Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/mPTtQm4BfBPnHLoHIZqUBK0aLkI.roa
File:                     mPTtQm4BfBPnHLoHIZqUBK0aLkI.roa (raw, json)
Hash identifier:          h4X3NlJQ2hwi/Pd0K+WnIHag57w2Jv/ucpIzsRsmUgs=
Subject key identifier:   98:F4:ED:42:6E:01:7C:13:E7:1C:BA:07:21:9A:94:04:AD:1A:2E:42
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0800
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/mPTtQm4BfBPnHLoHIZqUBK0aLkI.roa
Signing time:             Tue 31 Mar 2026 07:42:36 +0000
ROA not before:           Tue 31 Mar 2026 07:42:36 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        203.140.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2048 (0x800)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:42:36 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=98F4ED426E017C13E71CBA07219A9404AD1A2E42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d2:52:e6:e8:c6:34:35:3c:97:5a:5f:98:56:
                    ca:5a:56:83:e9:d5:a8:96:36:23:9c:33:07:a9:1f:
                    e2:2e:c5:a5:5f:79:fa:13:cd:73:db:08:5f:d5:35:
                    2f:4b:5c:02:0b:56:88:0a:1c:aa:84:f5:d7:19:10:
                    46:b6:a2:01:99:e0:e3:00:2c:4a:56:19:36:f5:3d:
                    14:77:ea:75:d3:89:0f:e5:b0:b7:3a:d5:ac:eb:3f:
                    58:0c:f4:77:7d:5f:59:53:f8:a9:db:62:b9:d6:24:
                    b5:16:8b:fd:80:c0:87:45:a9:ee:15:2d:43:34:3b:
                    85:19:af:0d:75:ac:4c:52:d2:52:2d:14:0f:70:e7:
                    fe:d6:26:8b:62:9d:a2:8b:cf:4d:9e:85:c8:b9:e8:
                    f6:2a:56:4a:11:f3:19:3c:03:53:16:ac:8e:04:88:
                    16:b0:a6:47:9f:84:c1:8d:b1:c2:0e:ff:66:d8:08:
                    44:13:46:ea:ef:d2:06:5c:ce:6a:60:c7:8f:44:2e:
                    84:dc:fb:21:64:94:78:cd:71:ed:17:d2:ca:3d:c6:
                    d3:a4:8c:1a:ce:28:b8:73:7a:1c:a5:df:bb:98:cd:
                    04:72:42:58:cf:99:da:a9:2b:d7:58:4d:87:e9:af:
                    65:59:c3:6e:a8:ff:e2:4c:50:4a:33:25:f9:a5:78:
                    df:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:F4:ED:42:6E:01:7C:13:E7:1C:BA:07:21:9A:94:04:AD:1A:2E:42
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/mPTtQm4BfBPnHLoHIZqUBK0aLkI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.140.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         03:71:f6:3a:c7:02:c3:55:15:52:82:75:61:8b:45:8f:d7:82:
         ec:c7:6c:6b:e2:23:05:57:37:75:ee:d8:4f:ee:d4:1d:32:c3:
         08:7b:c0:91:cf:a6:d9:8b:af:5f:9b:0d:88:a0:a6:d5:24:76:
         e3:69:e1:63:be:41:f7:a2:50:52:bb:6e:fe:e8:b7:27:54:7b:
         ca:1e:15:8f:a1:75:f8:c0:da:0b:41:9f:c3:e3:cc:96:55:e1:
         1f:6f:a4:da:32:6d:1f:22:24:c3:11:7c:58:d2:43:f4:e0:8b:
         f0:ec:d5:2c:a9:a5:0b:a7:d3:90:da:d7:5e:00:d3:0b:28:3b:
         b3:30:23:cc:a0:cf:99:ac:ff:d3:9a:92:f4:e5:2e:52:66:33:
         4b:d5:b9:a2:7d:9f:7b:79:a7:f6:ab:f4:ac:90:f9:24:3e:82:
         2b:a5:8e:2c:91:4e:8f:b6:e9:28:d6:b2:c2:0e:94:91:17:4e:
         25:2c:98:97:ab:69:08:a0:af:1a:cc:bb:b4:a6:74:15:67:6a:
         56:88:92:a8:65:10:2a:28:41:fb:98:72:22:36:b6:2a:11:9d:
         bb:53:99:46:af:9d:72:87:8f:e0:c0:dc:03:24:28:8e:5d:95:
         99:3a:4b:4c:a5:a1:fe:ea:aa:36:96:0d:47:2c:ad:c0:85:33:
         5b:be:92:0a
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICCAAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw
NzQyMzZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDk4RjRFRDQyNkUwMTdD
MTNFNzFDQkEwNzIxOUE5NDA0QUQxQTJFNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDO0lLm6MY0NTyXWl+YVspaVoPp1aiWNiOcMwepH+IuxaVfefoT
zXPbCF/VNS9LXAILVogKHKqE9dcZEEa2ogGZ4OMALEpWGTb1PRR36nXTiQ/lsLc6
1azrP1gM9Hd9X1lT+KnbYrnWJLUWi/2AwIdFqe4VLUM0O4UZrw11rExS0lItFA9w
5/7WJotinaKLz02ehci56PYqVkoR8xk8A1MWrI4EiBawpkefhMGNscIO/2bYCEQT
Rurv0gZczmpgx49ELoTc+yFklHjNce0X0so9xtOkjBrOKLhzehyl37uYzQRyQljP
mdqpK9dYTYfpr2VZw26o/+JMUEozJfmleN9nAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUmPTtQm4BfBPnHLoHIZqUBK0aLkIwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTYxL21QVHRRbTRCZkJQbkhMb0hJWnFVQkswYUxrSS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXLjIAwDQYJKoZIhvcNAQELBQADggEB
AANx9jrHAsNVFVKCdWGLRY/XguzHbGviIwVXN3Xu2E/u1B0ywwh7wJHPptmLr1+b
DYigptUkduNp4WO+QfeiUFK7bv7otydUe8oeFY+hdfjA2gtBn8PjzJZV4R9vpNoy
bR8iJMMRfFjSQ/Tgi/Ds1SyppQun05Da114A0wsoO7MwI8ygz5ms/9OakvTlLlJm
M0vVuaJ9n3t5p/ar9KyQ+SQ+giuljiyRTo+26SjWssIOlJEXTiUsmJeraQigrxrM
u7SmdBVnalaIkqhlECooQfuYciI2tioRnbtTmUavnXKHj+DA3AMkKI5dlZk6S0yl
of7qqjaWDUcsrcCFM1u+kgo=
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:17:24 2026 by rpki-client