Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/yyUjWZxEjxCuzS-M4RsE9VmwWM0.roa
File:                     yyUjWZxEjxCuzS-M4RsE9VmwWM0.roa (raw, json)
Hash identifier:          Y21EYAH1tgVSN9SCovzme0z8m5SFUbgkRFANTK9tHKc=
Subject key identifier:   CB:25:23:59:9C:44:8F:10:AE:CD:2F:8C:E1:1B:04:F5:59:B0:58:CD
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       08A1
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/yyUjWZxEjxCuzS-M4RsE9VmwWM0.roa
Signing time:             Tue 31 Mar 2026 07:43:56 +0000
ROA not before:           Tue 31 Mar 2026 07:43:56 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        211.12.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2209 (0x8a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:43:56 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=CB2523599C448F10AECD2F8CE11B04F559B058CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3b:51:f7:13:44:4e:dd:5b:3f:6e:72:8e:76:
                    f8:6a:fd:f9:f6:a0:80:66:f2:fc:10:1c:25:e3:fa:
                    42:c0:b3:40:da:aa:d6:74:ff:94:46:bc:86:05:1a:
                    c7:20:89:0e:fb:85:a5:a4:58:64:78:94:f8:d1:fa:
                    fe:e4:bc:12:0e:1f:0c:6b:9d:84:fc:ef:23:39:d3:
                    18:40:c7:86:3e:eb:57:94:ae:20:a1:36:de:e0:8e:
                    12:e9:e9:0d:19:c8:04:3e:48:d8:35:9b:97:b6:a8:
                    01:19:41:d6:c5:49:5c:b2:9a:d0:1b:f4:93:ba:69:
                    6e:5d:bf:20:5c:1e:e3:d9:24:8d:d3:c2:19:04:11:
                    c9:1a:7f:64:5a:5a:41:47:99:81:d1:b6:ea:27:7b:
                    a7:48:47:2d:93:a7:d2:99:17:31:9d:5f:cc:61:76:
                    cd:dd:3d:28:8e:8b:65:07:23:41:06:bb:44:9d:8f:
                    64:3b:dc:aa:8e:1f:23:57:89:30:4e:eb:f9:7d:f4:
                    79:31:a3:78:27:83:cc:9e:7e:11:19:e2:00:71:d5:
                    ba:34:1e:f8:74:40:0b:a4:5a:24:cf:b3:ad:72:49:
                    86:4e:f3:27:86:77:97:b4:e2:8c:45:0b:a9:96:10:
                    c5:06:55:f8:3e:81:e3:66:ef:2e:f1:0e:12:5b:ca:
                    99:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:25:23:59:9C:44:8F:10:AE:CD:2F:8C:E1:1B:04:F5:59:B0:58:CD
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/yyUjWZxEjxCuzS-M4RsE9VmwWM0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.12.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         7f:c6:12:13:db:07:14:d3:5a:06:07:39:32:6f:69:29:64:0d:
         53:c9:05:55:9f:5c:67:ad:0f:6c:e5:8d:26:32:13:7c:2f:96:
         58:4c:ac:4a:6b:c1:15:b2:07:31:9f:9e:53:e9:0f:2e:c2:70:
         f4:04:cd:d8:d0:e5:70:39:8a:90:54:ac:bc:42:af:aa:60:62:
         7e:0e:a2:e9:a3:45:f0:63:cc:9d:48:a5:0f:68:c5:0a:84:d2:
         65:48:00:45:7b:92:7f:d9:32:5e:d3:7c:11:e9:6b:04:b8:8d:
         a8:58:c7:d1:15:73:f0:6b:20:9b:16:d3:d3:db:11:43:fb:f0:
         1f:e0:3a:da:09:7a:70:3e:bb:d0:3a:8e:38:62:40:30:97:49:
         4d:66:09:03:7c:0a:f5:40:43:cc:a2:32:97:f3:b5:7c:a3:10:
         bd:ff:a1:c1:eb:39:43:13:28:c3:13:6e:38:8d:66:af:40:cd:
         c3:ad:91:63:2f:10:65:c5:72:e0:20:eb:1b:ea:55:00:fa:b6:
         21:93:24:0d:fd:4e:8c:8e:e2:90:fb:cf:4d:8c:61:1d:16:b2:
         4b:6e:78:da:2f:40:7d:96:5c:a6:5f:f2:00:32:83:87:66:4a:
         80:c8:56:68:cf:ca:68:41:f8:6f:1b:bc:36:d7:4a:e2:3a:e3:
         80:7b:03:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:25:55 2026 by rpki-client