Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/NUwMs7eC5Abgfla0XMM2piuJO0o.roa
File:                     NUwMs7eC5Abgfla0XMM2piuJO0o.roa (raw, json)
Hash identifier:          tSQK6L+qR7Qc5KEmQIZ94pBkbYUy+OdJdm63Dd7xERA=
Subject key identifier:   35:4C:0C:B3:B7:82:E4:06:E0:7E:56:B4:5C:C3:36:A6:2B:89:3B:4A
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       092A
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/NUwMs7eC5Abgfla0XMM2piuJO0o.roa
Signing time:             Thu 20 Aug 2026 10:08:32 +0000
ROA not before:           Thu 20 Aug 2026 10:08:32 +0000
ROA not after:            Sun 15 Aug 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        111.87.4.32/27 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 09:23:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2346 (0x92a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Aug 20 10:08:32 2026 GMT
            Not After : Aug 15 01:30:02 2027 GMT
        Subject: CN=354C0CB3B782E406E07E56B45CC336A62B893B4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:48:e2:d2:82:44:a0:21:ef:93:d5:b3:fd:ee:
                    6d:ec:3d:e3:a5:52:1c:12:eb:94:b5:38:af:da:68:
                    78:7f:b8:1d:43:ba:15:ab:b5:7d:6b:3d:a2:aa:51:
                    bb:37:b2:6b:b4:69:e4:c3:94:7d:8b:20:e7:a1:16:
                    3c:22:dd:7f:53:c6:70:5b:27:3a:ed:cf:92:87:7f:
                    29:2e:8b:07:cd:4e:8a:d6:cd:23:6f:09:e5:35:cf:
                    79:06:68:3c:61:d9:e8:87:7f:37:8e:79:d4:10:43:
                    e8:c5:98:b7:ba:52:32:ee:e6:9b:f6:0a:dc:7f:45:
                    eb:e5:ff:84:04:ee:23:96:9e:46:2a:23:03:4d:68:
                    c7:40:7b:f8:61:d7:d5:eb:4c:ff:83:0b:af:7e:3f:
                    46:20:d2:77:55:69:f5:d1:6b:1d:ef:9c:45:c2:2b:
                    95:20:73:63:40:84:3d:74:9a:f6:02:84:03:c7:ca:
                    0a:d1:4e:86:04:ad:63:e0:73:26:8f:30:60:74:b4:
                    ff:ae:eb:5b:99:44:23:10:ab:64:1c:eb:f5:e2:48:
                    c4:ae:47:14:0e:f7:b9:2b:c6:99:dc:80:72:8b:82:
                    46:81:77:2c:6c:98:cf:6b:71:15:18:c1:f9:71:94:
                    8d:f2:ad:36:ea:a7:ef:0b:b9:5b:fe:44:57:7b:46:
                    92:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:4C:0C:B3:B7:82:E4:06:E0:7E:56:B4:5C:C3:36:A6:2B:89:3B:4A
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/NUwMs7eC5Abgfla0XMM2piuJO0o.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.87.4.32/27

    Signature Algorithm: sha256WithRSAEncryption
         29:f9:71:d7:d8:f8:1b:74:3b:20:ba:ee:b2:a7:f3:7e:39:8f:
         27:55:bf:8e:bd:10:a3:a6:2f:4d:1a:86:e9:6c:d3:c0:01:99:
         f8:a5:ff:a8:2c:2e:1e:20:f5:ee:21:27:1d:bf:5f:aa:8f:e4:
         a0:9a:76:28:74:07:1c:40:b1:8a:73:7d:6b:f8:bb:28:09:a2:
         14:e8:bf:24:5b:e6:ae:52:96:b0:99:84:7e:c7:4c:08:f0:d3:
         52:1a:6f:c4:7d:a4:b1:6c:e6:1e:0b:1a:73:ab:fd:73:e8:27:
         cf:95:fd:6d:5f:1b:c0:30:31:f9:ca:83:42:cd:56:01:27:0b:
         44:1e:f8:b9:b4:73:a4:1b:b4:5e:30:9d:9b:ff:14:e8:dd:52:
         01:1e:ce:52:68:27:33:0c:79:a3:6a:02:65:79:e0:fb:04:a5:
         d6:1a:48:0a:90:38:18:3e:23:7e:ce:45:e9:f6:df:b8:21:2c:
         a7:98:0c:5d:5f:dc:94:46:1b:6d:65:ef:b0:df:b1:af:ce:22:
         db:12:70:a2:b6:5c:ce:74:2c:19:2f:37:4d:5c:f4:de:be:57:
         ae:c3:a5:9c:53:60:f3:9b:6f:be:62:46:67:e7:7b:1a:41:aa:
         96:50:f6:c0:08:82:03:e8:5b:ef:62:1e:2e:a7:46:ff:ed:b7:
         0f:4c:ec:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 15:22:37 2026 by rpki-client