Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/jwSrRFckXE9zDWnc829O4LMljFg.roa
File:                     jwSrRFckXE9zDWnc829O4LMljFg.roa (raw, json)
Hash identifier:          6hSroLq9IH1k7MuibBTEPnnB9Pmb05+9wUyd+WtV2HI=
Subject key identifier:   8F:04:AB:44:57:24:5C:4F:73:0D:69:DC:F3:6F:4E:E0:B3:25:8C:58
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0818
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/jwSrRFckXE9zDWnc829O4LMljFg.roa
Signing time:             Tue 31 Mar 2026 07:42:47 +0000
ROA not before:           Tue 31 Mar 2026 07:42:47 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        27.83.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2072 (0x818)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:42:47 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=8F04AB4457245C4F730D69DCF36F4EE0B3258C58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:88:8d:57:45:be:a4:64:8b:80:89:b7:d8:87:
                    ab:da:74:c7:27:d6:85:ff:a5:8f:ba:ae:f1:30:6d:
                    2e:b5:09:f7:03:e8:89:73:da:ca:7a:bc:e0:d5:15:
                    ef:bf:fc:a0:15:af:7a:21:53:5a:9e:50:f9:fe:14:
                    57:9c:44:a2:f6:19:82:04:f4:9f:6f:9f:1d:69:5f:
                    c3:bb:48:fe:38:bf:e3:a0:af:98:d1:27:79:87:72:
                    7f:bc:b1:81:6d:a6:d0:10:b0:73:7b:ac:c7:67:3d:
                    86:2c:b1:72:75:26:c9:87:2a:b1:e1:35:8e:d9:b2:
                    50:00:4f:3a:0c:07:2b:b7:8d:e9:58:36:a1:42:3a:
                    f7:41:57:dc:ce:54:71:ed:ee:51:ca:94:bd:24:c5:
                    04:94:3c:2f:73:4d:da:98:a5:2b:69:ed:b4:69:c4:
                    40:d8:be:9e:d7:ca:6e:28:5a:b4:a8:ef:92:ed:9d:
                    7e:4f:aa:53:54:fa:b7:12:86:92:50:f0:f4:18:af:
                    5b:f4:98:04:1e:b3:24:35:c2:4c:d6:72:e1:ae:12:
                    34:a2:0c:d0:ac:20:e5:0b:d9:47:0f:f8:c3:d1:6a:
                    f7:65:49:91:b4:33:a7:f7:f2:9f:21:ea:06:86:51:
                    a7:eb:ba:67:c6:ad:99:af:ec:fd:67:14:63:67:99:
                    f6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:04:AB:44:57:24:5C:4F:73:0D:69:DC:F3:6F:4E:E0:B3:25:8C:58
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/jwSrRFckXE9zDWnc829O4LMljFg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.83.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5f:ec:0d:89:b0:a0:28:e2:1a:1f:32:ae:28:40:6e:ff:97:0e:
         84:0a:54:a7:0a:02:86:87:a4:5b:1a:44:ff:73:35:80:de:fe:
         e4:aa:55:37:a8:fb:60:47:fa:7a:ba:4b:f0:a7:8d:d6:8b:a4:
         6b:42:f6:e7:eb:5e:c5:c2:bc:43:72:8a:e5:5c:27:1e:e4:4b:
         0e:55:10:27:15:fd:c6:f2:6d:63:1e:49:1f:61:02:b4:d4:8a:
         0c:94:38:0b:b3:5b:84:b5:c4:4d:39:5b:0f:60:d3:d0:39:dc:
         71:51:09:31:22:f0:57:03:3c:71:f4:82:03:c5:64:1b:56:7d:
         74:ac:42:f6:c5:a2:d0:c0:2b:60:b5:d4:cb:cc:e5:3d:9e:4e:
         27:78:74:16:10:b0:ea:06:95:58:c1:85:49:8d:ac:ba:b0:68:
         f3:10:ff:61:79:35:74:98:c4:74:41:37:f9:f1:ba:b9:a7:23:
         74:ee:9b:32:db:14:81:df:26:32:78:14:af:bf:de:ef:9a:c3:
         c7:98:e2:45:85:5d:5d:ba:ed:f0:5f:2f:9f:58:38:7c:40:2e:
         f8:fd:f5:7e:bb:0e:d1:66:dd:50:dc:97:65:7a:25:9b:be:44:
         d4:3c:fa:88:ba:37:e8:63:e3:1b:09:e6:98:96:4a:b5:63:0a:
         a2:09:53:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:13:26 2026 by rpki-client