:70:8e:c7:d1:be:2e:30:d4:52:
                    79:6d:79:50:ce:3c:61:49:25:4b:e3:aa:d5:66:78:
                    72:54:61:7d:db:b8:ea:60:31:78:f4:d6:2d:ae:7e:
                    59:64:9f:88:55:e3:60:f1:c6:34:e0:11:0e:aa:75:
                    79:39:b5:f5:f5:52:72:b3:26:a6:76:b9:5d:11:10:
                    a8:2e:86:52:d6:b7:72:84:a5:14:7c:af:68:f8:dc:
                    76:42:c8:5c:f3:6a:7b:82:3b:1b:1f:c5:08:83:bd:
                    c2:1b:58:c5:f0:fe:07:1e:86:18:9f:02:de:e6:66:
                    6b:62:17:72:05:69:4e:2c:ed:9a:38:8b:92:60:6b:
                    b5:02:e5:0d:be:e3:d2:cb:cb:73:88:15:0c:b5:a8:
                    4a:ea:03:fe:18:26:6d:7e:2a:3a:a8:db:38:22:9a:
                    42:a0:8d:51:51:a8:9e:5e:51:0d:2c:39:1f:8a:9f:
                    35:ad:da:17:a4:a3:f2:8b:7c:c8:7a:fc:05:28:06:
                    c8:28:c7:2e:e1:85:e9:a3:38:2e:de:b0:99:20:6d:
                    9f:78:bd:9b:84:58:dc:81:f2:7b:e7:63:88:d0:0d:
                    34:c7:4b:d8:2b:f5:43:b9:e5:7b:df:ea:f6:0e:95:
                    c8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:EF:32:7D:C8:E5:12:8B:B6:43:A8:ED:53:AA:71:49:E6:55:51:5B
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/he8yfcjlEou2Q6jtU6pxSeZVUVs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.146.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         01:3b:ea:fc:f2:77:eb:47:24:63:11:f0:c4:5a:ba:0d:92:1e:
         78:c3:a3:0f:ac:51:19:b8:36:e8:f0:85:84:aa:e3:09:c4:05:
         bb:2d:f5:4d:61:e0:98:89:f4:45:5f:8c:3e:31:4f:e3:74:7e:
         a1:ff:4b:81:5d:d9:69:d0:f6:fc:62:c5:db:05:c1:19:d5:7e:
         e8:ff:d2:f5:1d:98:bf:83:30:a9:d8:d7:be:5b:a0:8b:86:de:
         f3:0e:ed:01:1f:eb:f3:fc:cd:ff:2e:16:6d:15:83:9b:bc:a8:
         7a:c8:b3:1c:db:30:44:b9:dd:ea:e7:9f:da:b0:64:90:7e:f7:
         2c:17:ac:5a:56:95:1a:3d:f9:e4:9a:c9:a5:78:56:35:11:f1:
         1f:2a:58:28:2d:34:fa:70:51:90:81:e0:36:4f:d8:5c:9d:23:
         08:3b:f0:a0:d8:46:66:6e:5d:d5:d3:69:09:3f:68:14:61:a9:
         16:da:76:ac:43:4b:9e:dc:53:12:33:33:55:31:a4:86:b2:61:
         8e:ad:7d:52:00:a2:1b:63:81:3f:72:a0:c8:6c:34:59:88:b2:
         ec:b6:36:fc:e5:50:b5:6c:43:dd:46:a3:ca:9b:0d:82:53:a6:
         59:c2:e2:69:cc:b9:70:76:04:26:6a:a9:82:ba:2f:e2:7f:bd:
         3f:18:10:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:47 2026 by rpki-client