Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/idOdcnFQLW31MyV3vknRc6tIxhQ.roa
File:                     idOdcnFQLW31MyV3vknRc6tIxhQ.roa (raw, json)
Hash identifier:          hLKkZvmR8lO6Y7n8FHbWes+/5xR4OyNQ1T6W6ZVr7/g=
Subject key identifier:   89:D3:9D:72:71:50:2D:6D:F5:33:25:77:BE:49:D1:73:AB:48:C6:14
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0782
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/idOdcnFQLW31MyV3vknRc6tIxhQ.roa
Signing time:             Tue 31 Mar 2026 07:41:33 +0000
ROA not before:           Tue 31 Mar 2026 07:41:33 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        175.108.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1922 (0x782)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:41:33 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=89D39D7271502D6DF5332577BE49D173AB48C614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:24:f9:4b:47:eb:a3:56:0d:70:73:53:90:f0:
                    79:de:a3:e5:2b:ca:73:55:74:7f:12:e6:2a:20:04:
                    61:4a:cb:9f:28:5b:f3:ea:8d:32:ff:49:bf:d7:b2:
                    13:6a:af:88:cd:34:1f:8f:c6:56:96:40:c8:49:2a:
                    cd:0b:b3:fe:39:c8:ad:38:2f:dc:11:a6:d7:0c:21:
                    87:0f:d5:a1:75:72:48:11:f8:75:6f:b8:fb:04:55:
                    51:64:dd:f8:b3:22:fb:b7:d9:a7:02:07:cd:bf:93:
                    56:cf:ca:07:e2:36:ba:6a:87:ac:b6:b6:5a:f9:e1:
                    07:7a:d8:fe:6e:6f:4b:2f:34:19:c9:3d:3d:92:35:
                    8e:ee:4f:50:84:55:62:a3:9f:4c:ee:cb:e6:8a:9e:
                    18:9e:59:d4:75:95:bd:41:50:e3:ab:48:ff:b9:c1:
                    1d:e4:5f:ae:ed:dd:cc:64:62:fe:43:57:33:78:e4:
                    72:7d:53:32:d2:75:8a:cd:91:9c:de:11:35:3f:53:
                    5e:6f:e5:12:53:24:83:bc:f6:33:77:c3:b8:1a:a6:
                    18:a1:87:b2:c7:d8:5c:84:59:15:4a:d4:84:c1:06:
                    eb:7d:d5:a4:be:23:5d:17:51:2d:89:fd:8d:72:4a:
                    4b:07:13:5c:02:7d:89:af:3c:df:bb:00:d1:50:b9:
                    fe:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:D3:9D:72:71:50:2D:6D:F5:33:25:77:BE:49:D1:73:AB:48:C6:14
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/idOdcnFQLW31MyV3vknRc6tIxhQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.108.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ab:ce:eb:69:44:32:7c:05:90:cc:1e:36:80:36:8b:fe:f9:6d:
         b1:30:9a:f9:78:20:ec:66:06:5c:cf:c2:f4:68:d0:77:04:17:
         33:56:42:5d:f7:da:bb:a1:b1:db:42:b4:46:d8:d8:e0:31:74:
         b8:01:f3:34:3d:01:49:d0:bb:4f:fc:df:55:a0:44:33:f0:24:
         fa:99:b6:bf:3c:8d:e6:7c:0f:7c:e0:7b:d8:6f:0d:5d:76:fd:
         52:b6:35:2d:71:fa:4d:c9:72:fa:64:88:89:4c:09:3a:ec:9b:
         46:2d:f0:a1:7a:35:d6:57:78:8d:97:ec:36:5e:4e:0c:ea:a1:
         70:10:23:c8:7a:3d:1c:a7:07:69:61:21:57:51:3c:a8:15:89:
         14:97:59:c4:11:74:64:69:84:d5:2a:fc:e7:2d:c5:cf:c6:17:
         d2:d1:34:78:65:b2:df:cd:01:04:06:92:19:1a:85:9e:ff:cc:
         68:bd:36:15:81:04:a4:39:48:cc:85:a5:05:3b:06:27:8b:5f:
         6c:c7:f2:ba:13:68:f2:b3:4f:33:2e:18:2f:92:48:2a:f4:f8:
         d5:a0:3d:62:60:6c:5b:2c:c0:ff:c5:22:66:92:e0:9d:1f:f7:
         e5:d4:07:ef:60:f0:b7:ea:a0:36:04:3d:80:27:45:fa:df:61:
         d5:a4:d0:db
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgICB4IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw
NzQxMzNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDg5RDM5RDcyNzE1MDJE
NkRGNTMzMjU3N0JFNDlEMTczQUI0OEM2MTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCtJPlLR+ujVg1wc1OQ8Hneo+UrynNVdH8S5iogBGFKy58oW/Pq
jTL/Sb/XshNqr4jNNB+PxlaWQMhJKs0Ls/45yK04L9wRptcMIYcP1aF1ckgR+HVv
uPsEVVFk3fizIvu32acCB82/k1bPygfiNrpqh6y2tlr54Qd62P5ub0svNBnJPT2S
NY7uT1CEVWKjn0zuy+aKnhieWdR1lb1BUOOrSP+5wR3kX67t3cxkYv5DVzN45HJ9
UzLSdYrNkZzeETU/U15v5RJTJIO89jN3w7gaphihh7LH2FyEWRVK1ITBBut91aS+
I10XUS2J/Y1ySksHE1wCfYmvPN+7ANFQuf4FAgMBAAGjggHYMIIB1DAdBgNVHQ4E
FgQUidOdcnFQLW31MyV3vknRc6tIxhQwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTYxL2lkT2RjbkZRTFczMU15VjN2a25SYzZ0SXhoUS5yb2EwHgYI
KwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwCvbDANBgkqhkiG9w0BAQsFAAOCAQEA
q87raUQyfAWQzB42gDaL/vltsTCa+Xgg7GYGXM/C9GjQdwQXM1ZCXffau6Gx20K0
RtjY4DF0uAHzND0BSdC7T/zfVaBEM/Ak+pm2vzyN5nwPfOB72G8NXXb9UrY1LXH6
Tcly+mSIiUwJOuybRi3woXo11ld4jZfsNl5ODOqhcBAjyHo9HKcHaWEhV1E8qBWJ
FJdZxBF0ZGmE1Sr85y3Fz8YX0tE0eGWy380BBAaSGRqFnv/MaL02FYEEpDlIzIWl
BTsGJ4tfbMfyuhNo8rNPMy4YL5JIKvT41aA9YmBsWyzA/8UiZpLgnR/35dQH72Dw
t+qgNgQ9gCdF+t9h1aTQ2w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:13:24 2026 by rpki-client