Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/uSvrgvoEzmiHtb0gBaWqIZYxuCg.roa
File:                     uSvrgvoEzmiHtb0gBaWqIZYxuCg.roa (raw, json)
Hash identifier:          CWlIPNxz9hErCI19R91d0FoabnXxfZQZXpv20aY0xMA=
Subject key identifier:   B9:2B:EB:82:FA:04:CE:68:87:B5:BD:20:05:A5:AA:21:96:31:B8:28
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0824
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/uSvrgvoEzmiHtb0gBaWqIZYxuCg.roa
Signing time:             Tue 31 Mar 2026 07:42:53 +0000
ROA not before:           Tue 31 Mar 2026 07:42:53 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        222.10.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2084 (0x824)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:42:53 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B92BEB82FA04CE6887B5BD2005A5AA219631B828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:8e:07:86:e3:59:8d:ce:28:70:22:8a:79:ae:
                    8d:b4:2f:ea:af:cd:12:8a:1c:58:cd:91:f6:24:c4:
                    d7:40:81:6d:c3:78:2a:4b:59:74:79:74:d5:56:d7:
                    4e:6e:c6:33:58:58:de:a3:03:1d:dd:e8:79:e4:7c:
                    e0:e8:e9:33:94:4b:f2:d1:3d:e2:57:c2:34:00:18:
                    82:a0:d0:8d:69:72:17:c0:ce:9f:ac:4f:02:51:6c:
                    b9:1b:c2:06:d4:2b:f4:c7:07:9d:7d:6e:2a:24:88:
                    c8:fd:49:ed:f7:86:29:0e:5c:e5:4d:92:c0:6a:fb:
                    fe:9d:51:cf:b3:0e:2a:c8:47:6f:77:77:9c:bd:82:
                    6f:d4:af:76:92:f1:06:bc:60:58:0c:25:0b:ab:6b:
                    35:21:8f:5d:01:01:71:77:5a:67:fd:c7:05:b9:72:
                    66:b1:cc:67:03:7a:ad:db:47:34:36:8e:68:0a:8c:
                    dd:e8:47:17:09:9a:5b:75:9d:1b:f0:6d:05:f1:9f:
                    b7:d1:2b:a9:4b:98:f4:97:2d:78:42:08:ad:23:2d:
                    df:b6:4a:22:c1:2b:3b:5b:dd:3d:9d:e1:20:08:8e:
                    dd:06:03:11:fa:1f:7f:ff:39:4e:42:07:65:1b:e0:
                    82:e7:af:e1:f4:82:87:72:58:d7:8a:5a:ed:24:5a:
                    26:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:2B:EB:82:FA:04:CE:68:87:B5:BD:20:05:A5:AA:21:96:31:B8:28
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/uSvrgvoEzmiHtb0gBaWqIZYxuCg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  222.10.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         41:60:f0:58:a4:20:51:0c:4a:0d:10:dd:d3:e9:5a:45:0b:5a:
         d5:bd:44:a7:e8:db:c2:e3:a4:dc:72:8b:3e:d5:0b:4e:c4:ee:
         65:38:ea:b1:ee:23:5a:5d:a5:95:ae:73:67:4d:f3:af:2a:c5:
         d7:2e:da:79:b6:c4:b6:8b:c6:47:70:a2:c9:c8:6d:f2:3e:a9:
         f5:30:e6:f6:fd:e0:6b:a2:30:18:22:39:32:6f:ac:13:5a:7b:
         43:0c:6a:63:14:45:b4:47:58:f9:61:23:3a:49:36:b5:a8:71:
         b8:1d:44:5e:36:58:4d:ef:07:44:7a:fd:7c:d3:db:5b:dc:b6:
         49:50:b1:ab:41:9d:4f:11:a7:93:82:2b:0f:d0:c8:c5:7f:77:
         da:f4:f3:91:e0:74:87:34:29:36:f8:bb:02:b5:8d:26:97:4f:
         f1:83:41:ee:9c:32:24:89:dc:d0:f0:22:92:94:14:9f:6d:72:
         26:fc:eb:28:19:f3:e1:a9:96:27:86:aa:e9:15:a9:fe:c5:88:
         1c:3c:a8:ea:09:15:8d:c8:19:cc:35:8c:76:e9:44:c3:3c:78:
         8a:d0:01:d8:e6:50:f9:86:0d:73:61:44:4e:8e:c8:9e:e9:62:
         06:92:7a:f2:50:2d:37:9b:f0:41:86:ec:4e:36:ed:24:af:50:
         76:d2:41:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:01:18 2026 by rpki-client