Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/o_VmvbtdeWnSFuqvdblMDoUbt9U.roa
File:                     o_VmvbtdeWnSFuqvdblMDoUbt9U.roa (raw, json)
Hash identifier:          f2RrB6WeSFppW6i5+kQu8oPW7YILgexaduZk1KwQf8o=
Subject key identifier:   A3:F5:66:BD:BB:5D:79:69:D2:16:EA:AF:75:B9:4C:0E:85:1B:B7:D5
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       07DA
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/o_VmvbtdeWnSFuqvdblMDoUbt9U.roa
Signing time:             Tue 31 Mar 2026 07:42:17 +0000
ROA not before:           Tue 31 Mar 2026 07:42:17 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        61.200.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2010 (0x7da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:42:17 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A3F566BDBB5D7969D216EAAF75B94C0E851BB7D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:41:5d:2f:11:7a:1e:a2:72:c8:ec:9a:ee:0a:
                    ea:f9:a7:31:58:90:3d:50:80:5e:57:44:f1:de:1c:
                    09:86:2f:c5:87:ee:fc:c7:b2:96:53:f8:2f:2c:27:
                    7f:e3:97:3b:0d:e0:1c:4c:aa:27:56:e7:41:91:ea:
                    10:0c:3b:c5:fd:82:44:1d:63:e0:5d:c9:98:0f:aa:
                    e1:f4:cb:33:28:2e:62:25:dd:e1:e6:a3:7d:ed:63:
                    bb:b2:15:e1:e8:00:2a:9c:5e:4a:61:fc:67:9a:e9:
                    50:70:04:da:f5:83:a6:e2:8b:df:9a:64:fb:52:fe:
                    d5:a3:bf:99:80:13:7a:1f:ba:37:9f:a3:10:e7:fa:
                    3a:36:73:24:f2:31:71:e6:6c:fa:9e:e2:70:a0:30:
                    1c:35:04:bd:bd:b0:9a:75:8d:40:3e:18:c5:43:32:
                    76:80:7b:9d:88:90:e7:70:bc:34:a0:51:6f:67:19:
                    4b:89:9f:95:59:d5:df:ee:19:b6:bd:99:f3:5f:e7:
                    ad:bc:6f:63:db:cb:38:cd:15:c5:61:dc:cd:5d:98:
                    8e:07:4a:2d:a2:1b:18:4a:a1:85:88:26:a5:0e:05:
                    5d:83:38:49:97:6e:17:ed:ea:f0:61:90:e6:94:07:
                    f1:c2:13:fa:74:29:9e:ad:1f:ab:e0:8c:bb:d3:f3:
                    72:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:F5:66:BD:BB:5D:79:69:D2:16:EA:AF:75:B9:4C:0E:85:1B:B7:D5
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/o_VmvbtdeWnSFuqvdblMDoUbt9U.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.200.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         09:8c:56:40:42:0b:c6:41:32:61:56:7e:2f:90:2b:6f:31:cb:
         64:c8:a4:74:4f:7c:e8:d4:da:54:a3:8f:cb:41:6b:18:e4:b4:
         f6:95:5c:7c:ad:58:04:2c:77:c3:41:26:f5:a7:76:db:73:17:
         42:e0:12:bb:88:7f:98:a5:6c:be:62:6b:2b:20:92:27:4e:64:
         0b:3c:32:ed:3d:03:c4:b7:c1:6a:cb:a0:dd:dc:2d:3a:09:eb:
         e6:af:21:35:51:02:c0:70:50:0a:17:7a:2d:1d:c1:91:cb:3a:
         a4:f6:af:51:5a:d9:eb:29:c5:0a:ca:aa:c3:5c:aa:94:cd:3e:
         f0:53:b3:cb:89:69:32:c3:fe:4d:f8:2e:a5:26:7f:1f:53:43:
         5e:93:41:7e:7a:6f:65:27:bc:99:97:1f:08:dd:ae:1a:2a:9e:
         59:2c:99:a8:97:84:e1:22:d4:46:19:be:2c:a7:e8:a0:9a:ea:
         31:6d:c5:18:4c:18:89:ac:e6:a0:1d:7a:44:42:15:61:37:af:
         01:f3:cf:85:3f:ef:ed:95:f8:b9:b3:55:e1:05:1e:65:69:10:
         5c:bc:16:67:17:d5:4c:26:f4:7a:67:8d:f6:a8:a5:32:e4:70:
         29:14:1d:06:0f:62:2f:cc:a3:8d:fa:b5:7f:e7:d2:d8:0f:5b:
         b9:9d:31:bb
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICB9owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw
NzQyMTdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEEzRjU2NkJEQkI1RDc5
NjlEMjE2RUFBRjc1Qjk0QzBFODUxQkI3RDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC8QV0vEXoeonLI7JruCur5pzFYkD1QgF5XRPHeHAmGL8WH7vzH
spZT+C8sJ3/jlzsN4BxMqidW50GR6hAMO8X9gkQdY+BdyZgPquH0yzMoLmIl3eHm
o33tY7uyFeHoACqcXkph/Gea6VBwBNr1g6bii9+aZPtS/tWjv5mAE3ofujefoxDn
+jo2cyTyMXHmbPqe4nCgMBw1BL29sJp1jUA+GMVDMnaAe52IkOdwvDSgUW9nGUuJ
n5VZ1d/uGba9mfNf5628b2PbyzjNFcVh3M1dmI4HSi2iGxhKoYWIJqUOBV2DOEmX
bhft6vBhkOaUB/HCE/p0KZ6tH6vgjLvT83LDAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUo/VmvbtdeWnSFuqvdblMDoUbt9UwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTYxL29fVm12YnRkZVduU0Z1cXZkYmxNRG9VYnQ5VS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAc9yIAwDQYJKoZIhvcNAQELBQADggEB
AAmMVkBCC8ZBMmFWfi+QK28xy2TIpHRPfOjU2lSjj8tBaxjktPaVXHytWAQsd8NB
JvWndttzF0LgEruIf5ilbL5iaysgkidOZAs8Mu09A8S3wWrLoN3cLToJ6+avITVR
AsBwUAoXei0dwZHLOqT2r1Fa2espxQrKqsNcqpTNPvBTs8uJaTLD/k34LqUmfx9T
Q16TQX56b2UnvJmXHwjdrhoqnlksmaiXhOEi1EYZviyn6KCa6jFtxRhMGIms5qAd
ekRCFWE3rwHzz4U/7+2V+LmzVeEFHmVpEFy8FmcX1Uwm9HpnjfaopTLkcCkUHQYP
Yi/Mo436tX/n0tgPW7mdMbs=
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:31:49 2026 by rpki-client