Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/s-b_PjGNIjn7pMfNE6ht-RYtGik.roa
File:                     s-b_PjGNIjn7pMfNE6ht-RYtGik.roa (raw, json)
Hash identifier:          2zFnDfFCDYxWmqjWaqPc7891hprk37QFr7acKEdNc5k=
Subject key identifier:   B3:E6:FF:3E:31:8D:22:39:FB:A4:C7:CD:13:A8:6D:F9:16:2D:1A:29
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       076F
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/s-b_PjGNIjn7pMfNE6ht-RYtGik.roa
Signing time:             Tue 31 Mar 2026 07:41:24 +0000
ROA not before:           Tue 31 Mar 2026 07:41:24 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        182.248.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1903 (0x76f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:41:24 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B3E6FF3E318D2239FBA4C7CD13A86DF9162D1A29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:2d:9d:f9:3e:0e:02:00:a3:aa:7b:07:69:42:
                    b4:a8:f6:68:3f:4e:83:f3:eb:eb:a1:5d:6d:42:7f:
                    5c:f7:f8:56:24:a0:26:e6:33:e6:63:81:23:07:30:
                    9b:6a:8a:b6:d7:d8:1f:8e:b5:94:a7:f3:dd:3a:72:
                    48:be:cb:66:16:77:02:b3:d6:b5:69:7f:d8:dd:9a:
                    10:52:a5:f2:eb:64:bb:87:57:5f:0b:b4:42:63:98:
                    9f:92:49:93:7b:02:e3:82:a7:1e:ed:a7:f4:d5:6b:
                    be:fe:ce:cc:67:15:7d:fe:3d:04:36:33:7b:28:ab:
                    68:86:6c:91:b6:64:4e:a8:6e:ea:b3:53:7e:8b:8f:
                    f8:06:f2:67:a6:4b:0e:78:ba:20:12:bd:c8:e6:d4:
                    c1:92:63:b6:38:a9:02:61:82:bf:bf:fa:8e:66:16:
                    39:d4:8e:40:a0:c6:93:89:a9:d7:84:35:8e:1a:ae:
                    8f:cc:58:4b:ac:e6:09:85:e6:77:16:2c:2e:90:6f:
                    20:8d:65:fc:82:52:83:24:2c:22:03:a9:b6:18:17:
                    a3:52:e0:dc:fb:c9:52:44:04:f5:48:71:9b:7e:95:
                    64:ec:27:07:0a:cc:27:1f:b0:9e:c5:98:2e:fc:88:
                    c9:8f:7a:bc:29:d4:0e:a8:bd:ae:3e:59:bf:61:33:
                    5d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:E6:FF:3E:31:8D:22:39:FB:A4:C7:CD:13:A8:6D:F9:16:2D:1A:29
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/s-b_PjGNIjn7pMfNE6ht-RYtGik.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.248.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         56:47:d5:f2:d5:8a:4e:51:39:91:e1:e8:e1:8a:3d:4a:63:82:
         eb:43:a8:98:c5:39:45:f5:1a:75:00:21:89:b0:17:8c:b9:cc:
         15:00:8f:28:5d:00:df:e8:87:fc:a0:96:e9:46:3c:a8:ae:35:
         3c:5d:99:6c:72:69:fc:7c:f2:e9:09:6a:5d:7a:34:45:7b:3a:
         6b:c6:a6:85:c8:37:ca:ed:14:a0:b8:37:31:a3:01:ce:a5:c3:
         dd:60:8b:14:6e:2c:de:4c:cf:d1:3a:ff:f3:95:af:5b:0d:19:
         84:02:e8:1b:99:e1:6d:3b:43:e3:95:3b:42:66:b1:66:d5:88:
         4c:ac:ff:fc:91:d7:8b:16:7d:fd:bc:1f:30:5d:74:59:cc:4f:
         a2:84:2a:a6:59:47:8f:01:a4:32:8f:02:de:7d:f6:1e:68:9f:
         2c:99:a4:2a:74:b5:9c:c3:02:48:d9:54:fa:98:27:33:20:c3:
         74:08:3c:8a:3d:89:46:db:4b:fd:d3:1e:ab:3b:6e:79:ac:96:
         a9:df:93:7b:32:dd:38:cf:ca:56:56:69:b1:24:f9:a6:14:ce:
         54:25:df:4d:cb:42:32:0e:4f:22:ab:45:78:19:56:a2:b2:78:
         08:c1:7c:0d:40:03:9f:f2:73:cb:3c:f6:eb:27:ec:1e:f6:bd:
         34:99:87:d4
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICB28wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw
NzQxMjRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEIzRTZGRjNFMzE4RDIy
MzlGQkE0QzdDRDEzQTg2REY5MTYyRDFBMjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCaLZ35Pg4CAKOqewdpQrSo9mg/ToPz6+uhXW1Cf1z3+FYkoCbm
M+ZjgSMHMJtqirbX2B+OtZSn8906cki+y2YWdwKz1rVpf9jdmhBSpfLrZLuHV18L
tEJjmJ+SSZN7AuOCpx7tp/TVa77+zsxnFX3+PQQ2M3soq2iGbJG2ZE6obuqzU36L
j/gG8memSw54uiASvcjm1MGSY7Y4qQJhgr+/+o5mFjnUjkCgxpOJqdeENY4aro/M
WEus5gmF5ncWLC6QbyCNZfyCUoMkLCIDqbYYF6NS4Nz7yVJEBPVIcZt+lWTsJwcK
zCcfsJ7FmC78iMmPerwp1A6ova4+Wb9hM11bAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUs+b/PjGNIjn7pMfNE6ht+RYtGikwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTYxL3MtYl9QakdOSWpuN3BNZk5FNmh0LVJZdEdpay5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAa2+AAwDQYJKoZIhvcNAQELBQADggEB
AFZH1fLVik5ROZHh6OGKPUpjgutDqJjFOUX1GnUAIYmwF4y5zBUAjyhdAN/oh/yg
lulGPKiuNTxdmWxyafx88ukJal16NEV7OmvGpoXIN8rtFKC4NzGjAc6lw91gixRu
LN5Mz9E6//OVr1sNGYQC6BuZ4W07Q+OVO0JmsWbViEys//yR14sWff28HzBddFnM
T6KEKqZZR48BpDKPAt599h5onyyZpCp0tZzDAkjZVPqYJzMgw3QIPIo9iUbbS/3T
Hqs7bnmslqnfk3sy3TjPylZWabEk+aYUzlQl303LQjIOTyKrRXgZVqKyeAjBfA1A
A5/yc8s89usn7B72vTSZh9Q=
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:13:41 2026 by rpki-client