Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/sYbugQYN32UXXXtsHs43FkVlO9s.roa
File:                     sYbugQYN32UXXXtsHs43FkVlO9s.roa (raw, json)
Hash identifier:          cGbeUsfFeMDjEv4oaeMQb3W7Lo8R3qITdYuF0zUy5tY=
Subject key identifier:   B1:86:EE:81:06:0D:DF:65:17:5D:7B:6C:1E:CE:37:16:45:65:3B:DB
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       08E7
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/sYbugQYN32UXXXtsHs43FkVlO9s.roa
Signing time:             Tue 31 Mar 2026 07:44:28 +0000
ROA not before:           Tue 31 Mar 2026 07:44:28 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        210.229.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2279 (0x8e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:44:28 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B186EE81060DDF65175D7B6C1ECE371645653BDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:90:e6:78:98:76:f4:cd:e9:cf:6e:2f:1c:d5:
                    dc:98:ca:df:d3:f2:14:0e:74:9a:fb:eb:3c:cf:48:
                    a7:d5:99:72:bd:2e:2f:13:78:f5:96:9d:11:e1:cf:
                    e6:0d:e0:4d:73:b7:1f:ca:6c:b5:46:83:d8:d6:b7:
                    c0:1b:32:55:39:78:e2:60:82:5b:ff:cf:3b:71:e8:
                    1d:64:95:32:15:42:f3:f6:a6:5d:fd:a4:da:b3:e0:
                    51:c6:d3:c9:bf:81:5d:17:70:2f:d4:94:0d:82:ee:
                    60:46:b6:7e:bc:35:0d:38:0f:6f:f2:cc:65:19:46:
                    e4:16:a2:dd:65:7b:26:48:91:71:e7:6a:b6:26:83:
                    6a:18:e9:3b:e5:13:65:b6:ee:b8:c2:fa:24:27:d1:
                    e1:ec:37:4e:0a:d0:76:d1:fd:92:14:99:88:ad:1c:
                    33:0b:ae:5d:42:83:94:c9:63:4c:a0:f8:14:e5:97:
                    6f:e8:56:c0:d6:20:79:3e:2c:b4:23:32:85:7c:71:
                    55:ca:35:98:1b:2d:d6:2e:ec:9e:88:f1:2b:44:be:
                    6f:16:4d:a2:32:c3:da:db:89:16:f8:0e:9f:d7:4b:
                    15:c8:e9:7e:bf:90:9c:4b:ac:6e:9c:05:6e:5a:c4:
                    af:b9:94:7b:57:40:74:aa:bd:57:51:d6:f5:0c:56:
                    a0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:86:EE:81:06:0D:DF:65:17:5D:7B:6C:1E:CE:37:16:45:65:3B:DB
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/sYbugQYN32UXXXtsHs43FkVlO9s.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.229.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         50:ee:52:81:7f:7e:6e:42:35:6f:b5:12:ed:dc:1a:a4:a3:9c:
         ba:2d:e6:31:92:33:a0:86:e2:60:86:51:ac:3b:ca:1e:ed:5c:
         c2:0f:fc:07:cd:c4:c1:31:9b:15:80:e3:0c:2d:e9:79:09:3e:
         e5:3d:87:db:6e:01:d0:32:7c:e8:15:89:a6:bb:07:b3:06:6c:
         82:8a:1b:19:2c:8d:b1:a6:10:c7:49:3f:ca:2f:26:fc:96:93:
         a8:1c:cb:65:6e:8e:48:f7:99:4d:f4:97:8a:aa:ad:5a:9b:16:
         7e:f2:1a:3f:52:69:10:03:84:29:22:ed:7f:00:b9:ee:fc:c7:
         69:3e:fe:ab:b2:62:c6:c2:c8:cc:e3:e5:cb:83:a4:82:ea:ce:
         8a:78:48:73:6b:a5:b2:56:80:27:d6:fb:2b:7e:fd:ca:ec:17:
         5c:a5:4d:fb:9d:ca:ee:0d:ee:88:c7:4c:55:79:28:21:d9:7f:
         ab:5d:84:19:f8:a2:74:95:96:bb:e4:1c:ac:48:1f:a1:98:32:
         04:22:0b:96:e1:02:dc:c7:83:0f:a8:4c:9e:44:98:13:c0:c3:
         d3:b2:4d:81:6a:b1:13:cd:f5:47:17:f5:21:22:83:4e:e9:50:
         37:41:ae:3b:27:65:89:f4:34:57:54:ee:11:82:36:ce:9e:ed:
         24:86:f3:56
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICCOcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw
NzQ0MjhaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEIxODZFRTgxMDYwRERG
NjUxNzVEN0I2QzFFQ0UzNzE2NDU2NTNCREIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCmkOZ4mHb0zenPbi8c1dyYyt/T8hQOdJr76zzPSKfVmXK9Li8T
ePWWnRHhz+YN4E1ztx/KbLVGg9jWt8AbMlU5eOJgglv/zztx6B1klTIVQvP2pl39
pNqz4FHG08m/gV0XcC/UlA2C7mBGtn68NQ04D2/yzGUZRuQWot1leyZIkXHnarYm
g2oY6TvlE2W27rjC+iQn0eHsN04K0HbR/ZIUmYitHDMLrl1Cg5TJY0yg+BTll2/o
VsDWIHk+LLQjMoV8cVXKNZgbLdYu7J6I8StEvm8WTaIyw9rbiRb4Dp/XSxXI6X6/
kJxLrG6cBW5axK+5lHtXQHSqvVdR1vUMVqAlAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUsYbugQYN32UXXXtsHs43FkVlO9swHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTYxL3NZYnVnUVlOMzJVWFhYdHNIczQzRmtWbE85cy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXS5cAwDQYJKoZIhvcNAQELBQADggEB
AFDuUoF/fm5CNW+1Eu3cGqSjnLot5jGSM6CG4mCGUaw7yh7tXMIP/AfNxMExmxWA
4wwt6XkJPuU9h9tuAdAyfOgViaa7B7MGbIKKGxksjbGmEMdJP8ovJvyWk6gcy2Vu
jkj3mU30l4qqrVqbFn7yGj9SaRADhCki7X8Aue78x2k+/quyYsbCyMzj5cuDpILq
zop4SHNrpbJWgCfW+yt+/crsF1ylTfudyu4N7ojHTFV5KCHZf6tdhBn4onSVlrvk
HKxIH6GYMgQiC5bhAtzHgw+oTJ5EmBPAw9OyTYFqsRPN9UcX9SEig07pUDdBrjsn
ZYn0NFdU7hGCNs6e7SSG81Y=
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:13:43 2026 by rpki-client