Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/jpMx6JPwvQuZBKeNhx2v9cZfai8.roa
File:                     jpMx6JPwvQuZBKeNhx2v9cZfai8.roa (raw, json)
Hash identifier:          uWXmTnOWeRKBp5uPic/5+1/ROUO0CvJEw0Q6y+zCLPA=
Subject key identifier:   8E:93:31:E8:93:F0:BD:0B:99:04:A7:8D:87:1D:AF:F5:C6:5F:6A:2F
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       08AC
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/jpMx6JPwvQuZBKeNhx2v9cZfai8.roa
Signing time:             Tue 31 Mar 2026 07:44:01 +0000
ROA not before:           Tue 31 Mar 2026 07:44:01 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        210.238.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2220 (0x8ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:44:01 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=8E9331E893F0BD0B9904A78D871DAFF5C65F6A2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:db:74:63:b3:ed:35:7c:fa:7b:99:38:d4:ea:
                    53:54:4a:06:42:f7:13:62:7b:7e:e1:49:78:07:ce:
                    2b:8f:94:c3:e5:9e:b9:51:6c:10:c9:86:a8:69:7a:
                    82:69:25:25:6a:c7:71:6f:60:5c:30:19:08:bd:5b:
                    8d:35:2f:eb:46:b5:9f:45:07:40:90:4d:5b:61:e9:
                    6c:a8:fb:9b:92:6c:6a:39:21:f6:52:71:ba:21:03:
                    d7:20:34:4f:19:48:21:21:f0:57:cc:d9:d1:c1:db:
                    28:5e:ea:1f:c2:55:c0:21:22:37:79:ae:45:e0:3c:
                    24:42:46:5b:89:a9:b9:d6:71:44:20:53:5e:a2:cc:
                    cf:7a:fc:3d:aa:6a:41:21:8d:82:c2:3a:f4:32:0d:
                    76:8e:d9:b3:8a:03:e2:e2:3e:96:2f:53:2b:4b:e1:
                    5c:7a:b7:2f:50:ed:3a:5f:52:f8:81:64:55:35:1a:
                    4a:97:af:08:6d:1c:5b:40:f5:8c:0e:51:b9:57:c2:
                    06:37:db:31:4d:cd:45:58:e5:49:5e:03:1e:b3:78:
                    49:a4:2c:b8:fb:52:dd:f7:c0:26:55:c3:f1:0c:98:
                    f8:36:b4:f9:64:b0:27:b5:d6:e4:d2:bb:21:e2:59:
                    6d:c4:1e:08:3e:62:11:6a:d5:cf:d8:9b:ae:78:20:
                    93:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:93:31:E8:93:F0:BD:0B:99:04:A7:8D:87:1D:AF:F5:C6:5F:6A:2F
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/jpMx6JPwvQuZBKeNhx2v9cZfai8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.238.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         7b:fa:7b:ca:2b:60:c9:2c:1b:89:54:71:3e:6f:ba:2a:da:21:
         dc:b9:80:20:c2:ec:2f:c0:72:59:e8:ba:2e:13:b6:6b:02:8b:
         e0:57:51:6f:5b:e1:59:41:cc:ad:d5:30:8f:b3:5c:d0:42:4a:
         5d:69:b0:3b:e5:16:11:05:fb:16:f5:58:76:3a:0c:f3:f3:95:
         ad:55:10:96:50:c6:35:50:3b:b0:c7:18:3a:72:bf:82:a4:d2:
         24:3b:e9:21:81:94:f6:8c:f4:b4:79:cb:8a:63:f0:60:ca:95:
         f7:4f:12:01:f6:2f:1b:8d:c7:25:c8:e9:ed:58:9f:93:9e:f4:
         83:8f:2f:b8:0c:f8:fa:f8:05:cf:0f:2c:1e:d4:47:d1:0f:fc:
         97:b7:e2:fc:8f:02:9b:de:5f:55:f4:0e:b3:7d:4c:22:1e:d6:
         ca:3c:1b:11:53:4c:9a:38:4d:ff:56:a0:19:c1:fa:0e:a3:98:
         51:6f:06:54:10:bc:19:ce:d6:bd:c9:2d:d3:c4:57:b8:4a:74:
         0c:e6:b6:f4:9c:34:34:a3:de:a5:47:9c:09:ce:e1:eb:ff:1b:
         73:4b:f4:45:8d:8c:02:5c:33:31:53:76:f6:47:6f:2c:f5:67:
         fd:7e:f7:5c:34:f2:31:50:39:88:9e:64:c4:ae:86:97:21:c8:
         7e:e1:bf:81
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICCKwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw
NzQ0MDFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDhFOTMzMUU4OTNGMEJE
MEI5OTA0QTc4RDg3MURBRkY1QzY1RjZBMkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDI23Rjs+01fPp7mTjU6lNUSgZC9xNie37hSXgHziuPlMPlnrlR
bBDJhqhpeoJpJSVqx3FvYFwwGQi9W401L+tGtZ9FB0CQTVth6Wyo+5uSbGo5IfZS
cbohA9cgNE8ZSCEh8FfM2dHB2yhe6h/CVcAhIjd5rkXgPCRCRluJqbnWcUQgU16i
zM96/D2qakEhjYLCOvQyDXaO2bOKA+LiPpYvUytL4Vx6ty9Q7TpfUviBZFU1GkqX
rwhtHFtA9YwOUblXwgY32zFNzUVY5UleAx6zeEmkLLj7Ut33wCZVw/EMmPg2tPlk
sCe11uTSuyHiWW3EHgg+YhFq1c/Ym654IJMFAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUjpMx6JPwvQuZBKeNhx2v9cZfai8wHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTYxL2pwTXg2SlB3dlF1WkJLZU5oeDJ2OWNaZmFpOC5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAbS7kAwDQYJKoZIhvcNAQELBQADggEB
AHv6e8orYMksG4lUcT5vuiraIdy5gCDC7C/Aclnoui4TtmsCi+BXUW9b4VlBzK3V
MI+zXNBCSl1psDvlFhEF+xb1WHY6DPPzla1VEJZQxjVQO7DHGDpyv4Kk0iQ76SGB
lPaM9LR5y4pj8GDKlfdPEgH2LxuNxyXI6e1Yn5Oe9IOPL7gM+Pr4Bc8PLB7UR9EP
/Je34vyPApveX1X0DrN9TCIe1so8GxFTTJo4Tf9WoBnB+g6jmFFvBlQQvBnO1r3J
LdPEV7hKdAzmtvScNDSj3qVHnAnO4ev/G3NL9EWNjAJcMzFTdvZHbyz1Z/1+91w0
8jFQOYieZMSuhpchyH7hv4E=
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:45 2026 by rpki-client