Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/vyd0mq_Rs3Sw998oygj0Krqdxco.roa
File:                     vyd0mq_Rs3Sw998oygj0Krqdxco.roa (raw, json)
Hash identifier:          RrCbnKBdlzqliTPF+9RATwgufKksDrTuj46vOvG0JnM=
Subject key identifier:   BF:27:74:9A:AF:D1:B3:74:B0:F7:DF:28:CA:08:F4:2A:BA:9D:C5:CA
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       089C
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/vyd0mq_Rs3Sw998oygj0Krqdxco.roa
Signing time:             Tue 31 Mar 2026 07:43:54 +0000
ROA not before:           Tue 31 Mar 2026 07:43:54 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        210.173.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2204 (0x89c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:43:54 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=BF27749AAFD1B374B0F7DF28CA08F42ABA9DC5CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:19:43:93:0d:15:ce:8c:ac:03:fa:ef:41:02:
                    a5:bc:fb:79:b8:14:5d:a2:dc:ae:38:ff:d7:d3:9d:
                    57:61:22:b9:eb:b2:bf:bb:07:7f:cb:1a:f7:05:0a:
                    dc:c2:ce:49:32:04:ec:1b:c4:fb:d3:79:ed:34:65:
                    33:ca:bf:6e:9c:b3:09:a5:1b:40:26:69:a7:77:1b:
                    0c:47:6d:66:42:90:2f:03:3a:ae:40:a5:00:61:08:
                    49:c4:f6:e1:7c:0b:67:ca:df:35:ee:06:d9:7c:6e:
                    c5:1d:0d:30:3e:a3:df:6e:65:c5:bc:9a:28:7c:68:
                    46:bd:55:0b:b9:c7:f1:40:d0:78:46:0b:65:73:f0:
                    b3:80:7f:b8:b8:3f:ea:a5:58:8e:b7:d3:e7:40:ef:
                    26:67:e0:75:ec:4c:a0:e8:9a:7f:96:5b:b7:54:cb:
                    da:84:ee:6e:db:0e:d1:74:60:08:92:d7:00:b4:58:
                    4c:a1:e9:c1:16:c2:0c:73:90:4a:7a:28:d7:36:cb:
                    42:3b:ca:4c:52:12:4a:6e:ce:a7:7d:5d:b3:76:f2:
                    d3:af:37:dc:13:98:17:e5:ea:ed:1a:0a:e4:a2:6a:
                    cd:11:56:f2:b1:76:1c:99:cb:78:d2:6f:4f:ca:ad:
                    e1:7d:d6:cd:d9:74:d6:58:43:09:df:90:98:ec:06:
                    d2:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:27:74:9A:AF:D1:B3:74:B0:F7:DF:28:CA:08:F4:2A:BA:9D:C5:CA
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/vyd0mq_Rs3Sw998oygj0Krqdxco.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.173.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0f:3a:62:76:de:73:0f:fb:1d:c6:60:bf:de:16:88:c9:ac:0a:
         10:0d:e8:7c:87:2f:54:9b:4e:16:0f:5d:42:16:53:a1:2e:a1:
         e1:11:d3:6f:b3:ab:3e:7d:f2:5d:bb:c5:b4:40:a9:15:9d:a8:
         4c:87:ef:06:08:17:27:65:b5:8a:91:a7:32:2b:98:95:cb:13:
         02:77:d3:de:6f:a8:07:7d:e3:a8:4e:2f:a7:dc:66:a7:0d:92:
         db:fa:1e:2c:4a:3a:5e:2a:3e:c3:28:dd:f5:5a:9c:b8:90:50:
         e7:d9:0b:60:4e:54:4a:81:1a:c4:c5:ac:c4:9e:4c:0a:49:9f:
         7c:e1:cd:d6:58:8a:dc:92:9c:d0:11:10:0a:bc:37:98:5f:9f:
         c6:2b:02:17:8f:42:df:31:86:5d:50:67:76:4e:41:e7:93:72:
         ba:81:d7:80:d3:09:04:0f:69:49:0c:da:04:a0:33:dc:86:9a:
         82:7a:4d:a6:11:12:0e:47:18:8b:55:1c:9a:3f:1c:b7:a5:17:
         a7:8c:68:84:3e:77:90:60:91:84:b0:25:4c:02:b5:75:7c:86:
         e1:e7:2b:be:3b:e4:51:df:2d:27:51:6c:c8:14:87:0e:d0:ea:
         38:7b:f0:d1:19:5b:34:2a:ba:c4:3a:9c:d9:f4:ac:03:49:60:
         d5:93:ad:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:10:42 2026 by rpki-client