Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/imQkSKoxS21qBPxhP02yFs-A4Zk.roa
File:                     imQkSKoxS21qBPxhP02yFs-A4Zk.roa (raw, json)
Hash identifier:          ua5TTEGo086oTp96tM5Ua8jci2/IUHVG8bxFyAVxdU4=
Subject key identifier:   8A:64:24:48:AA:31:4B:6D:6A:04:FC:61:3F:4D:B2:16:CF:80:E1:99
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0838
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/imQkSKoxS21qBPxhP02yFs-A4Zk.roa
Signing time:             Tue 31 Mar 2026 07:43:03 +0000
ROA not before:           Tue 31 Mar 2026 07:43:03 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        113.152.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2104 (0x838)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:43:03 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=8A642448AA314B6D6A04FC613F4DB216CF80E199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:8e:a6:56:fa:71:7a:c2:e5:13:4d:9e:05:28:
                    f6:a2:17:19:dd:55:b8:29:fd:35:48:5f:b3:a7:46:
                    b9:30:58:3d:8f:a3:e8:31:0b:85:67:e9:6f:7f:19:
                    81:7a:2c:0e:b6:f5:e3:73:e6:37:87:09:c6:c4:2d:
                    c9:6d:e2:ce:68:00:57:94:0b:0d:f6:d1:43:c2:8e:
                    e1:e4:18:aa:73:7a:85:fd:49:9a:3c:c3:de:eb:b2:
                    03:31:0d:47:13:c4:6e:d9:30:1e:35:97:61:7d:36:
                    87:40:10:a6:af:8b:e1:cb:22:f8:e6:5d:f4:e2:b8:
                    76:20:31:08:15:0f:d4:68:71:81:ff:bb:4e:64:d4:
                    bb:30:33:9c:ac:e9:74:fc:a4:b9:cd:87:a1:6b:2b:
                    bf:c1:d7:6f:75:4b:ef:ae:08:65:6d:0f:a1:95:97:
                    aa:f8:97:43:6a:a5:f6:62:70:ed:b2:28:d8:e2:97:
                    c6:56:48:79:ff:b3:74:c9:01:40:11:1a:fc:ad:ad:
                    56:91:bb:b9:97:70:17:63:6d:f4:a2:ce:cf:f8:d2:
                    31:04:35:8f:8a:e4:e6:b2:c6:24:9f:68:ba:aa:ff:
                    ef:88:67:46:ac:d8:f8:19:a3:1b:c2:24:44:c9:37:
                    42:40:7c:6d:af:e1:d3:3d:26:a8:43:7c:0b:cf:d6:
                    ea:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:64:24:48:AA:31:4B:6D:6A:04:FC:61:3F:4D:B2:16:CF:80:E1:99
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/imQkSKoxS21qBPxhP02yFs-A4Zk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.152.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7a:7a:b7:37:64:d7:b8:ff:41:4c:32:22:e4:57:1c:d7:eb:a3:
         55:8c:56:00:e5:ab:8e:ee:d0:7e:85:cd:f5:38:05:9a:36:40:
         a8:dd:fd:3a:55:86:00:a6:3e:55:07:8e:0d:a5:49:e4:41:cc:
         f4:82:23:e6:b8:e8:0b:43:58:de:8d:db:12:32:d9:d4:bc:3e:
         31:4e:7c:d8:8f:db:0d:aa:2d:dd:3a:08:3a:04:d2:b4:07:9a:
         48:a3:b7:b2:0e:41:30:44:23:ce:87:f0:c4:49:6d:76:4e:34:
         14:4c:32:e8:00:f6:ff:04:61:37:9d:0e:9f:82:fc:d0:de:cc:
         82:9a:94:44:55:47:d3:2f:05:50:04:08:cd:b9:60:ff:fe:67:
         07:26:b3:34:b3:1b:a8:00:4c:4e:30:5f:9d:79:7e:6e:1a:fb:
         e7:bc:e2:da:53:41:9a:06:02:7b:aa:d1:2a:07:c8:1b:9a:dc:
         09:95:58:b0:8e:04:d8:52:be:26:6a:60:8d:e0:3f:a0:3d:c9:
         5f:f7:1e:ea:ce:f3:e5:92:11:7d:c2:a0:7f:d8:db:6d:39:5f:
         82:fd:38:5c:70:6e:c4:5c:ba:4a:a6:72:46:c3:7a:1c:b8:b9:
         11:72:49:a8:a0:2c:3f:cd:1a:c2:18:76:9d:83:5e:db:32:76:
         ac:cf:f5:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:32 2026 by rpki-client