Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/ne1fq9djjLBVjhskXZ5QP25G8tQ.roa
File:                     ne1fq9djjLBVjhskXZ5QP25G8tQ.roa (raw, json)
Hash identifier:          /ZH6ZhqK8UFS2knXLcLZ7MKHT1qvB7alLwht6ZsB5Vo=
Subject key identifier:   9D:ED:5F:AB:D7:63:8C:B0:55:8E:1B:24:5D:9E:50:3F:6E:46:F2:D4
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       07AB
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ne1fq9djjLBVjhskXZ5QP25G8tQ.roa
Signing time:             Tue 31 Mar 2026 07:41:51 +0000
ROA not before:           Tue 31 Mar 2026 07:41:51 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        210.255.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1963 (0x7ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:41:51 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=9DED5FABD7638CB0558E1B245D9E503F6E46F2D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b6:60:18:29:c9:e2:9a:f2:0a:8d:1f:0d:1e:
                    a7:d3:4e:b7:33:53:16:75:15:f8:92:d5:97:20:0a:
                    ab:39:f2:d0:5e:98:0f:a2:9f:18:3f:47:99:7f:f8:
                    50:51:e3:58:7b:e1:45:e7:b6:1f:c3:a5:fe:79:b9:
                    c5:6c:1c:eb:77:cd:3c:72:6d:69:a8:ed:57:2c:5a:
                    df:6d:1b:f8:2b:73:06:91:13:f4:78:80:73:a1:b6:
                    93:7c:13:ad:14:b8:9c:d4:a4:e4:9f:dc:cd:d9:08:
                    00:f7:2d:b5:86:f3:34:f0:1c:7e:26:c7:72:b3:c7:
                    75:ed:38:2b:54:b7:e3:8a:a4:e1:c1:47:1b:83:f5:
                    86:b5:91:62:ab:cd:8b:ee:9f:30:c9:cb:05:00:22:
                    44:62:bd:43:4c:56:41:1e:e3:33:4b:43:49:cb:f9:
                    c0:68:6e:f1:c2:86:0d:00:f6:e1:b3:e4:75:61:f7:
                    be:ce:b8:45:ac:6a:37:a6:64:c5:09:f3:0e:02:e0:
                    96:51:1a:7e:25:bc:aa:74:48:79:d3:47:21:d9:8e:
                    e8:9f:cf:12:f4:aa:7d:d7:10:61:12:9d:a3:66:69:
                    fb:80:00:8a:d5:85:90:6d:1d:9b:94:81:fd:24:60:
                    0a:b3:7b:0f:0e:3c:f1:b2:c8:05:62:ee:e2:70:0e:
                    ce:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:ED:5F:AB:D7:63:8C:B0:55:8E:1B:24:5D:9E:50:3F:6E:46:F2:D4
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ne1fq9djjLBVjhskXZ5QP25G8tQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.255.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         19:82:8b:a6:fe:4f:2e:5f:33:65:ee:a8:e0:ae:11:e2:10:9f:
         27:4e:6d:1e:92:90:39:d4:79:b8:be:87:92:3b:46:b9:61:1b:
         ff:f5:93:4b:e0:6d:58:0c:bc:af:a5:e7:4b:3e:7d:9c:9b:5a:
         21:5a:d8:9f:b6:85:cb:79:8f:a5:e7:bf:e1:51:bb:e2:bb:96:
         34:5d:24:e4:41:19:8f:c6:d5:3e:28:54:9c:c8:90:91:9d:be:
         19:32:08:0b:f8:22:a2:d6:d0:9c:bf:38:f9:c7:95:3b:76:d0:
         b1:f1:69:85:27:f0:4b:10:28:f1:85:a6:27:4b:7e:4c:e3:2e:
         9b:35:73:3a:d4:0e:4b:1c:40:52:c2:a7:5f:78:c1:4a:06:6b:
         a2:14:87:7f:d6:4e:c6:8e:25:ce:bf:ee:af:db:75:41:35:b2:
         4b:18:74:54:03:1b:4c:f2:5e:52:66:0a:3e:e7:5a:de:fb:86:
         bf:ba:6a:ba:7c:b5:cf:12:a2:81:b8:19:ba:3c:0a:f4:0f:fa:
         8c:2d:d3:e3:83:8d:73:8f:1b:fb:5a:51:23:18:8c:2e:94:5a:
         53:09:f8:df:2d:9c:41:f8:db:50:5b:73:3c:48:7e:97:fd:b8:
         7d:89:fc:25:66:89:20:9c:1f:ad:b4:85:33:fa:2e:97:2d:05:
         da:b5:f1:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:11:15 2026 by rpki-client