Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/lvH54I8GIrh2tuU6y8alJj4bQJU.roa
File:                     lvH54I8GIrh2tuU6y8alJj4bQJU.roa (raw, json)
Hash identifier:          A0GwvFumIQHhvurOFSjwBeaA64zL4R2w9zC5ZjHkEwE=
Subject key identifier:   96:F1:F9:E0:8F:06:22:B8:76:B6:E5:3A:CB:C6:A5:26:3E:1B:40:95
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       07F7
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/lvH54I8GIrh2tuU6y8alJj4bQJU.roa
Signing time:             Tue 31 Mar 2026 07:42:30 +0000
ROA not before:           Tue 31 Mar 2026 07:42:30 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        113.157.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2039 (0x7f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:42:30 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=96F1F9E08F0622B876B6E53ACBC6A5263E1B4095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:85:b9:1b:2a:11:06:ce:55:a1:17:86:c0:a0:
                    3f:bd:5c:ee:1c:f6:c7:c6:fb:8d:34:5b:89:32:40:
                    3e:0d:6f:00:8f:01:d3:5e:1b:a7:fc:9f:f8:96:9a:
                    3d:0e:c3:fc:42:0a:2a:d5:07:f1:0f:d7:5a:88:6d:
                    a1:d5:e4:a7:17:77:22:8e:cc:1b:c4:38:5e:b0:93:
                    1a:ce:15:c3:01:74:73:24:11:81:36:27:12:c2:db:
                    9f:4b:62:87:14:3a:7c:d3:64:34:57:aa:f2:41:97:
                    35:5d:94:40:76:b0:87:ae:ee:69:11:83:d7:13:d5:
                    db:28:15:3a:00:36:8f:5d:98:5a:43:d0:79:d8:6d:
                    41:88:2e:69:c6:01:b3:eb:25:41:3d:2b:39:07:32:
                    5f:8f:2d:6c:d6:cc:19:c5:89:7e:69:81:a2:a7:5e:
                    67:14:9a:bd:16:aa:fb:e8:22:21:f5:ed:eb:9f:71:
                    57:46:2c:04:d9:84:73:9f:01:de:6f:84:98:ee:b3:
                    20:f0:18:56:d5:42:b5:6b:93:ce:19:26:57:22:f5:
                    2c:be:31:d8:0e:4b:e0:d4:50:6d:e9:30:65:6a:db:
                    06:8e:b4:8a:9a:24:91:00:35:33:5f:ec:7b:8c:6e:
                    b3:cd:6e:f3:a3:c7:4e:09:9b:02:82:97:c5:39:d7:
                    4d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:F1:F9:E0:8F:06:22:B8:76:B6:E5:3A:CB:C6:A5:26:3E:1B:40:95
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/lvH54I8GIrh2tuU6y8alJj4bQJU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.157.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         aa:3b:26:c3:34:87:2a:3b:62:01:c3:bd:3b:38:2c:c2:8f:99:
         98:b5:10:25:23:e3:52:74:39:d6:da:21:f6:ce:e1:d1:c3:22:
         a6:d7:22:8f:d2:02:c7:80:35:5b:f0:6b:8b:d2:f1:97:28:17:
         ac:37:c0:5e:b8:7a:f9:0d:41:19:fb:59:d8:2a:2a:8e:d6:cc:
         6e:c4:d0:7e:2f:08:7c:3d:a4:0b:3b:81:aa:3f:45:bd:88:93:
         ec:fb:ae:e7:2d:a3:f7:01:4e:52:11:a7:8c:65:a6:13:7d:09:
         23:43:95:3d:30:cb:24:77:e7:2f:e8:be:0d:37:39:12:aa:94:
         ce:36:14:25:75:c3:00:4b:a2:fa:72:18:da:5e:b3:2c:2a:8e:
         ef:00:3a:37:31:db:1c:bf:d3:ca:ff:6a:fd:af:be:cf:e8:99:
         ef:5d:79:b2:64:1c:df:09:8d:3a:05:fe:6f:6e:5e:1e:a4:b9:
         f3:06:a5:31:4d:92:59:55:59:1b:5a:86:e3:b3:69:d7:84:6f:
         45:43:ee:7d:53:05:1c:47:ef:5e:d4:14:6e:01:d4:ac:c5:99:
         6f:34:ba:bd:b3:51:99:db:f0:fb:2f:6b:ab:95:3e:ab:59:c0:
         db:4a:b6:5e:0e:c1:3e:cb:7e:70:be:7f:43:eb:ca:78:ab:da:
         71:e0:07:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:58:08 2026 by rpki-client