Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/zQpT_biqMP-sRCsqE8_8N4Hsxuo.roa
File:                     zQpT_biqMP-sRCsqE8_8N4Hsxuo.roa (raw, json)
Hash identifier:          Fb0GGZ4Eso1jLe8jcvRxTyEKS3F9wJn0n7d6Rgc2qxQ=
Subject key identifier:   CD:0A:53:FD:B8:AA:30:FF:AC:44:2B:2A:13:CF:FC:37:81:EC:C6:EA
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       08B3
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/zQpT_biqMP-sRCsqE8_8N4Hsxuo.roa
Signing time:             Tue 31 Mar 2026 07:44:05 +0000
ROA not before:           Tue 31 Mar 2026 07:44:05 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        210.189.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2227 (0x8b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:44:05 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=CD0A53FDB8AA30FFAC442B2A13CFFC3781ECC6EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:01:c8:0a:2a:f0:05:a8:c1:96:d8:e5:3d:35:
                    1b:9f:fd:a5:e3:0b:81:95:7f:33:27:6b:f8:f4:a1:
                    d3:64:40:8e:2f:cc:29:07:f0:dd:03:14:45:b6:6f:
                    6e:5d:5d:7d:27:0c:09:01:bf:cb:6b:bb:a8:0e:5e:
                    a7:a8:e0:54:1d:3c:d8:39:d1:23:33:e2:62:5e:6f:
                    fb:ed:e7:5d:8c:d9:3c:0b:50:49:57:29:ac:bc:64:
                    f0:0a:81:0f:3e:a8:89:15:ae:4c:5b:15:55:3e:81:
                    00:d5:ec:e4:24:4f:45:1c:47:9f:5f:4e:97:16:44:
                    f2:32:a6:3c:a9:1e:fb:7e:a2:28:1a:da:43:18:c5:
                    30:48:72:55:b0:13:00:d2:64:b9:59:fc:cc:97:ee:
                    b3:ef:ad:b1:3b:61:d3:fd:0d:f5:fb:c7:b4:e6:b9:
                    2b:9f:a6:96:88:f0:af:ca:12:f9:81:b6:ee:1e:54:
                    d8:36:51:29:77:8e:94:53:89:69:4a:f0:55:5c:10:
                    e9:c6:ee:0a:ca:19:84:02:f2:e8:ff:ee:13:21:27:
                    5f:62:be:44:9d:d9:50:2c:57:b3:e5:04:24:32:b7:
                    7f:b4:d5:04:ee:96:d1:18:a4:16:c7:ae:95:c9:60:
                    d2:ee:18:8c:ae:86:00:cf:02:47:97:2b:16:fc:eb:
                    ed:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:0A:53:FD:B8:AA:30:FF:AC:44:2B:2A:13:CF:FC:37:81:EC:C6:EA
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/zQpT_biqMP-sRCsqE8_8N4Hsxuo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.189.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8a:e7:00:e1:82:10:63:02:75:e5:f1:63:e4:d3:3d:41:a8:83:
         2b:2d:2f:b6:1c:f2:23:5d:e0:71:ec:8c:bb:97:f9:9e:60:c7:
         ba:da:90:51:52:0e:e4:d4:43:33:7f:50:fc:81:34:f9:ac:a3:
         83:86:cb:1a:83:db:4b:a8:11:70:80:92:02:9e:34:1a:4a:e9:
         ac:13:7e:aa:e0:b8:08:50:1b:56:15:0f:6d:67:6f:c1:f7:13:
         4b:96:ef:cc:3d:30:22:d6:b0:17:b3:d3:97:de:b8:d0:63:87:
         93:d5:77:28:f3:c9:35:b8:c0:bc:6b:25:e0:9f:a9:c8:f6:a4:
         e1:74:9a:c7:a6:2b:7e:e9:a8:81:f1:97:fb:75:a8:13:f7:1f:
         2c:bd:a1:c8:90:90:26:fd:a5:74:39:4a:df:6a:77:c6:3b:58:
         44:ed:21:76:e2:c3:73:bf:8a:3a:ce:c6:c2:e5:a0:0a:41:35:
         46:0a:15:28:c4:a0:4f:94:b1:44:20:1f:42:9c:2c:ed:85:99:
         c1:86:db:61:a7:c1:bd:b0:23:0f:4b:97:c4:a0:88:c9:4b:12:
         ad:2b:7c:e0:97:11:46:22:68:7e:1d:0b:37:09:5a:e0:85:7a:
         7e:1e:ca:e9:ec:4d:49:fd:30:60:f4:cf:83:51:9b:0f:61:61:
         77:c8:9d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:13:06 2026 by rpki-client