Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/j4dSi0CqceM024aPphfWxiPXIpQ.roa
File:                     j4dSi0CqceM024aPphfWxiPXIpQ.roa (raw, json)
Hash identifier:          bozjUQrf+6LkLEbL3tnJndoxJdVb0QJ5BeaAHqHBUSM=
Subject key identifier:   8F:87:52:8B:40:AA:71:E3:34:DB:86:8F:A6:17:D6:C6:23:D7:22:94
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0913
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/j4dSi0CqceM024aPphfWxiPXIpQ.roa
Signing time:             Tue 31 Mar 2026 07:44:45 +0000
ROA not before:           Tue 31 Mar 2026 07:44:45 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        210.141.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2323 (0x913)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:44:45 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=8F87528B40AA71E334DB868FA617D6C623D72294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5f:87:db:e3:ab:a1:03:58:85:89:95:c4:99:
                    2d:94:0b:56:8b:ca:03:b2:1c:49:16:70:01:eb:2a:
                    28:1e:33:6e:10:c7:e0:3d:ad:d0:9a:ff:14:8e:e0:
                    32:70:ac:77:81:6e:60:7a:16:05:8e:d5:b8:2a:d0:
                    79:ac:08:9b:95:22:9f:41:79:11:5e:88:35:c0:8c:
                    dc:41:22:61:83:6e:02:5d:4e:00:6c:05:95:73:28:
                    cf:71:86:a9:da:9f:f6:a8:51:d5:42:cb:46:ee:20:
                    f9:8f:1b:5b:67:56:9e:5c:db:eb:89:75:3d:1f:18:
                    b3:8d:20:c0:19:ef:14:f0:88:9c:4e:fa:1f:b4:03:
                    8e:ad:c3:09:8f:34:b2:31:de:93:d4:28:99:f0:76:
                    b3:9e:3e:df:a6:1c:d3:84:b1:0e:95:63:6b:d9:37:
                    2e:29:e0:4d:99:be:9a:1f:c7:c3:e0:53:98:62:62:
                    8d:64:07:e6:df:6c:3c:78:bc:0f:64:40:52:4d:08:
                    86:28:c2:d6:19:2b:61:9b:9c:d1:40:e1:a6:be:c9:
                    2d:4b:00:54:7c:af:3b:75:25:03:1f:b2:67:00:41:
                    24:54:ec:cd:91:4d:c7:d1:e2:fa:c9:dc:b7:49:38:
                    b6:7d:2e:3a:9c:45:cc:91:73:75:33:b9:6f:9b:13:
                    5a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:87:52:8B:40:AA:71:E3:34:DB:86:8F:A6:17:D6:C6:23:D7:22:94
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/j4dSi0CqceM024aPphfWxiPXIpQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.141.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b3:c6:b8:54:b0:4f:5d:47:18:cd:b3:d3:55:92:a9:64:4a:6d:
         33:a3:af:ca:26:60:ae:9c:fb:f2:f1:12:94:a3:01:19:a4:4b:
         e5:db:ce:ba:7e:f6:3d:ad:b5:f1:72:f9:13:f1:b4:45:0b:b6:
         13:7e:06:75:3b:ce:1f:0a:83:e9:11:d5:15:09:89:0b:b4:e1:
         b1:88:15:bb:9a:af:0b:a5:30:04:46:87:7b:4e:a8:8e:24:92:
         d4:56:45:18:1e:e0:3d:a5:60:2b:e8:fe:d6:a0:e8:31:aa:0e:
         23:55:49:64:db:58:5d:e4:cf:f4:80:cb:df:69:f3:ed:12:48:
         ba:ba:88:6e:b4:4c:0e:ed:d8:05:85:46:7a:62:25:27:96:7d:
         0b:04:d7:91:cc:f9:86:fe:2a:47:bf:79:e7:de:cd:0e:d2:e4:
         06:ef:3e:ea:d2:c8:30:50:7e:f2:d5:26:73:19:76:cf:a5:a2:
         28:ae:11:93:fe:ff:71:e4:0e:f4:f9:46:63:19:42:4a:e2:1d:
         57:e3:0a:f1:6c:65:c7:1a:21:7d:90:57:16:aa:4c:01:43:d7:
         2e:e0:41:b2:6a:eb:7c:dd:cd:b8:74:82:65:16:02:2b:4c:55:
         81:1d:34:59:03:00:3f:88:cc:8a:ae:d3:90:4e:01:a3:c5:73:
         6c:15:18:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:12:30 2026 by rpki-client