Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/xQHqda39Xzt5Y5732HVbAv4od48.roa
File:                     xQHqda39Xzt5Y5732HVbAv4od48.roa (raw, json)
Hash identifier:          JaCwsb+CnrrUNwpc5EI4Tlc2JMC+lgRoG4Zmz/DL+Gg=
Subject key identifier:   C5:01:EA:75:AD:FD:5F:3B:79:63:9E:F7:D8:75:5B:02:FE:28:77:8F
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       082B
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/xQHqda39Xzt5Y5732HVbAv4od48.roa
Signing time:             Tue 31 Mar 2026 07:42:55 +0000
ROA not before:           Tue 31 Mar 2026 07:42:55 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        106.128.0.0/11 maxlen: 11
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2091 (0x82b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:42:55 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C501EA75ADFD5F3B79639EF7D8755B02FE28778F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:80:ae:fa:2f:81:11:7b:6a:ce:19:06:da:ec:
                    4c:ef:c1:f3:3c:3a:a6:62:ca:21:25:58:92:f4:34:
                    49:85:0b:b0:72:b0:7e:5d:75:c2:ef:1f:f8:b3:39:
                    ac:1d:42:c7:03:ec:bb:bd:23:99:2f:ae:0b:39:68:
                    16:eb:a1:7c:c2:32:be:73:7f:38:fc:10:79:b2:10:
                    03:f4:45:29:9c:9f:a6:be:0c:90:5e:3c:dc:f8:12:
                    1b:14:16:07:c6:30:d5:dc:48:24:2e:8e:54:d9:a0:
                    ff:bc:0b:b0:33:90:c1:27:3f:e2:fe:67:92:3c:a7:
                    c6:1a:d7:a4:a6:ac:c3:69:1a:a0:71:9b:36:7f:25:
                    0d:da:e7:c6:37:d0:35:bf:51:f9:0e:43:b4:3c:f9:
                    e3:43:56:e0:d7:d3:82:88:3a:d4:3d:ad:94:c0:1c:
                    1d:5d:89:0f:1c:f1:cd:f4:af:0a:28:11:69:55:b3:
                    1f:c6:16:48:e4:55:00:3f:f3:ae:e8:94:10:8f:97:
                    97:ce:52:bc:5a:3e:31:01:e0:b3:75:3c:a2:4f:d9:
                    83:9b:d6:a0:7d:6a:32:5e:cd:3d:8c:ec:52:9b:75:
                    f5:90:ee:aa:bc:77:4d:c1:21:6f:2b:78:b0:bd:e4:
                    c0:2d:14:25:c5:97:58:d2:e2:64:86:03:1a:0e:c2:
                    5d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:01:EA:75:AD:FD:5F:3B:79:63:9E:F7:D8:75:5B:02:FE:28:77:8F
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/xQHqda39Xzt5Y5732HVbAv4od48.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.128.0.0/11

    Signature Algorithm: sha256WithRSAEncryption
         69:df:45:73:3e:d6:c7:15:6b:f7:3b:de:b9:2e:8c:4e:98:e6:
         95:ba:6e:86:2b:7b:5b:26:cd:60:d1:2f:dd:9b:e5:25:17:33:
         21:45:e6:9e:dd:21:64:40:b3:c5:47:00:59:f8:b1:29:54:ed:
         03:80:75:d0:9c:80:35:2a:b3:72:5d:91:23:c6:3a:ed:27:25:
         e0:2b:f6:6a:ac:d5:73:2d:3f:f0:56:68:32:3c:06:00:c7:5d:
         ee:1b:20:3a:58:8d:3c:19:04:fe:84:cb:ef:40:5d:88:98:a2:
         09:e7:97:62:43:68:f7:a8:b7:4c:bd:54:4d:b6:38:c3:ae:cd:
         a1:54:68:49:3c:a4:3b:fa:47:80:c0:b6:88:09:10:90:db:dd:
         f0:40:b5:f2:3a:e9:4d:6a:de:de:6f:26:7d:e5:39:f9:99:1b:
         58:f7:52:67:9b:ab:0e:10:69:da:2f:d8:31:9b:bf:c7:3c:7c:
         d6:12:76:52:3d:e1:a9:ac:a5:5e:f5:fb:bf:49:05:d8:32:13:
         54:d9:5b:37:d9:ec:38:f3:56:d6:7d:76:20:6b:6b:5c:d8:01:
         3c:d4:00:a6:ee:5a:3c:e1:75:e7:55:ae:a5:5d:af:d9:c1:20:
         30:61:97:f9:eb:78:d4:93:c1:18:61:5d:d7:2f:d6:1b:6e:b7:
         40:56:65:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:06:10 2026 by rpki-client