Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/xt6kvaXwPraYoM1n6e8HmA7Mito.roa
File:                     xt6kvaXwPraYoM1n6e8HmA7Mito.roa (raw, json)
Hash identifier:          PVNblCWP6TO7dKjBaAQs965UTt1V18/rAKUh/t/Q0ao=
Subject key identifier:   C6:DE:A4:BD:A5:F0:3E:B6:98:A0:CD:67:E9:EF:07:98:0E:CC:8A:DA
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       078E
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/xt6kvaXwPraYoM1n6e8HmA7Mito.roa
Signing time:             Tue 31 Mar 2026 07:41:40 +0000
ROA not before:           Tue 31 Mar 2026 07:41:40 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        61.202.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1934 (0x78e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:41:40 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C6DEA4BDA5F03EB698A0CD67E9EF07980ECC8ADA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:02:d9:f5:db:f0:05:fd:1c:7e:8a:d8:61:ae:
                    a8:72:a0:a1:b9:9f:06:9f:16:d1:da:49:7c:7f:cd:
                    eb:75:db:17:4b:8b:4c:7a:d6:29:d7:a7:21:99:3c:
                    3e:11:6c:c7:ac:eb:a4:e8:25:40:1a:7f:ab:81:83:
                    72:88:7c:89:13:48:45:4e:c6:ea:d5:84:5a:4b:9e:
                    07:59:1c:09:e4:3d:51:77:83:dd:23:b4:fa:94:43:
                    21:ed:d1:e4:69:ab:73:72:7b:53:b4:c4:24:5e:1d:
                    a7:7f:d8:05:d2:6f:5f:4e:9c:1e:c3:a7:24:32:4a:
                    47:f4:e7:4f:9b:c1:99:30:34:75:ef:c5:e4:2a:dc:
                    dc:ec:ac:84:b8:2c:2b:f9:d2:ad:14:bc:cc:81:20:
                    5a:36:f3:6e:01:91:2a:99:44:57:40:4a:36:d3:81:
                    75:0c:3e:ec:5a:ed:59:26:f2:2c:31:a9:33:08:6b:
                    2b:58:11:5e:70:75:23:84:1c:ca:27:5d:eb:71:f0:
                    a0:4d:61:29:fe:99:e7:32:e3:32:87:05:c9:09:c7:
                    b8:59:e3:56:1c:7e:f3:24:10:df:12:54:59:06:6e:
                    71:3f:a4:7c:d8:6a:51:f4:9d:82:85:dd:84:67:79:
                    65:0d:5c:6b:c2:ab:c2:aa:2b:de:5a:d5:42:c2:85:
                    b9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:DE:A4:BD:A5:F0:3E:B6:98:A0:CD:67:E9:EF:07:98:0E:CC:8A:DA
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/xt6kvaXwPraYoM1n6e8HmA7Mito.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.202.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         3a:fc:88:17:f9:35:56:70:fb:4f:98:b7:5e:67:e1:9b:6b:f7:
         12:83:24:2f:5c:9f:22:7c:11:0c:1f:79:da:d5:39:13:50:48:
         2e:93:5c:ac:b3:be:b9:05:3c:85:e0:de:39:9f:c6:62:94:35:
         e9:3a:99:95:8d:5e:71:f1:4c:18:c6:79:7a:d9:52:b3:52:36:
         07:fa:46:94:2c:87:94:b7:71:ba:d5:fd:c0:22:c2:56:02:19:
         fb:9b:66:51:92:cf:c2:9f:64:3a:39:a3:96:20:e0:5d:40:02:
         75:f5:31:7c:0e:b0:21:ca:3e:18:7a:1f:bf:11:8b:2a:3d:57:
         7f:e0:ce:1b:16:0e:3c:8d:6d:bc:9d:52:2a:63:d2:60:b6:5b:
         ec:59:43:68:72:eb:1e:a3:43:fd:4c:95:89:63:52:d3:8a:44:
         07:22:8d:8a:57:67:fe:04:e3:4e:2a:a7:61:4d:9c:84:a8:8e:
         c3:2d:0d:6c:bd:0e:06:e4:5b:86:0c:dc:0b:ce:f6:e1:bc:72:
         0a:0a:78:47:ba:dc:98:9a:9d:33:47:ce:ba:61:77:a3:73:82:
         fe:64:d3:03:99:63:30:3f:52:8c:6b:33:96:ca:2a:bb:2c:bd:
         49:2e:03:eb:d9:85:90:8b:a1:5d:49:7e:a0:50:8c:e2:34:86:
         38:ff:75:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:12:31 2026 by rpki-client