Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/mZU7oQ03rktoZjMU2tRlOipVDi8.roa
File:                     mZU7oQ03rktoZjMU2tRlOipVDi8.roa (raw, json)
Hash identifier:          GlsWvObaUDJNodxiUEzsW3q8YaoBHt8uq2nHWhqnkCc=
Subject key identifier:   99:95:3B:A1:0D:37:AE:4B:68:66:33:14:DA:D4:65:3A:2A:55:0E:2F
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       082F
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/mZU7oQ03rktoZjMU2tRlOipVDi8.roa
Signing time:             Tue 31 Mar 2026 07:42:57 +0000
ROA not before:           Tue 31 Mar 2026 07:42:57 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        210.155.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 14:45:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2095 (0x82f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:42:57 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=99953BA10D37AE4B68663314DAD4653A2A550E2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3e:27:9b:73:5e:80:02:2d:4e:2f:1e:e9:bf:
                    58:85:ad:9d:94:15:c9:29:28:8f:30:6a:6a:3b:3c:
                    30:91:13:69:aa:c1:ff:a0:dd:5e:50:2e:28:ec:75:
                    a8:6e:bc:fc:68:c4:e3:be:d7:74:b5:0c:ad:36:fa:
                    49:fe:ba:68:a3:af:a6:b6:3e:aa:4f:3d:20:84:24:
                    d3:81:88:88:dc:3e:da:8b:91:37:29:93:d4:6d:08:
                    d3:8f:89:de:ee:9e:fa:8f:99:f4:63:6b:a4:6d:68:
                    ae:fa:4d:7a:84:42:aa:54:b0:26:3c:27:b0:74:2a:
                    7a:62:c6:77:5c:96:55:37:18:ac:87:46:09:b8:fe:
                    e6:21:90:0b:e6:2d:ce:0b:e4:05:6e:44:7c:04:e9:
                    fe:9f:0f:60:38:49:8c:8f:44:68:6b:63:8e:d9:dd:
                    3e:25:71:62:5d:02:b6:b9:45:84:b1:80:83:b2:63:
                    f7:23:34:87:c5:76:c1:ef:02:91:2d:47:9d:a4:78:
                    22:33:8c:25:c3:64:a0:0d:54:73:23:2f:95:40:90:
                    e7:1c:a8:99:f8:f5:c7:12:57:c8:57:71:89:c7:28:
                    34:3d:63:c5:e7:80:9f:b4:bb:22:4b:de:a2:b9:a7:
                    4b:01:df:e6:9d:80:f4:fb:5b:5b:dd:42:80:ee:37:
                    1f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:95:3B:A1:0D:37:AE:4B:68:66:33:14:DA:D4:65:3A:2A:55:0E:2F
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/mZU7oQ03rktoZjMU2tRlOipVDi8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.155.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         88:52:00:82:bc:33:7a:c6:50:80:27:e4:ae:c5:a1:7e:5a:21:
         81:b5:70:74:ee:71:52:27:b7:82:7c:07:52:2e:c9:a4:82:56:
         08:31:17:05:8f:ab:12:e1:0c:89:af:33:b2:1b:0e:ed:9c:2a:
         a3:85:93:b7:ad:7d:a8:46:41:18:76:42:d1:d0:b2:50:1c:0e:
         3e:03:11:23:7b:cd:a8:2d:76:cf:2e:81:3a:b7:c7:2e:ad:05:
         4f:55:06:db:ba:30:5a:95:3d:1b:b0:14:6f:ab:82:73:80:e4:
         ba:f1:c8:60:ee:af:1e:7e:bf:a3:e2:0a:5f:fb:ee:89:b5:b3:
         2e:e8:62:2e:ab:e4:da:b7:47:9b:ba:c4:14:f3:ad:b4:61:1a:
         20:85:cc:21:4f:c5:60:ca:80:70:26:22:af:4d:ff:62:d1:51:
         5d:ef:9c:00:d7:eb:e4:02:63:b0:7d:b8:0a:3a:15:5a:8b:05:
         8a:47:0e:03:cb:c9:d7:9d:35:e2:7a:d4:53:2a:d1:50:99:9f:
         d8:2b:f7:85:ec:7d:65:3b:72:e6:96:29:a2:7f:5a:a6:f6:60:
         79:6e:84:70:7d:43:9e:1d:56:da:d0:4d:ca:1e:29:33:fb:1e:
         eb:35:a8:d8:8a:3d:bd:17:34:af:54:e8:1d:b3:b0:d0:df:90:
         37:1d:d0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:12:39 2026 by rpki-client