Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/s0ssOWkyZTO2Gf3Im0G3tfeyUKY.roa
File:                     s0ssOWkyZTO2Gf3Im0G3tfeyUKY.roa (raw, json)
Hash identifier:          pOHelcTlfKaG5xVriRV4O51ySjLyv8Le/8RAxTpsAGI=
Subject key identifier:   B3:4B:2C:39:69:32:65:33:B6:19:FD:C8:9B:41:B7:B5:F7:B2:50:A6
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0770
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/s0ssOWkyZTO2Gf3Im0G3tfeyUKY.roa
Signing time:             Tue 31 Mar 2026 07:41:24 +0000
ROA not before:           Tue 31 Mar 2026 07:41:24 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        210.132.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1904 (0x770)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:41:24 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B34B2C3969326533B619FDC89B41B7B5F7B250A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:7d:65:08:47:3f:9a:ed:7e:20:73:b0:94:7a:
                    05:4c:29:7b:7a:c4:a9:df:92:95:e0:9c:79:a6:13:
                    b1:70:b0:21:4a:48:0e:ee:89:97:f8:90:3c:d9:3e:
                    98:1d:dd:9a:c3:5f:0b:c5:9e:6f:2b:46:88:11:90:
                    46:1e:60:ae:8d:0f:5f:71:df:f0:4d:30:75:67:2f:
                    bc:c5:bc:54:25:c5:ac:5c:11:b3:06:1a:27:8c:cc:
                    70:fb:33:00:e8:a2:bb:c6:c9:e2:5e:14:50:f6:0b:
                    2e:5b:17:19:5f:21:0d:e9:b2:ed:49:3f:bf:de:06:
                    c7:ef:b8:77:59:5e:1f:01:58:00:9a:ba:1c:35:d0:
                    52:5e:af:25:ab:86:ff:94:d3:35:57:5a:df:7f:c3:
                    61:bc:c2:71:bf:57:d9:e1:00:6a:33:38:0f:35:c2:
                    0f:b7:94:e0:f2:08:a6:d8:30:49:f0:28:d3:47:88:
                    29:aa:11:dc:14:72:68:07:13:0c:ac:14:7a:03:81:
                    0a:d2:02:b3:7d:db:d8:d6:99:34:ba:eb:e6:d6:d8:
                    bf:f9:51:3f:3e:75:4f:9e:c7:5f:aa:4f:0b:f5:9e:
                    66:23:9f:48:7d:aa:a2:3b:0e:fb:bc:a7:e8:f4:ca:
                    86:1b:c5:85:25:7f:91:80:76:76:41:14:36:47:ae:
                    86:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:4B:2C:39:69:32:65:33:B6:19:FD:C8:9B:41:B7:B5:F7:B2:50:A6
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/s0ssOWkyZTO2Gf3Im0G3tfeyUKY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.132.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         31:62:7e:46:1e:19:0f:46:f0:2f:ea:79:50:dc:90:3a:81:2b:
         da:c4:8d:29:8c:9d:89:53:05:f1:7c:fa:89:e0:ac:1e:eb:0e:
         86:45:6b:f7:42:25:63:b4:b5:3e:13:fd:70:ac:35:02:33:17:
         60:cd:37:1e:74:78:12:86:b7:58:8d:50:72:43:c9:ef:5c:97:
         dc:67:65:b4:c0:75:9c:e4:ae:f7:11:b6:d0:22:b7:84:3a:d0:
         ce:96:c7:02:29:c1:ba:41:e2:db:9b:0f:ee:17:e9:61:cf:2a:
         43:88:fa:24:b1:e5:ba:8a:d6:18:47:ab:7e:26:0f:ef:02:39:
         15:e2:c0:ab:1f:35:6c:35:c4:c9:41:ca:87:aa:78:4f:18:1f:
         a4:6d:8b:59:d4:95:bf:bc:de:a2:d9:44:13:33:61:34:29:e1:
         fc:2f:a6:09:f6:b6:d8:87:0a:27:de:04:2a:4f:c5:29:fc:27:
         1e:49:c9:81:87:af:11:8f:8d:69:52:22:9b:8e:7d:9d:ed:b4:
         4c:35:b7:22:45:ee:41:25:ab:8d:60:88:be:5b:6f:11:78:16:
         37:7e:01:d1:81:b4:6a:98:1e:a5:59:5b:cd:be:f4:05:85:04:
         6c:b7:54:07:14:38:4c:15:f8:4e:e4:26:be:4a:55:8a:a4:1d:
         14:86:89:f5
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICB3AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw
NzQxMjRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEIzNEIyQzM5NjkzMjY1
MzNCNjE5RkRDODlCNDFCN0I1RjdCMjUwQTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDbfWUIRz+a7X4gc7CUegVMKXt6xKnfkpXgnHmmE7FwsCFKSA7u
iZf4kDzZPpgd3ZrDXwvFnm8rRogRkEYeYK6ND19x3/BNMHVnL7zFvFQlxaxcEbMG
GieMzHD7MwDoorvGyeJeFFD2Cy5bFxlfIQ3psu1JP7/eBsfvuHdZXh8BWACauhw1
0FJeryWrhv+U0zVXWt9/w2G8wnG/V9nhAGozOA81wg+3lODyCKbYMEnwKNNHiCmq
EdwUcmgHEwysFHoDgQrSArN929jWmTS66+bW2L/5UT8+dU+ex1+qTwv1nmYjn0h9
qqI7Dvu8p+j0yoYbxYUlf5GAdnZBFDZHroYBAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUs0ssOWkyZTO2Gf3Im0G3tfeyUKYwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTYxL3Mwc3NPV2t5WlRPMkdmM0ltMEczdGZleVVLWS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXShGAwDQYJKoZIhvcNAQELBQADggEB
ADFifkYeGQ9G8C/qeVDckDqBK9rEjSmMnYlTBfF8+ongrB7rDoZFa/dCJWO0tT4T
/XCsNQIzF2DNNx50eBKGt1iNUHJDye9cl9xnZbTAdZzkrvcRttAit4Q60M6WxwIp
wbpB4tubD+4X6WHPKkOI+iSx5bqK1hhHq34mD+8CORXiwKsfNWw1xMlByoeqeE8Y
H6Rti1nUlb+83qLZRBMzYTQp4fwvpgn2ttiHCifeBCpPxSn8Jx5JyYGHrxGPjWlS
IpuOfZ3ttEw1tyJF7kElq41giL5bbxF4Fjd+AdGBtGqYHqVZW82+9AWFBGy3VAcU
OEwV+E7kJr5KVYqkHRSGifU=
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:13:36 2026 by rpki-client