Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/WYumDTkHuFW-9U9Dsp14ZqOKa18.roa
File:                     WYumDTkHuFW-9U9Dsp14ZqOKa18.roa (raw, json)
Hash identifier:          99Jix4gL+ZRhSs7CZBUG4qaQSMKZn2/kUp6KfNaXm0g=
Subject key identifier:   59:8B:A6:0D:39:07:B8:55:BE:F5:4F:43:B2:9D:78:66:A3:8A:6B:5F
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0929
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/WYumDTkHuFW-9U9Dsp14ZqOKa18.roa
Signing time:             Thu 20 Aug 2026 09:52:26 +0000
ROA not before:           Thu 20 Aug 2026 09:52:26 +0000
ROA not after:            Sun 15 Aug 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        106.186.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 09:23:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2345 (0x929)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Aug 20 09:52:26 2026 GMT
            Not After : Aug 15 01:30:02 2027 GMT
        Subject: CN=598BA60D3907B855BEF54F43B29D7866A38A6B5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:22:5d:eb:77:60:bf:b0:27:b1:79:ec:7d:ef:
                    c1:49:e1:95:e3:1c:2d:f0:ab:98:20:06:a9:ea:ac:
                    7e:97:f5:bd:78:bd:65:b2:43:9a:1d:86:93:3f:27:
                    89:6b:6c:6d:02:90:8c:4d:b4:08:28:d0:5a:32:c0:
                    04:74:97:ce:d5:dc:0e:d7:0f:3f:e3:4e:4c:59:5a:
                    28:4d:f8:69:46:5a:73:63:f9:e4:ef:46:25:c4:bf:
                    cc:67:e9:62:60:bc:b3:b6:51:8b:b5:5c:9d:fc:e9:
                    c0:e7:e8:47:47:a8:a0:b6:b1:f8:71:47:40:0a:5a:
                    2e:36:71:a9:db:84:99:a2:1f:dc:28:30:3b:81:85:
                    6d:72:a8:7e:88:59:0f:61:b3:fa:32:4e:93:15:d4:
                    e5:f6:5c:06:18:34:64:1e:27:f7:58:be:36:8a:73:
                    b0:26:6b:52:2c:ca:3f:ac:14:13:66:42:e1:70:99:
                    62:b6:e0:a3:30:24:c4:b4:2c:6f:27:31:27:35:9c:
                    36:fd:23:b8:de:97:72:85:bd:79:ed:0d:f1:fb:ea:
                    cb:bd:4f:ff:ee:99:db:eb:ea:c9:ca:49:20:a3:3d:
                    70:d7:f7:c4:ca:6d:21:0d:ca:a0:d4:cd:32:c0:d1:
                    e3:e5:27:e2:99:13:ce:30:e6:f0:03:8e:98:db:49:
                    47:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:8B:A6:0D:39:07:B8:55:BE:F5:4F:43:B2:9D:78:66:A3:8A:6B:5F
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/WYumDTkHuFW-9U9Dsp14ZqOKa18.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.186.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         9e:39:4d:1c:e9:d0:00:63:32:04:f2:9d:14:07:30:7b:65:84:
         8c:97:c5:74:f7:73:35:d1:09:ce:88:13:0f:0f:a6:d7:28:a7:
         e9:5b:0f:14:be:87:57:dd:a3:1d:66:56:ac:ee:37:55:52:ab:
         00:ba:80:a2:e5:5f:c6:4a:c3:58:50:a8:11:0e:ab:e2:6f:91:
         c5:ec:57:dd:8b:5e:5f:46:c2:a0:1c:70:4a:cd:ea:ec:ab:e5:
         ad:31:eb:4f:b3:35:29:bd:66:5a:05:bc:18:c4:e3:f5:87:de:
         97:34:6a:aa:bd:71:72:ea:82:9c:e7:04:77:45:02:d2:e5:b4:
         de:87:9c:8c:e0:40:11:d1:27:a8:63:b0:ea:fc:39:a9:89:25:
         0f:55:ba:d6:2f:cb:91:29:1e:27:6c:65:69:d8:9f:2a:e8:c3:
         7b:ab:18:7f:08:c7:8a:a7:9a:f4:51:aa:6c:c7:d7:2a:88:9e:
         c1:f4:25:58:e8:05:de:18:f8:50:a0:6e:6a:dd:c2:94:cd:a2:
         a1:37:f1:7f:e2:44:2a:5a:8f:3c:e8:f0:e1:c2:24:69:12:3d:
         d9:50:ea:02:8c:b7:29:f4:af:30:e7:80:6f:59:60:90:1c:84:
         66:63:62:d9:88:36:6c:aa:99:b6:6b:9e:c7:0a:d3:34:78:2f:
         6c:da:5c:4f
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICCSkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjA4MjAw
OTUyMjZaFw0yNzA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDU5OEJBNjBEMzkwN0I4
NTVCRUY1NEY0M0IyOUQ3ODY2QTM4QTZCNUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDXIl3rd2C/sCexeex978FJ4ZXjHC3wq5ggBqnqrH6X9b14vWWy
Q5odhpM/J4lrbG0CkIxNtAgo0FoywAR0l87V3A7XDz/jTkxZWihN+GlGWnNj+eTv
RiXEv8xn6WJgvLO2UYu1XJ386cDn6EdHqKC2sfhxR0AKWi42canbhJmiH9woMDuB
hW1yqH6IWQ9hs/oyTpMV1OX2XAYYNGQeJ/dYvjaKc7Ama1Isyj+sFBNmQuFwmWK2
4KMwJMS0LG8nMSc1nDb9I7jel3KFvXntDfH76su9T//umdvr6snKSSCjPXDX98TK
bSENyqDUzTLA0ePlJ+KZE84w5vADjpjbSUdlAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUWYumDTkHuFW+9U9Dsp14ZqOKa18wHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTYxL1dZdW1EVGtIdUZXLTlVOURzcDE0WnFPS2ExOC5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZqugAwDQYJKoZIhvcNAQELBQADggEB
AJ45TRzp0ABjMgTynRQHMHtlhIyXxXT3czXRCc6IEw8Pptcop+lbDxS+h1fdox1m
VqzuN1VSqwC6gKLlX8ZKw1hQqBEOq+JvkcXsV92LXl9GwqAccErN6uyr5a0x60+z
NSm9ZloFvBjE4/WH3pc0aqq9cXLqgpznBHdFAtLltN6HnIzgQBHRJ6hjsOr8OamJ
JQ9VutYvy5EpHidsZWnYnyrow3urGH8Ix4qnmvRRqmzH1yqInsH0JVjoBd4Y+FCg
bmrdwpTNoqE38X/iRCpajzzo8OHCJGkSPdlQ6gKMtyn0rzDngG9ZYJAchGZjYtmI
NmyqmbZrnscK0zR4L2zaXE8=
-----END CERTIFICATE-----
Generated at Fri Sep 11 15:22:43 2026 by rpki-client