Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/jvJpxo5_uD0grP6NDqQ6_bk7GvM.roa
File:                     jvJpxo5_uD0grP6NDqQ6_bk7GvM.roa (raw, json)
Hash identifier:          fo8z4jomi0briyTu6LOMN3od7+e/JQL7GGHucRY8cf0=
Subject key identifier:   8E:F2:69:C6:8E:7F:B8:3D:20:AC:FE:8D:0E:A4:3A:FD:B9:3B:1A:F3
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       086B
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/jvJpxo5_uD0grP6NDqQ6_bk7GvM.roa
Signing time:             Tue 31 Mar 2026 07:43:30 +0000
ROA not before:           Tue 31 Mar 2026 07:43:30 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        218.225.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2155 (0x86b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:43:30 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=8EF269C68E7FB83D20ACFE8D0EA43AFDB93B1AF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:19:ec:46:58:b4:a8:60:09:c7:38:c5:6c:85:
                    ef:78:13:bb:46:e4:4b:2e:bf:f6:d3:00:ce:3c:33:
                    e4:bb:fc:51:5f:c9:c3:f6:eb:ec:b1:e8:bc:3a:e2:
                    54:10:42:d5:90:69:03:f5:6e:8d:da:8e:eb:53:70:
                    04:d6:8b:cf:ca:58:86:e1:05:b7:eb:b6:1e:c1:7f:
                    ec:0f:e2:51:e2:e3:bd:67:d1:d1:20:62:03:81:b8:
                    05:f4:cb:95:0a:53:22:20:22:bf:54:ab:5c:d8:80:
                    b7:3c:3b:7a:08:0f:b1:5f:5c:c3:1e:21:92:6d:6c:
                    32:06:18:5f:69:af:ac:09:75:9b:ff:63:0b:0c:3d:
                    f2:aa:77:a6:14:89:06:2c:5a:15:21:5c:77:34:90:
                    a0:d6:f9:f4:16:7d:7a:3a:95:52:eb:53:91:3a:7f:
                    4b:b3:1a:3a:7b:63:aa:e5:d1:58:bc:f5:e0:97:64:
                    5d:21:99:91:b6:ed:23:25:c7:ac:c8:17:cc:f2:f3:
                    97:7f:06:31:db:60:13:8f:4d:83:2f:06:9d:a6:56:
                    2a:97:9c:a7:5a:04:9d:e7:e1:3c:da:a9:1a:ae:e8:
                    5e:0e:46:2d:25:fd:10:e4:06:a4:2a:21:c0:62:46:
                    d0:60:f2:3b:8f:a8:53:66:23:4e:56:95:8c:51:58:
                    41:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:F2:69:C6:8E:7F:B8:3D:20:AC:FE:8D:0E:A4:3A:FD:B9:3B:1A:F3
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/jvJpxo5_uD0grP6NDqQ6_bk7GvM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.225.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:8b:9a:bb:31:4e:e1:95:17:f4:c1:c6:4c:04:de:25:b8:cd:
         61:4a:4a:f0:58:b9:09:b2:5d:57:c5:f7:ea:8c:ca:ee:12:f7:
         65:48:fc:a2:b8:3f:4e:ef:bc:02:04:4e:d5:6f:67:0c:6a:b9:
         a7:63:9c:90:4e:a7:b4:02:51:a6:06:b2:a8:e7:12:a3:6e:17:
         86:53:91:21:f4:b5:68:e2:b9:f5:fc:ef:f6:97:9c:ba:31:cc:
         93:2e:48:67:a4:94:5b:ee:1d:8b:55:b1:44:5c:23:4a:f8:ae:
         c3:c9:69:83:9b:5b:48:83:99:88:40:45:46:8f:dc:83:07:d2:
         8d:95:fa:e0:44:db:03:57:5d:2b:1c:38:6e:2b:64:c1:90:ff:
         2b:2a:25:c0:77:bf:b9:08:a8:6c:b8:06:ab:94:87:a0:40:2b:
         85:5f:d6:17:f2:08:8b:ca:2c:cb:4c:9a:47:42:4c:b3:11:ae:
         c9:53:2b:4b:a7:41:fb:f2:ea:75:86:aa:b7:df:73:3d:3c:d0:
         1a:c0:7a:07:3f:4a:54:98:c5:fc:87:6b:a8:4a:8f:af:4b:cb:
         ac:b5:a5:16:e1:33:9a:b9:ad:5a:24:ee:da:ae:2d:0f:6b:d2:
         fe:05:71:09:85:6f:4c:cb:36:a7:b2:4d:e1:af:16:fe:77:a5:
         bf:6f:fe:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:15:56 2026 by rpki-client