Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/t760fJWSCnLH7_MoxEO6w-aDqQA.roa
File:                     t760fJWSCnLH7_MoxEO6w-aDqQA.roa (raw, json)
Hash identifier:          fxtjKR2qyP3Zb+W+ki2STpCjS7odji+gZZQrcxQl/DY=
Subject key identifier:   B7:BE:B4:7C:95:92:0A:72:C7:EF:F3:28:C4:43:BA:C3:E6:83:A9:00
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       075F
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/t760fJWSCnLH7_MoxEO6w-aDqQA.roa
Signing time:             Tue 31 Mar 2026 07:41:18 +0000
ROA not before:           Tue 31 Mar 2026 07:41:18 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        111.107.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1887 (0x75f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:41:18 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B7BEB47C95920A72C7EFF328C443BAC3E683A900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:df:0f:47:d4:80:8d:af:15:91:a4:c9:19:26:
                    88:57:ca:4a:fb:bc:4c:0c:a1:22:b6:05:29:8e:22:
                    3f:40:7d:32:60:4b:ec:a7:bd:8d:39:8f:25:86:a9:
                    ea:81:a0:e2:35:dc:b4:73:dc:b1:e6:75:1f:f0:2c:
                    91:ac:2c:db:8b:f1:27:6e:3f:e2:60:1b:09:81:18:
                    28:43:12:be:24:93:0e:e4:37:04:b4:f6:65:3e:b8:
                    ef:84:e0:cd:d7:ee:d0:fc:16:be:bf:e3:04:0e:8b:
                    7f:7b:0e:24:e9:e3:51:fc:86:10:f7:19:f2:1f:87:
                    dd:30:45:a9:3e:2f:32:53:3e:37:37:2a:c0:17:78:
                    43:78:b2:63:e2:e1:b8:88:88:71:39:48:c7:37:e5:
                    57:4c:f0:07:30:bd:8e:ba:75:48:8b:d2:5d:72:85:
                    cc:05:1a:71:54:7f:b5:f9:47:b7:11:22:4a:1a:63:
                    0f:59:aa:73:12:ac:46:75:7c:aa:90:7e:1a:b0:0a:
                    d3:68:48:7a:aa:3a:ed:b0:4a:9c:70:d2:43:ec:83:
                    e1:78:07:c7:19:85:88:ce:20:0b:2b:81:96:9f:4a:
                    df:55:54:5d:10:92:ca:a9:14:90:17:c3:80:af:70:
                    02:ef:ab:34:83:18:dc:28:90:99:8a:28:ea:c7:47:
                    94:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:BE:B4:7C:95:92:0A:72:C7:EF:F3:28:C4:43:BA:C3:E6:83:A9:00
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/t760fJWSCnLH7_MoxEO6w-aDqQA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.107.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2e:06:e5:6e:6b:dd:27:a0:04:6a:2e:ff:a8:49:b8:77:08:71:
         05:82:e0:a5:75:31:95:5f:99:37:f0:ad:5c:6a:09:17:d8:7c:
         03:35:aa:c9:70:75:db:12:f5:95:11:9f:31:0e:bb:af:44:6b:
         0a:47:34:4e:f3:78:8c:d9:36:de:cb:55:9b:9e:46:14:8a:60:
         d0:49:bf:8e:22:82:9a:df:51:a8:7d:5e:5a:aa:d2:62:5c:01:
         de:6a:ae:03:24:e1:95:05:0e:40:fd:c4:3b:b9:61:50:21:c6:
         2b:82:1a:7f:ac:1f:5b:98:7f:c2:87:93:fa:48:36:bc:09:6d:
         b8:66:56:8a:75:21:75:08:8a:3b:fe:24:f4:62:e5:49:f9:68:
         30:72:52:79:3c:32:1a:ac:8e:95:f0:34:fd:8b:68:99:af:4a:
         e7:b0:6a:b2:ad:76:a0:cf:b2:ae:73:29:6b:3a:f4:0f:47:55:
         a6:01:eb:84:b0:f9:08:f7:4e:b2:ab:cf:1a:70:62:36:21:8b:
         5a:a3:df:27:cd:fd:85:3f:c4:8a:7b:d5:79:32:b4:b2:ba:22:
         f5:8b:84:95:e2:57:d8:3a:1b:64:bb:04:9f:a3:22:a1:0b:d3:
         3c:35:7b:3e:2c:c9:0c:c8:ec:5c:d3:89:45:fc:6d:c6:a7:b5:
         56:96:82:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:30:14 2026 by rpki-client