Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/jrYDmelFkUZxwMlYZD-O8gEtQB0.roa
File:                     jrYDmelFkUZxwMlYZD-O8gEtQB0.roa (raw, json)
Hash identifier:          KjoVvDuJhTSCDPF24bFsD1uQRyqQHqNk+Mg0kJrfMvg=
Subject key identifier:   8E:B6:03:99:E9:45:91:46:71:C0:C9:58:64:3F:8E:F2:01:2D:40:1D
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0785
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/jrYDmelFkUZxwMlYZD-O8gEtQB0.roa
Signing time:             Tue 31 Mar 2026 07:41:35 +0000
ROA not before:           Tue 31 Mar 2026 07:41:35 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        113.152.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1925 (0x785)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:41:35 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=8EB60399E945914671C0C958643F8EF2012D401D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:32:6a:c3:6c:0b:ea:62:aa:f1:29:31:2f:d3:
                    3c:f8:6d:ab:33:37:a5:ad:8e:2c:4b:96:74:2a:f2:
                    37:0a:55:c9:e3:18:60:d6:64:7f:bc:99:39:7b:f1:
                    00:95:f9:6c:df:6d:a7:e5:7a:b7:fd:e6:31:92:fa:
                    fe:f5:3f:55:76:e2:33:89:35:ed:44:d6:39:d3:ff:
                    c0:e3:d2:fd:7e:41:e9:33:c5:01:16:ab:ee:49:94:
                    df:3c:a9:28:29:44:94:e7:e2:a6:09:72:95:6e:38:
                    fd:5b:f4:7d:f1:78:c3:a2:34:da:40:fa:3b:13:64:
                    52:bb:2e:8e:d1:c4:02:06:57:db:57:4a:5d:5b:75:
                    2a:4e:56:a8:c8:77:e0:b7:f5:ba:97:22:69:db:d6:
                    d7:0e:3a:60:38:9c:a8:0b:1e:d0:34:bc:65:be:b9:
                    8a:22:57:4d:f3:54:aa:34:a1:2c:b0:62:1a:df:14:
                    3f:2a:e1:75:24:86:3a:b2:31:0e:61:d0:26:d4:6f:
                    18:92:0f:35:ec:2a:4d:b7:dd:a2:75:45:db:70:ba:
                    6c:6a:5e:c4:d5:aa:1b:c2:21:74:8f:56:e6:74:c9:
                    ff:59:8c:ea:5f:5d:a2:d1:3a:8c:3b:b3:24:58:c0:
                    fa:6a:71:49:9c:c7:ac:5d:52:76:ac:7a:50:0d:a8:
                    7b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:B6:03:99:E9:45:91:46:71:C0:C9:58:64:3F:8E:F2:01:2D:40:1D
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/jrYDmelFkUZxwMlYZD-O8gEtQB0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.152.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         15:e1:ae:6f:0c:c3:7d:55:50:17:1f:09:ad:d1:64:14:8d:a3:
         73:17:5a:ae:46:b1:89:2e:c1:04:02:08:ca:86:39:89:0f:95:
         9f:33:5d:ad:77:59:29:13:18:24:c5:5a:dd:70:80:61:0e:d6:
         bc:5c:c0:0e:ce:6e:7d:56:7f:9b:94:ca:22:df:3f:50:9f:48:
         d9:99:e1:90:00:a5:43:dc:2e:e1:79:9c:71:89:0b:3e:18:fb:
         a0:d6:25:83:7b:51:a7:83:54:c0:58:94:bc:01:93:da:25:a0:
         85:62:56:f3:1e:f5:20:55:ac:b7:86:8e:99:c9:69:57:e0:5f:
         8d:f6:cc:6d:f1:ff:dc:67:1b:b4:39:9e:f0:0b:ca:56:19:b9:
         93:00:2e:bf:8f:95:bf:2f:11:e8:bf:f4:31:57:ca:23:da:cc:
         b8:70:5e:8c:ed:0d:f6:d9:96:23:e7:53:9c:7c:56:bf:da:12:
         7b:1a:2b:2d:a7:e4:e2:79:5f:96:7b:46:bd:51:42:de:3c:c2:
         d2:6e:3e:f8:f7:f1:e3:e5:b8:77:d1:ee:9e:ba:3d:aa:b6:30:
         29:b3:84:7f:74:14:3d:21:2a:7a:e1:52:9d:13:cc:b9:45:10:
         4d:b0:d3:61:d8:5c:5e:6e:ae:8a:6b:e5:0e:39:92:3f:ec:01:
         d4:ec:b8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:18:50 2026 by rpki-client