Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/mFhXX6qNk8HDsD0IQruTkBAYaPM.roa
File:                     mFhXX6qNk8HDsD0IQruTkBAYaPM.roa (raw, json)
Hash identifier:          S6GvkqIAZOjgd7hIXab31G3BGsghA2+HsIqg1eCtP48=
Subject key identifier:   98:58:57:5F:AA:8D:93:C1:C3:B0:3D:08:42:BB:93:90:10:18:68:F3
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       07B9
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/mFhXX6qNk8HDsD0IQruTkBAYaPM.roa
Signing time:             Tue 31 Mar 2026 07:41:57 +0000
ROA not before:           Tue 31 Mar 2026 07:41:57 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        113.149.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1977 (0x7b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:41:57 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=9858575FAA8D93C1C3B03D0842BB9390101868F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a1:2e:7d:7d:90:b7:60:09:15:d1:b5:f7:ef:
                    8a:b5:a9:db:c9:b9:35:69:77:39:94:e7:99:3b:68:
                    4f:ae:2a:5c:38:63:c2:6e:41:a7:85:75:e1:39:0b:
                    eb:b6:38:f0:71:ee:6a:35:3d:a6:c7:63:50:8c:c9:
                    71:a5:d7:2b:06:bf:cf:c1:fa:6e:07:d7:5f:0a:45:
                    6a:c5:d8:58:f6:2f:e4:aa:5b:10:dd:70:9d:1c:8e:
                    bd:67:08:51:dc:ef:32:25:01:5c:28:e0:96:a2:fd:
                    fb:ae:f3:64:b1:74:9f:d2:9c:96:83:13:82:cf:ff:
                    5b:48:92:c0:89:18:9f:16:a8:c6:20:1b:2f:72:5d:
                    09:ca:d8:64:13:3f:c4:05:52:c3:dd:5f:80:81:ad:
                    f2:66:e3:74:be:67:39:be:6f:d5:cd:a1:38:21:05:
                    17:28:e0:f4:23:74:b2:7b:1a:ba:6c:4f:fd:82:58:
                    2d:bb:36:42:76:f3:fc:a7:3d:0e:19:2e:40:4e:36:
                    8e:3a:d2:bc:19:8d:d7:ff:f4:9a:b5:25:4f:ff:d8:
                    7d:65:2d:f7:a7:20:21:2c:38:1e:62:8c:a6:05:11:
                    2a:fa:15:cc:ed:93:36:41:73:07:56:02:08:d0:d7:
                    b0:fe:47:9b:2d:ab:41:bb:c2:f5:30:1f:3f:b7:fc:
                    08:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:58:57:5F:AA:8D:93:C1:C3:B0:3D:08:42:BB:93:90:10:18:68:F3
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/mFhXX6qNk8HDsD0IQruTkBAYaPM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.149.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3b:0f:38:f0:05:67:de:23:9b:48:66:76:4d:c8:93:e6:cf:eb:
         fb:fb:3c:c4:a8:36:02:a0:ea:92:70:4a:61:89:04:0f:c5:f7:
         ce:bd:ba:d4:dd:2f:a9:f4:79:8d:aa:20:44:e9:97:8f:9f:6f:
         e9:67:e3:37:21:3f:41:31:f1:fb:01:51:2f:05:94:d0:30:0a:
         11:64:9f:05:df:77:6a:99:b3:95:ff:6e:41:f6:26:ef:89:19:
         02:15:3b:0d:84:5d:f3:93:c3:8f:5b:8b:94:0f:d8:0c:25:7a:
         a8:5d:e0:06:23:d3:af:53:01:af:c8:4b:bd:cc:81:cd:f0:92:
         43:7b:e9:5f:7c:97:47:1d:b8:6d:6b:9a:c3:8a:85:5f:0c:2b:
         b0:88:e2:09:93:33:27:79:8d:9e:0e:1c:65:11:cb:f5:26:75:
         2e:f8:c8:96:43:2a:c1:28:d4:83:b1:24:ef:81:c4:f9:f9:2a:
         4a:74:14:d1:75:66:15:e7:00:6f:9d:ae:f8:1e:fd:5a:53:a9:
         62:81:d7:b1:ef:b2:c3:5c:04:38:79:0a:50:66:d2:49:7c:7f:
         9a:9e:07:c4:e0:17:2d:e5:d3:1a:e0:6b:3c:4e:cc:84:1f:6e:
         58:53:fc:b9:1c:0a:1c:cc:62:a9:8a:a7:93:ba:97:09:12:6d:
         fd:69:5e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:13:18 2026 by rpki-client