Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/uNk4PIYJanbqK41FtsItOwXL1Zg.roa
File:                     uNk4PIYJanbqK41FtsItOwXL1Zg.roa (raw, json)
Hash identifier:          KqupTCZchfeUB9hyfZflN1S+IMcqfl0ymLS/RXGexfw=
Subject key identifier:   B8:D9:38:3C:86:09:6A:76:EA:2B:8D:45:B6:C2:2D:3B:05:CB:D5:98
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       08DD
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/uNk4PIYJanbqK41FtsItOwXL1Zg.roa
Signing time:             Tue 31 Mar 2026 07:44:24 +0000
ROA not before:           Tue 31 Mar 2026 07:44:24 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        210.250.22.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2269 (0x8dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:44:24 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B8D9383C86096A76EA2B8D45B6C22D3B05CBD598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:d9:fb:b9:0d:97:c7:3b:1c:7a:d1:b5:87:16:
                    2a:96:87:c4:1f:fd:2e:6f:d8:43:57:63:08:08:1e:
                    8e:3e:49:52:19:90:62:1c:61:26:85:39:c4:fa:33:
                    b8:38:e8:c6:86:4b:5c:be:af:56:21:8f:66:89:8d:
                    d5:a8:0c:02:4e:43:35:b6:36:e9:a1:f4:e3:12:db:
                    25:f6:ac:46:72:88:3c:c6:7c:bf:a3:61:e8:42:79:
                    24:3f:18:7b:65:66:54:f1:5b:3c:be:d8:98:90:fc:
                    a8:14:63:38:9d:64:e1:e0:d3:db:3d:6e:4d:ce:f2:
                    e1:9d:54:df:5e:6c:36:d2:4f:7e:ac:99:f2:df:f8:
                    35:51:ab:d8:f8:4a:14:5d:8e:2d:82:36:15:10:bb:
                    16:11:e6:2a:51:7a:b6:83:12:6d:8b:00:66:44:dc:
                    c8:4a:e1:da:35:d8:f8:70:60:c0:04:02:1d:fc:62:
                    fe:b9:06:50:54:bc:19:f1:ca:87:56:fc:50:ac:f5:
                    e3:cc:53:8c:78:13:b8:42:21:4c:71:99:c0:e9:5e:
                    58:fe:d0:46:b0:d4:93:60:af:c4:c4:4c:a4:9a:1f:
                    46:ca:8c:a1:78:ff:46:db:be:11:03:55:2d:a5:eb:
                    86:7f:41:98:7b:a2:ab:68:5e:de:a8:28:4b:13:44:
                    1f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:D9:38:3C:86:09:6A:76:EA:2B:8D:45:B6:C2:2D:3B:05:CB:D5:98
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/uNk4PIYJanbqK41FtsItOwXL1Zg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.250.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         56:a9:9e:21:7b:1c:b3:a3:ae:9d:ed:52:2a:90:bf:f0:95:1c:
         f7:9b:df:6f:cb:9e:9b:73:ce:4c:5d:bc:39:cf:de:d2:aa:61:
         55:04:35:c6:a7:98:16:e0:9d:c8:e4:11:5e:21:e2:f1:91:c3:
         3a:60:cc:1b:21:20:dd:b4:19:0b:9e:a0:61:ae:8a:f1:e4:b6:
         c7:2a:0a:e2:9c:42:7c:4d:15:17:59:b0:a1:18:2c:bf:f2:15:
         cd:50:a7:91:2d:8a:b6:76:8f:d0:5b:e6:47:72:b2:d8:bd:11:
         2a:92:3b:57:f1:58:50:bf:d4:06:0f:fc:d1:d6:a3:5d:eb:0a:
         b2:7e:9b:e9:48:d2:1b:49:99:66:75:7b:79:35:11:63:24:83:
         62:ad:a0:c9:b9:dd:65:cb:04:a5:f2:e8:3a:4a:08:46:d3:fd:
         a6:fc:ce:61:58:a2:09:e2:d4:10:c0:f3:e9:ad:17:35:50:0e:
         57:98:74:36:c0:d1:b0:1c:c2:7d:04:4e:0b:71:d5:21:cc:7c:
         e7:ba:c4:22:3f:b9:0c:82:58:26:f8:63:ba:a7:c7:24:3d:3d:
         98:6f:00:76:da:d7:6b:fc:03:e1:78:7d:80:8d:d8:cb:89:85:
         7a:5d:9e:95:38:97:53:9e:ea:68:e6:c1:1e:a6:9f:5c:b6:1f:
         9d:45:e6:cc
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICCN0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw
NzQ0MjRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEI4RDkzODNDODYwOTZB
NzZFQTJCOEQ0NUI2QzIyRDNCMDVDQkQ1OTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDn2fu5DZfHOxx60bWHFiqWh8Qf/S5v2ENXYwgIHo4+SVIZkGIc
YSaFOcT6M7g46MaGS1y+r1Yhj2aJjdWoDAJOQzW2Numh9OMS2yX2rEZyiDzGfL+j
YehCeSQ/GHtlZlTxWzy+2JiQ/KgUYzidZOHg09s9bk3O8uGdVN9ebDbST36smfLf
+DVRq9j4ShRdji2CNhUQuxYR5ipReraDEm2LAGZE3MhK4do12PhwYMAEAh38Yv65
BlBUvBnxyodW/FCs9ePMU4x4E7hCIUxxmcDpXlj+0Eaw1JNgr8TETKSaH0bKjKF4
/0bbvhEDVS2l64Z/QZh7oqtoXt6oKEsTRB+nAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUuNk4PIYJanbqK41FtsItOwXL1ZgwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTYxL3VOazRQSVlKYW5icUs0MUZ0c0l0T3dYTDFaZy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHS+hYwDQYJKoZIhvcNAQELBQADggEB
AFapniF7HLOjrp3tUiqQv/CVHPeb32/LnptzzkxdvDnP3tKqYVUENcanmBbgncjk
EV4h4vGRwzpgzBshIN20GQueoGGuivHktscqCuKcQnxNFRdZsKEYLL/yFc1Qp5Et
irZ2j9Bb5kdysti9ESqSO1fxWFC/1AYP/NHWo13rCrJ+m+lI0htJmWZ1e3k1EWMk
g2KtoMm53WXLBKXy6DpKCEbT/ab8zmFYogni1BDA8+mtFzVQDleYdDbA0bAcwn0E
Tgtx1SHMfOe6xCI/uQyCWCb4Y7qnxyQ9PZhvAHba12v8A+F4fYCN2MuJhXpdnpU4
l1Oe6mjmwR6mn1y2H51F5sw=
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:13:27 2026 by rpki-client