Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/pd8mSiiiID-S5t9tn6B1PQNepEA.roa
File:                     pd8mSiiiID-S5t9tn6B1PQNepEA.roa (raw, json)
Hash identifier:          UJn1R8NWZiTW9Lf8dRKa5nDoAk4Ou36NfONias22rwo=
Subject key identifier:   A5:DF:26:4A:28:A2:20:3F:92:E6:DF:6D:9F:A0:75:3D:03:5E:A4:40
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0857
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/pd8mSiiiID-S5t9tn6B1PQNepEA.roa
Signing time:             Tue 31 Mar 2026 07:43:20 +0000
ROA not before:           Tue 31 Mar 2026 07:43:20 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        210.174.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2135 (0x857)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:43:20 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A5DF264A28A2203F92E6DF6D9FA0753D035EA440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bb:f5:5d:d6:ae:e9:2d:2e:2d:ce:5c:3f:c2:
                    b8:18:34:6a:42:45:f5:cc:b3:10:b9:5d:f9:f8:bb:
                    e2:41:c5:99:64:6d:0a:a5:0b:b8:4d:69:04:68:ba:
                    ed:e1:71:ca:13:7e:22:1b:e0:d1:34:b4:2d:d6:86:
                    92:39:15:e9:b2:92:ab:c8:0e:cb:27:f4:2c:f6:11:
                    82:dd:ee:3a:b2:bd:47:b2:a4:12:34:03:07:28:ad:
                    2e:a4:58:81:5e:9e:45:63:24:26:fb:96:e0:e0:8b:
                    79:7c:cd:92:12:b8:99:bc:7f:fd:cd:55:c3:75:55:
                    d5:fe:d8:e7:fd:c0:22:f1:6e:d5:d0:8a:d1:8d:61:
                    d8:39:ec:25:08:dc:93:60:3e:8b:25:c9:2a:d9:3a:
                    08:80:17:1b:6f:ad:61:12:d3:6b:3b:70:eb:02:c8:
                    e8:25:56:19:94:b1:87:c3:6a:5c:4c:02:b7:ad:2b:
                    08:f6:be:d9:d3:26:84:2a:96:3e:8b:da:19:4c:ac:
                    25:02:d9:70:1c:73:b4:ec:dc:97:5c:41:28:48:69:
                    10:94:e2:d5:e6:1d:b6:0a:13:d7:0e:53:67:22:d5:
                    f1:54:a4:18:e8:9d:4f:76:1c:35:05:8b:e0:95:f6:
                    15:a1:49:d6:5a:f7:5f:7c:9c:a4:6a:52:e3:50:7e:
                    8f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:DF:26:4A:28:A2:20:3F:92:E6:DF:6D:9F:A0:75:3D:03:5E:A4:40
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/pd8mSiiiID-S5t9tn6B1PQNepEA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.174.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         82:cf:0e:ee:3e:16:75:32:5e:b5:e3:cf:16:af:16:e2:bc:84:
         cf:3e:30:8a:e2:10:07:54:56:bc:06:0f:a7:bc:b6:aa:22:6e:
         0a:5b:18:24:b9:ca:b3:13:b2:fa:60:16:3a:db:5c:0a:f4:97:
         ff:6d:62:ec:1d:96:b8:a3:e8:30:c2:73:cd:53:4a:3a:bd:ce:
         68:42:a6:83:49:7f:be:9b:76:16:92:0f:91:3c:de:36:b4:3b:
         83:72:0c:df:5a:a0:7d:85:82:03:02:be:df:ae:11:66:a7:fb:
         e6:81:91:bf:bc:f3:d3:c9:66:a8:44:3b:3b:6f:af:a8:e2:61:
         4e:ad:58:0f:a5:24:12:25:44:96:6c:42:23:14:6f:a9:d1:db:
         a1:4c:d9:23:1c:fa:cb:5b:19:7f:fb:f6:73:58:63:a7:d0:00:
         c8:99:20:96:61:b5:aa:03:a8:73:f9:1d:41:1c:df:8c:c9:52:
         8d:b9:4b:81:6f:98:ec:46:85:3e:e2:c2:18:8e:4e:c1:5a:a3:
         f4:0b:3b:8d:0a:68:88:0f:4f:b3:2a:27:cb:c6:b0:56:02:a4:
         eb:38:bb:73:4c:28:6a:6c:d8:d8:bd:e0:ae:7f:cb:60:36:16:
         32:2d:08:71:97:49:82:06:60:16:ad:54:d3:7a:7b:22:ec:de:
         bb:ba:08:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:46 2026 by rpki-client