Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/naEjnM5yYH-Xguy48-J71xifq3M.roa
File:                     naEjnM5yYH-Xguy48-J71xifq3M.roa (raw, json)
Hash identifier:          E0To5AQYOZWR2rIX+vqKgOsCehpTlDjdsSKMzHp27ic=
Subject key identifier:   9D:A1:23:9C:CE:72:60:7F:97:82:EC:B8:F3:E2:7B:D7:18:9F:AB:73
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0798
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/naEjnM5yYH-Xguy48-J71xifq3M.roa
Signing time:             Tue 31 Mar 2026 07:41:43 +0000
ROA not before:           Tue 31 Mar 2026 07:41:43 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        106.181.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1944 (0x798)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:41:43 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=9DA1239CCE72607F9782ECB8F3E27BD7189FAB73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:24:3a:76:97:f2:ac:dc:86:c2:5f:6f:33:e1:
                    f9:87:9e:fc:4e:b6:e3:5b:9b:c5:5b:7f:c8:7e:78:
                    6f:0b:95:15:ed:31:62:19:84:02:cc:d5:a3:97:37:
                    9a:e4:43:6c:48:73:8e:7b:c9:0b:9d:2c:87:b0:19:
                    0a:ed:f2:63:bd:38:ad:84:8c:9e:da:c1:1d:55:6d:
                    40:9b:e4:24:dc:a2:04:45:a0:98:38:c3:18:77:b9:
                    1d:88:f5:db:eb:27:d9:ad:09:cd:76:c4:56:37:46:
                    33:35:75:90:2d:7a:2c:e0:a9:9e:84:6a:c3:8e:ef:
                    56:51:6c:c4:19:23:a5:f9:c8:40:01:13:d7:cf:08:
                    df:ba:49:b5:f3:92:d7:28:e6:46:92:d6:98:48:ef:
                    e9:97:87:58:5c:4f:cd:bf:69:b0:e8:35:9f:4a:8e:
                    3a:80:06:5f:38:7b:54:33:fe:88:ca:6d:85:48:06:
                    f7:c8:19:00:10:c0:d1:08:0e:af:58:2c:29:20:76:
                    43:59:05:91:88:5f:54:14:58:8e:7c:90:49:4c:e5:
                    b5:91:31:ac:e8:c4:71:68:85:1c:ab:a4:d6:5c:92:
                    9b:ad:31:5e:77:08:e6:37:7d:6b:00:77:20:22:69:
                    4f:66:86:29:b9:a2:7a:77:c6:b0:9d:fc:9e:5c:6a:
                    29:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:A1:23:9C:CE:72:60:7F:97:82:EC:B8:F3:E2:7B:D7:18:9F:AB:73
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/naEjnM5yYH-Xguy48-J71xifq3M.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.181.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3e:5e:16:8f:a3:a9:b3:a3:f8:e7:9c:12:46:75:4b:22:9b:92:
         99:f6:78:0c:a5:be:01:ef:0b:ee:99:cc:7d:69:c6:1c:6c:cb:
         83:2e:03:d0:a8:52:b6:e1:28:c3:a0:1a:28:bc:0e:39:e5:fe:
         eb:48:da:a9:3a:4c:48:e5:75:17:d1:1c:e8:ff:fa:6b:4c:ad:
         89:4d:b9:4d:b0:84:b6:8f:39:7d:dc:6d:ba:59:dc:7c:86:15:
         1b:5b:b6:5a:36:31:6d:81:76:99:bd:3e:77:c9:2f:98:79:3d:
         2e:90:3a:6e:f7:a7:95:92:c6:f8:4d:1b:0c:1a:bd:98:63:08:
         fc:37:9e:ad:97:5b:f5:ad:4c:2e:5b:bb:90:69:b8:84:2f:cf:
         3f:32:32:8f:85:45:7d:9a:e0:91:9c:17:5e:1a:b5:b5:41:8e:
         47:8e:81:90:d9:1a:56:39:49:78:e2:3d:73:e8:8a:b5:09:b4:
         a0:78:17:d7:4a:1d:42:c0:21:ca:40:eb:d3:31:bf:93:a9:8a:
         c3:6b:14:13:82:87:83:c2:3c:92:ee:fd:54:6a:8b:1d:50:fd:
         42:37:d7:ce:21:27:e9:90:d9:bd:ae:d1:0d:2b:75:56:ad:69:
         be:70:1b:53:b0:23:1f:62:f3:95:af:2b:62:36:38:fd:ca:84:
         58:77:e1:bd
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgICB5gwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw
NzQxNDNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDlEQTEyMzlDQ0U3MjYw
N0Y5NzgyRUNCOEYzRTI3QkQ3MTg5RkFCNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDoJDp2l/Ks3IbCX28z4fmHnvxOtuNbm8Vbf8h+eG8LlRXtMWIZ
hALM1aOXN5rkQ2xIc457yQudLIewGQrt8mO9OK2EjJ7awR1VbUCb5CTcogRFoJg4
wxh3uR2I9dvrJ9mtCc12xFY3RjM1dZAteizgqZ6EasOO71ZRbMQZI6X5yEABE9fP
CN+6SbXzktco5kaS1phI7+mXh1hcT82/abDoNZ9KjjqABl84e1Qz/ojKbYVIBvfI
GQAQwNEIDq9YLCkgdkNZBZGIX1QUWI58kElM5bWRMazoxHFohRyrpNZckputMV53
COY3fWsAdyAiaU9mhim5onp3xrCd/J5caimxAgMBAAGjggHYMIIB1DAdBgNVHQ4E
FgQUnaEjnM5yYH+Xguy48+J71xifq3MwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTYxL25hRWpuTTV5WUgtWGd1eTQ4LUo3MXhpZnEzTS5yb2EwHgYI
KwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwBqtTANBgkqhkiG9w0BAQsFAAOCAQEA
Pl4Wj6Ops6P455wSRnVLIpuSmfZ4DKW+Ae8L7pnMfWnGHGzLgy4D0KhStuEow6Aa
KLwOOeX+60jaqTpMSOV1F9Ec6P/6a0ytiU25TbCEto85fdxtulncfIYVG1u2WjYx
bYF2mb0+d8kvmHk9LpA6bvenlZLG+E0bDBq9mGMI/DeerZdb9a1MLlu7kGm4hC/P
PzIyj4VFfZrgkZwXXhq1tUGOR46BkNkaVjlJeOI9c+iKtQm0oHgX10odQsAhykDr
0zG/k6mKw2sUE4KHg8I8ku79VGqLHVD9QjfXziEn6ZDZva7RDSt1Vq1pvnAbU7Aj
H2Lzla8rYjY4/cqEWHfhvQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:20:07 2026 by rpki-client