Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/xEWSphZnaPLsHGhkwoJk4BkveyM.roa
File:                     xEWSphZnaPLsHGhkwoJk4BkveyM.roa (raw, json)
Hash identifier:          c0GrUaBYdIcrrqWZtczCGiBUp+xwVW0kIc5Yx1arXjY=
Subject key identifier:   C4:45:92:A6:16:67:68:F2:EC:1C:68:64:C2:82:64:E0:19:2F:7B:23
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       07BF
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/xEWSphZnaPLsHGhkwoJk4BkveyM.roa
Signing time:             Tue 31 Mar 2026 07:42:01 +0000
ROA not before:           Tue 31 Mar 2026 07:42:01 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        210.198.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1983 (0x7bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:42:01 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C44592A6166768F2EC1C6864C28264E0192F7B23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4a:f1:3f:8c:86:d3:12:58:71:f9:7b:dd:10:
                    fa:28:95:dc:af:f4:cf:63:e6:ec:90:4d:bd:7a:31:
                    f8:05:b2:10:ce:00:07:4c:ba:90:f3:b4:b9:b6:dd:
                    87:98:a9:72:f1:6e:14:a4:eb:04:74:fe:60:b9:2b:
                    be:1a:39:ed:ea:4d:23:2c:d5:dc:a7:39:cb:05:0f:
                    1a:a8:8c:d5:a9:0c:bd:50:5f:3b:37:d8:0b:fa:c9:
                    f8:16:05:7c:0a:cc:33:ab:61:62:6a:82:fd:6c:08:
                    d8:db:18:77:89:aa:ee:62:3f:c2:85:28:8e:15:bc:
                    66:f7:06:5b:52:5b:24:00:df:4d:3e:47:3b:7f:be:
                    0b:7f:b7:b0:7f:65:43:fa:ff:3b:40:5e:b4:bd:a4:
                    13:6c:21:41:d9:da:53:ac:c3:03:c7:45:ac:6c:32:
                    ce:12:5a:9a:4e:40:04:05:a9:67:ff:fc:aa:a5:91:
                    51:07:26:2f:6a:bb:6e:94:4a:e6:ad:50:f7:3e:f4:
                    e5:5d:9f:43:92:43:27:48:66:d6:ab:c2:5d:e3:e5:
                    18:92:ce:1e:05:71:1f:db:5b:e6:02:c7:cf:5d:e8:
                    2c:47:3e:05:c4:17:d7:4a:75:96:0b:24:9b:b1:cd:
                    54:2b:77:76:f6:c0:13:5e:34:b9:b2:93:04:c2:9d:
                    12:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:45:92:A6:16:67:68:F2:EC:1C:68:64:C2:82:64:E0:19:2F:7B:23
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/xEWSphZnaPLsHGhkwoJk4BkveyM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.198.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         97:26:24:96:6b:49:c9:f0:42:c1:39:ee:e4:6a:9a:30:f8:bb:
         c6:1d:37:de:0d:f1:4c:2c:a6:4a:9e:11:09:d1:76:f1:7f:bd:
         b3:44:93:f0:a7:ca:c1:9a:11:a7:ff:d8:25:e7:d7:c4:48:84:
         90:1c:09:81:15:ec:36:6f:09:f5:9d:ed:41:14:c9:04:d2:0c:
         9e:e0:5a:d5:d8:2c:13:cc:d5:c5:e2:52:49:0b:2b:fb:4b:1c:
         ad:63:bb:5b:03:99:24:b6:77:62:ad:2b:5a:15:a3:85:63:82:
         0c:96:03:3d:ba:ad:1d:90:37:d2:f6:4c:58:0e:e3:56:95:d5:
         56:c9:c1:ba:a9:ec:99:a6:a1:29:cf:4e:19:e0:88:9e:4a:6f:
         7c:a4:28:13:66:64:ad:ca:83:ae:86:6a:99:28:48:df:11:f4:
         c6:59:3e:e5:f1:43:5a:e4:f8:c2:e4:52:b1:73:4d:0f:68:de:
         37:73:5c:a9:15:c7:67:53:8f:3b:e1:b9:1b:c6:9a:62:2d:33:
         82:af:0e:c7:c0:55:83:a8:2a:c4:df:1d:92:b9:25:73:f4:4e:
         b7:57:ad:d3:60:05:8e:71:5c:8e:15:78:e3:ab:53:e1:39:da:
         c7:05:ab:9d:02:1a:88:4d:90:19:9c:fc:f4:be:f2:c8:54:21:
         41:fe:f0:20
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICB78wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw
NzQyMDFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEM0NDU5MkE2MTY2NzY4
RjJFQzFDNjg2NEMyODI2NEUwMTkyRjdCMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCbSvE/jIbTElhx+XvdEPooldyv9M9j5uyQTb16MfgFshDOAAdM
upDztLm23YeYqXLxbhSk6wR0/mC5K74aOe3qTSMs1dynOcsFDxqojNWpDL1QXzs3
2Av6yfgWBXwKzDOrYWJqgv1sCNjbGHeJqu5iP8KFKI4VvGb3BltSWyQA300+Rzt/
vgt/t7B/ZUP6/ztAXrS9pBNsIUHZ2lOswwPHRaxsMs4SWppOQAQFqWf//KqlkVEH
Ji9qu26USuatUPc+9OVdn0OSQydIZtarwl3j5RiSzh4FcR/bW+YCx89d6CxHPgXE
F9dKdZYLJJuxzVQrd3b2wBNeNLmykwTCnRJFAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUxEWSphZnaPLsHGhkwoJk4BkveyMwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTYxL3hFV1NwaFpuYVBMc0hHaGt3b0prNEJrdmV5TS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAfSxoAwDQYJKoZIhvcNAQELBQADggEB
AJcmJJZrScnwQsE57uRqmjD4u8YdN94N8UwspkqeEQnRdvF/vbNEk/CnysGaEaf/
2CXn18RIhJAcCYEV7DZvCfWd7UEUyQTSDJ7gWtXYLBPM1cXiUkkLK/tLHK1ju1sD
mSS2d2KtK1oVo4VjggyWAz26rR2QN9L2TFgO41aV1VbJwbqp7JmmoSnPThngiJ5K
b3ykKBNmZK3Kg66GapkoSN8R9MZZPuXxQ1rk+MLkUrFzTQ9o3jdzXKkVx2dTjzvh
uRvGmmItM4KvDsfAVYOoKsTfHZK5JXP0TrdXrdNgBY5xXI4VeOOrU+E52scFq50C
GohNkBmc/PS+8shUIUH+8CA=
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:48:15 2026 by rpki-client