Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/yz2-_2PqQ2yKPQPdtYjqGHcgt90.roa
File:                     yz2-_2PqQ2yKPQPdtYjqGHcgt90.roa (raw, json)
Hash identifier:          ZO+qaETHGJbwLRBtO2tQ13qKhCFq2rEVQrGFbGc5NXA=
Subject key identifier:   CB:3D:BE:FF:63:EA:43:6C:8A:3D:03:DD:B5:88:EA:18:77:20:B7:DD
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       079F
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/yz2-_2PqQ2yKPQPdtYjqGHcgt90.roa
Signing time:             Tue 31 Mar 2026 07:41:46 +0000
ROA not before:           Tue 31 Mar 2026 07:41:46 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        113.144.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1951 (0x79f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:41:46 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=CB3DBEFF63EA436C8A3D03DDB588EA187720B7DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cf:0c:f7:35:74:15:dc:c9:e0:97:99:9c:a8:
                    e8:82:b4:04:55:17:b2:1d:57:e6:ca:88:c2:0c:ba:
                    3b:96:73:8a:9f:fe:61:81:41:13:70:b5:53:80:36:
                    b4:23:18:54:15:e8:9b:5b:42:96:3d:8e:e0:b0:40:
                    1f:fd:82:33:af:ba:46:6e:61:58:bd:08:92:8b:44:
                    01:7d:eb:43:45:3a:e9:13:f0:1e:9b:7a:c4:e7:80:
                    9b:dc:f2:cc:f2:d0:f6:67:bc:47:41:65:a5:d4:40:
                    87:cf:79:5b:4f:6c:7c:3d:0f:ea:3f:6a:c6:0e:26:
                    f0:bc:e0:55:e5:2b:b2:07:de:cd:25:4e:97:24:2c:
                    19:e5:7a:b9:77:ee:64:88:0e:14:44:7c:f0:e0:c0:
                    09:b7:7e:ad:e0:d2:64:4c:7a:e1:5a:4d:1f:36:2c:
                    7e:28:a0:23:4b:30:47:36:35:ad:d7:29:e9:56:ca:
                    1d:77:3e:cd:84:70:6e:71:c8:f6:cf:e0:f0:dc:38:
                    77:dd:5a:31:70:38:64:31:3d:f8:59:b9:19:4d:d3:
                    80:3a:7c:7d:3b:92:a4:2e:b4:37:36:46:56:3f:c1:
                    33:f4:d4:24:5b:68:3f:1b:92:13:a0:ce:53:93:3a:
                    68:55:23:63:30:d7:e5:24:26:0e:30:3e:9c:25:40:
                    df:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:3D:BE:FF:63:EA:43:6C:8A:3D:03:DD:B5:88:EA:18:77:20:B7:DD
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/yz2-_2PqQ2yKPQPdtYjqGHcgt90.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.144.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0a:1f:75:f4:34:9d:bd:3b:39:bc:27:48:7a:80:60:2e:4d:62:
         26:36:01:a9:c9:d5:c7:7e:14:a4:24:10:9b:81:54:d6:9e:5d:
         70:9b:57:63:61:19:0b:d4:32:45:04:b7:71:08:0c:d2:a3:9b:
         ab:c0:7b:da:51:a4:c5:98:82:a9:19:cd:df:81:4b:60:2b:81:
         e0:d3:d1:7c:c9:a9:11:bc:79:57:dc:75:ec:bc:a4:ae:9b:c8:
         5e:d3:8b:d4:0b:9d:25:8b:32:f6:95:98:73:f5:a0:73:82:bf:
         b0:d0:6f:85:29:a4:25:68:88:84:b1:6e:22:1d:86:29:fd:75:
         7c:8c:53:79:ad:ef:64:2a:62:17:4a:0d:0b:ee:18:7a:d9:7d:
         4d:b4:aa:42:74:af:5c:3b:ff:42:a2:5c:13:0d:11:c8:38:40:
         4a:73:69:86:28:02:cc:a4:70:4c:21:39:2a:b8:72:87:90:f0:
         f8:5d:72:3c:88:90:96:ba:4e:67:ca:50:eb:01:f1:e8:31:79:
         08:76:3c:99:b3:ad:1e:ce:81:0b:0f:e4:63:fe:cb:04:21:e1:
         4f:ed:f1:58:bc:aa:2e:7f:e8:c1:e5:f6:b8:cc:28:db:0c:c0:
         42:7e:6f:15:47:f2:f8:f0:e5:65:19:2d:ea:cf:96:8a:a4:15:
         aa:fe:1d:4e
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgICB58wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw
NzQxNDZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKENCM0RCRUZGNjNFQTQz
NkM4QTNEMDNEREI1ODhFQTE4NzcyMEI3REQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCzzwz3NXQV3Mngl5mcqOiCtARVF7IdV+bKiMIMujuWc4qf/mGB
QRNwtVOANrQjGFQV6JtbQpY9juCwQB/9gjOvukZuYVi9CJKLRAF960NFOukT8B6b
esTngJvc8szy0PZnvEdBZaXUQIfPeVtPbHw9D+o/asYOJvC84FXlK7IH3s0lTpck
LBnlerl37mSIDhREfPDgwAm3fq3g0mRMeuFaTR82LH4ooCNLMEc2Na3XKelWyh13
Ps2EcG5xyPbP4PDcOHfdWjFwOGQxPfhZuRlN04A6fH07kqQutDc2RlY/wTP01CRb
aD8bkhOgzlOTOmhVI2Mw1+UkJg4wPpwlQN/LAgMBAAGjggHYMIIB1DAdBgNVHQ4E
FgQUyz2+/2PqQ2yKPQPdtYjqGHcgt90wHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTYxL3l6Mi1fMlBxUTJ5S1BRUGR0WWpxR0hjZ3Q5MC5yb2EwHgYI
KwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwBxkDANBgkqhkiG9w0BAQsFAAOCAQEA
Ch919DSdvTs5vCdIeoBgLk1iJjYBqcnVx34UpCQQm4FU1p5dcJtXY2EZC9QyRQS3
cQgM0qObq8B72lGkxZiCqRnN34FLYCuB4NPRfMmpEbx5V9x17LykrpvIXtOL1Aud
JYsy9pWYc/Wgc4K/sNBvhSmkJWiIhLFuIh2GKf11fIxTea3vZCpiF0oNC+4Yetl9
TbSqQnSvXDv/QqJcEw0RyDhASnNphigCzKRwTCE5Krhyh5Dw+F1yPIiQlrpOZ8pQ
6wHx6DF5CHY8mbOtHs6BCw/kY/7LBCHhT+3xWLyqLn/oweX2uMwo2wzAQn5vFUfy
+PDlZRkt6s+WiqQVqv4dTg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:51 2026 by rpki-client