Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/z2KqnomRMuH6hgUGEdv-7khJpKw.roa
File:                     z2KqnomRMuH6hgUGEdv-7khJpKw.roa (raw, json)
Hash identifier:          1veiWNx29gKj3BNUY5+0u0qJH2qJg3qDiwcn1yvjhkI=
Subject key identifier:   CF:62:AA:9E:89:91:32:E1:FA:86:05:06:11:DB:FE:EE:48:49:A4:AC
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       088D
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/z2KqnomRMuH6hgUGEdv-7khJpKw.roa
Signing time:             Tue 31 Mar 2026 07:43:46 +0000
ROA not before:           Tue 31 Mar 2026 07:43:46 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        210.167.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2189 (0x88d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:43:46 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=CF62AA9E899132E1FA86050611DBFEEE4849A4AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a8:fd:a9:a8:02:1d:18:a3:88:cc:0b:27:f5:
                    fe:49:e5:10:1e:a3:49:3a:c5:f5:d0:f6:d8:69:7b:
                    81:df:b2:36:72:79:f4:a7:90:e8:64:25:0d:b5:98:
                    c1:4f:ea:9d:d8:28:f0:ff:d1:f8:5c:6e:05:25:56:
                    25:26:4f:a5:d0:8e:f2:cd:d9:ea:79:a1:3c:40:9b:
                    6b:63:79:5a:6b:8b:fb:d5:72:fc:d0:ed:e2:f8:e1:
                    55:d2:0a:43:5b:a4:db:ed:56:83:e0:95:e8:58:7c:
                    a9:72:e1:0a:1b:e8:57:16:a4:92:22:5a:eb:6b:cf:
                    ad:26:17:ad:ef:8c:2f:07:d9:f4:21:c5:36:e6:ff:
                    72:81:9c:06:b8:c8:14:b7:0c:2b:1b:02:77:41:c8:
                    4a:2c:4d:3d:a6:39:73:c1:cc:57:ea:88:1a:3e:cd:
                    38:a6:38:bd:ee:0a:0c:6d:d9:68:d9:db:16:93:14:
                    5c:5b:7a:f2:bf:23:ee:a3:8d:22:e5:0d:ea:f8:b2:
                    71:95:a5:84:4e:31:49:b0:4c:c9:f6:d7:68:48:71:
                    c3:ec:d4:dc:fe:ae:6b:32:fb:28:52:b8:75:17:fe:
                    e3:5c:c0:05:ae:2a:b5:64:d1:2b:a7:60:87:4b:0e:
                    f0:bf:18:7e:cc:28:14:19:bf:de:a2:d2:f8:d0:01:
                    2a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:62:AA:9E:89:91:32:E1:FA:86:05:06:11:DB:FE:EE:48:49:A4:AC
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/z2KqnomRMuH6hgUGEdv-7khJpKw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.167.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         99:15:19:7c:7c:7c:f1:73:eb:ba:ca:ab:75:e5:f5:0d:1f:b2:
         d2:f8:f6:4d:f2:f1:8b:fe:25:cf:37:94:77:26:96:5c:57:0e:
         a0:70:e0:c8:18:63:9a:63:a4:0b:2e:06:09:db:a2:9a:ca:15:
         d5:92:9a:17:c2:bd:16:9e:98:82:53:a9:95:bd:27:d6:59:0f:
         92:dd:08:13:6f:99:e6:a9:5d:15:3b:4f:04:fe:37:85:06:9f:
         25:02:35:fd:d3:36:c5:6b:38:a0:75:ff:25:34:d4:07:1a:8c:
         35:ab:34:bd:76:c4:88:84:68:61:83:b6:b9:b3:72:86:da:91:
         7d:4b:0e:d7:7e:28:5a:0b:4d:51:37:31:c5:9e:00:07:1d:af:
         93:49:d5:09:fa:61:21:20:f0:19:63:e9:b8:63:c7:2b:14:c0:
         57:b1:45:ce:e4:8b:fb:c3:4f:20:a2:ce:73:18:eb:67:1b:31:
         52:cd:02:b5:7c:c6:30:dd:9b:0e:35:b1:a8:01:c5:f8:40:c6:
         00:1a:21:c7:06:0d:de:02:4b:0c:49:73:fa:1a:52:40:57:f2:
         55:11:4a:ae:ec:4a:7f:5b:af:92:b8:2e:40:6f:d8:29:c9:f5:
         36:cd:75:a9:54:ef:3f:94:1b:b1:9c:19:72:0f:79:7d:9d:d2:
         ae:6e:30:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:49:20 2026 by rpki-client