Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/ul7TLRs0aLNRqGBuKbNNEvhjNjY.roa
File:                     ul7TLRs0aLNRqGBuKbNNEvhjNjY.roa (raw, json)
Hash identifier:          96PxwPRkJoikXNQouiHaT/EQ7FsS4J8KWLtGx/YEqeE=
Subject key identifier:   BA:5E:D3:2D:1B:34:68:B3:51:A8:60:6E:29:B3:4D:12:F8:63:36:36
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0863
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ul7TLRs0aLNRqGBuKbNNEvhjNjY.roa
Signing time:             Tue 31 Mar 2026 07:43:26 +0000
ROA not before:           Tue 31 Mar 2026 07:43:26 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        211.1.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2147 (0x863)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:43:26 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=BA5ED32D1B3468B351A8606E29B34D12F8633636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:43:9b:3b:8f:67:d9:6e:81:f1:b3:41:0e:49:
                    8a:95:18:50:89:4d:c6:8c:06:71:f4:b7:d3:7c:dd:
                    f4:f6:73:88:08:97:d9:12:cb:76:72:46:75:37:bd:
                    7d:b6:5b:02:f4:06:ee:21:ba:59:17:4f:f8:56:12:
                    1e:50:5b:53:c7:c5:08:79:d7:71:c9:00:d3:50:0f:
                    9e:d4:4f:21:c5:76:7a:34:59:06:76:61:73:b0:28:
                    ff:39:db:0c:c3:b0:c1:c6:ea:20:56:c1:6a:35:51:
                    87:2c:ed:7b:30:02:ae:ba:ff:83:c3:4e:55:a9:85:
                    3f:6a:02:9e:9e:6e:e4:d4:2d:82:7f:6c:87:5c:98:
                    cb:32:09:e1:d4:83:18:91:a3:3c:bf:16:cf:20:fb:
                    19:8e:c6:4d:b7:f4:d0:aa:e2:b7:ed:b4:5c:75:6c:
                    6d:0e:09:43:05:61:7f:2d:68:69:d5:70:e8:f7:6f:
                    14:20:06:6b:a9:ad:e7:e5:4f:2b:ec:90:14:33:5f:
                    1c:5b:0d:7e:c8:9c:a8:25:6e:e0:23:40:2b:30:67:
                    e2:a6:f2:62:10:96:d5:8b:27:8a:5c:10:7a:55:61:
                    42:ea:eb:2a:f9:d2:ac:07:c4:19:a9:d9:2b:55:09:
                    95:10:68:2e:60:7f:ec:ea:11:7d:f2:31:48:8a:c3:
                    b9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:5E:D3:2D:1B:34:68:B3:51:A8:60:6E:29:B3:4D:12:F8:63:36:36
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ul7TLRs0aLNRqGBuKbNNEvhjNjY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.1.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:cd:6f:3c:68:7e:1d:33:a9:f8:61:36:4a:07:9f:39:57:df:
         3c:49:3f:9d:32:e3:7d:50:2d:ea:49:72:f4:f7:a7:f7:7b:4f:
         cf:cf:f5:35:89:ec:2b:d8:ea:63:a1:dc:67:9c:27:ad:69:d4:
         44:d0:72:8f:fb:02:17:3a:f7:de:c7:8f:d8:f7:99:52:61:d3:
         46:83:53:8d:fb:d6:4c:56:a4:78:2d:1e:b3:1d:a0:69:84:61:
         78:f0:82:d6:51:cf:f9:f7:0c:ac:ff:59:1a:18:c2:a3:ad:fc:
         a4:30:f9:da:90:b5:d8:40:a2:ce:03:13:00:58:50:1c:dc:77:
         80:1e:5d:de:af:bf:b2:4e:d5:28:e2:c6:dc:7c:04:45:45:c0:
         e5:ed:07:47:29:37:a9:e6:d1:7c:8b:26:69:67:4e:39:97:5b:
         a9:72:36:66:d8:62:77:5f:b8:06:4c:0b:b6:13:4b:c0:e3:bd:
         ff:78:a0:3c:14:ea:73:59:ab:28:a8:f3:20:15:6d:51:70:ad:
         cf:e5:80:09:de:e5:80:05:37:3d:09:f9:0a:af:cc:bb:9d:57:
         3f:71:f9:05:d3:7a:18:fa:52:64:14:67:79:dd:0e:06:af:ce:
         93:87:8b:58:fd:81:33:80:fc:36:ae:9c:06:a4:a6:f4:29:71:
         34:11:b8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:59:21 2026 by rpki-client