Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/p2O0AVuMIx3fwxCrQRBEE8Y9lLY.roa
File:                     p2O0AVuMIx3fwxCrQRBEE8Y9lLY.roa (raw, json)
Hash identifier:          FMW2Ah0ZgumTfjWZs3dntjVIXBsfOwk/pwS4X4mP82U=
Subject key identifier:   A7:63:B4:01:5B:8C:23:1D:DF:C3:10:AB:41:10:44:13:C6:3D:94:B6
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0910
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/p2O0AVuMIx3fwxCrQRBEE8Y9lLY.roa
Signing time:             Tue 31 Mar 2026 07:44:44 +0000
ROA not before:           Tue 31 Mar 2026 07:44:44 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        211.7.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2320 (0x910)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:44:44 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A763B4015B8C231DDFC310AB41104413C63D94B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f6:f0:2d:42:8e:49:85:a8:3e:78:d2:c4:aa:
                    95:85:a9:73:76:9c:80:31:c6:a8:55:3e:9c:7d:c9:
                    cc:7a:3e:da:71:10:60:50:7b:f4:d8:d9:5b:76:cf:
                    a0:c3:26:9c:55:f1:db:18:97:c7:31:07:1e:0a:8b:
                    da:aa:71:06:b2:2f:52:21:28:81:b2:f7:08:a0:f0:
                    2b:0b:a4:e3:73:ae:9f:20:7b:d2:43:1d:a1:51:19:
                    50:46:52:74:c0:a2:15:e0:18:4a:f7:cf:21:24:dc:
                    5c:58:ff:99:81:f6:5f:99:bd:f8:aa:07:58:fb:38:
                    5d:09:f4:45:bf:e9:4b:c3:a6:ea:98:e4:c9:5c:1f:
                    f9:58:a6:92:01:d4:88:b6:75:80:26:ec:77:df:92:
                    0e:c7:f8:d7:03:bc:93:fb:6c:c6:3f:7e:5e:ad:2b:
                    35:75:e4:9d:46:4a:08:56:f4:53:e0:54:2b:3a:60:
                    1e:fe:92:83:d4:e0:4a:a4:17:2e:6b:ba:2e:71:0c:
                    6e:3c:d0:72:66:0f:bd:41:35:f7:9e:c9:f9:f1:07:
                    3c:da:7c:2d:e8:d0:17:3d:70:b1:44:bb:ac:ee:2c:
                    c6:68:45:ba:31:d5:7f:a2:87:f8:fe:c4:28:63:d5:
                    20:59:a7:37:ea:19:91:7f:23:94:75:92:d6:2a:ab:
                    23:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:63:B4:01:5B:8C:23:1D:DF:C3:10:AB:41:10:44:13:C6:3D:94:B6
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/p2O0AVuMIx3fwxCrQRBEE8Y9lLY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.7.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         6e:d2:45:18:0d:a5:ad:68:a8:8a:0a:28:ef:5e:0d:2c:08:15:
         13:f8:30:83:f9:bd:38:98:9a:3b:40:ca:87:42:cd:e5:02:38:
         be:85:e2:19:5d:56:69:5c:38:79:c8:48:1e:7f:66:a0:b1:eb:
         12:6d:b6:1d:7e:0e:d9:c1:95:e6:d5:7f:5e:58:8b:02:7e:9e:
         86:78:68:32:ef:3e:44:4c:10:c7:eb:f4:51:1a:13:5e:a3:07:
         6a:ce:64:30:bd:32:4b:2e:e2:35:98:b8:1b:13:83:3e:e7:94:
         d8:7e:d1:21:e8:94:ad:42:6c:4d:dc:b4:63:ec:97:d3:3e:0a:
         f0:e7:76:18:d7:07:77:cd:10:df:63:d4:09:12:c6:a1:8c:50:
         ac:7d:67:7f:44:49:67:3b:fc:9f:4a:9b:4b:e2:70:26:5c:aa:
         ba:bf:47:e5:35:88:c6:fe:6b:b9:78:81:33:b9:d9:1f:02:c4:
         8d:01:34:ec:2e:69:3c:72:a0:24:4e:7b:b7:91:64:2b:51:53:
         d7:33:db:bd:c8:29:d4:08:a1:17:f6:74:e5:7d:8a:45:d6:4c:
         7a:ef:4a:4e:64:ce:32:f6:3b:6c:89:8b:5c:33:eb:05:b4:09:
         3e:fa:ab:50:75:28:44:65:81:5b:de:d1:47:44:d4:13:d1:22:
         5e:80:fa:f0
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICCRAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw
NzQ0NDRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEE3NjNCNDAxNUI4QzIz
MURERkMzMTBBQjQxMTA0NDEzQzYzRDk0QjYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDP9vAtQo5Jhag+eNLEqpWFqXN2nIAxxqhVPpx9ycx6PtpxEGBQ
e/TY2Vt2z6DDJpxV8dsYl8cxBx4Ki9qqcQayL1IhKIGy9wig8CsLpONzrp8ge9JD
HaFRGVBGUnTAohXgGEr3zyEk3FxY/5mB9l+ZvfiqB1j7OF0J9EW/6UvDpuqY5Mlc
H/lYppIB1Ii2dYAm7Hffkg7H+NcDvJP7bMY/fl6tKzV15J1GSghW9FPgVCs6YB7+
koPU4EqkFy5rui5xDG480HJmD71BNfeeyfnxBzzafC3o0Bc9cLFEu6zuLMZoRbox
1X+ih/j+xChj1SBZpzfqGZF/I5R1ktYqqyM3AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUp2O0AVuMIx3fwxCrQRBEE8Y9lLYwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTYxL3AyTzBBVnVNSXgzZnd4Q3JRUkJFRThZOWxMWS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAbTBwAwDQYJKoZIhvcNAQELBQADggEB
AG7SRRgNpa1oqIoKKO9eDSwIFRP4MIP5vTiYmjtAyodCzeUCOL6F4hldVmlcOHnI
SB5/ZqCx6xJtth1+DtnBlebVf15YiwJ+noZ4aDLvPkRMEMfr9FEaE16jB2rOZDC9
Mksu4jWYuBsTgz7nlNh+0SHolK1CbE3ctGPsl9M+CvDndhjXB3fNEN9j1AkSxqGM
UKx9Z39ESWc7/J9Km0vicCZcqrq/R+U1iMb+a7l4gTO52R8CxI0BNOwuaTxyoCRO
e7eRZCtRU9cz273IKdQIoRf2dOV9ikXWTHrvSk5kzjL2O2yJi1wz6wW0CT76q1B1
KERlgVve0UdE1BPRIl6A+vA=
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:49 2026 by rpki-client