Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/pvjyMT_FGYQwb9s34Mose-rfwCg.roa
File:                     pvjyMT_FGYQwb9s34Mose-rfwCg.roa (raw, json)
Hash identifier:          JnHnhrpgN7bJqmekk4itgPCzFWiQcazS7EnyXkmo5vk=
Subject key identifier:   A6:F8:F2:31:3F:C5:19:84:30:6F:DB:37:E0:CA:2C:7B:EA:DF:C0:28
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0911
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/pvjyMT_FGYQwb9s34Mose-rfwCg.roa
Signing time:             Tue 31 Mar 2026 07:44:45 +0000
ROA not before:           Tue 31 Mar 2026 07:44:45 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        210.253.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2321 (0x911)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:44:45 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A6F8F2313FC51984306FDB37E0CA2C7BEADFC028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9d:7d:ea:0a:16:b7:cc:3e:7c:a3:82:0c:1a:
                    4e:cc:9f:30:07:40:06:28:e1:bd:48:3f:8a:e6:a3:
                    a1:38:d0:78:46:85:7f:3e:34:e1:63:43:4a:86:7c:
                    9d:1f:51:e7:bc:7c:6a:0d:b5:06:f1:43:07:da:fc:
                    2e:00:40:94:90:d1:36:e9:43:a9:eb:c6:76:2a:46:
                    5d:1f:f0:a7:a1:46:86:2e:20:6e:72:c2:a3:5f:75:
                    5f:af:62:65:cd:9d:ed:9e:e5:53:12:cc:a2:07:1f:
                    2d:72:54:43:6e:2c:67:0d:c2:f2:4a:4a:f5:a4:ff:
                    94:78:3b:53:c3:ea:07:6a:98:8d:80:74:49:b8:9f:
                    0b:1a:53:98:52:d2:54:00:1a:84:39:b3:0f:e2:45:
                    e6:82:53:b1:d0:99:d4:28:c2:28:16:16:0c:63:5d:
                    17:31:f8:bf:e8:8f:f7:c2:44:99:65:5a:06:92:1c:
                    4b:02:7d:54:43:6b:33:e4:5f:5f:c8:8f:f8:48:f5:
                    de:53:7d:12:26:7b:6b:63:70:b6:95:19:8d:4d:6a:
                    f5:a3:fa:77:b6:05:87:95:3f:39:98:1a:f8:f8:f6:
                    b1:85:b9:6b:fc:4b:a3:91:58:fa:8b:c0:b3:2b:91:
                    c0:8b:53:f8:09:61:1b:63:87:ea:28:a3:6f:4d:82:
                    28:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:F8:F2:31:3F:C5:19:84:30:6F:DB:37:E0:CA:2C:7B:EA:DF:C0:28
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/pvjyMT_FGYQwb9s34Mose-rfwCg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.253.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         21:52:6c:82:98:32:b6:41:7f:a0:87:84:ac:af:89:3a:b9:a7:
         b1:0c:13:2f:f2:41:07:5f:d5:02:23:da:d9:a4:7f:9c:b7:5b:
         0f:39:c0:f2:e8:0e:fb:33:ee:07:26:36:ec:46:c6:d8:88:68:
         2a:e5:11:1d:47:b2:ac:91:8e:9e:4d:e1:94:5c:76:7c:aa:cc:
         73:38:89:eb:a6:5b:ba:7d:ed:7e:d1:4b:ab:97:cd:2b:ac:a2:
         29:ca:1f:48:19:1d:8c:79:12:dc:99:2c:41:cf:f8:01:7f:61:
         8a:91:9d:c7:b3:a1:85:de:8d:f6:08:f1:18:a0:cd:ab:14:b1:
         2d:79:c1:23:d7:f9:ea:89:13:ed:b0:6c:c5:1f:e6:30:ff:9a:
         3f:0c:97:da:10:56:52:44:df:d4:60:3a:ba:7c:06:34:53:18:
         46:4a:2b:ce:94:69:6e:b8:9a:41:81:81:41:37:de:23:a9:2b:
         ae:16:0f:4e:60:b0:9b:78:14:7a:a5:3a:71:e3:a6:b0:58:86:
         47:52:77:3f:5d:e6:ac:c6:87:04:96:81:f4:11:bc:5e:dc:66:
         c4:15:96:59:b6:e0:2f:f4:d9:85:8e:5f:d6:20:77:a5:a8:1d:
         bc:57:ac:1d:0a:bf:69:99:13:8e:1b:3d:66:d3:7c:37:e5:b6:
         c2:68:ea:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:43 2026 by rpki-client