Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/0aSxr86wk99FTDXekwVT3pll1k4.roa
File:                     0aSxr86wk99FTDXekwVT3pll1k4.roa (raw, json)
Hash identifier:          DZYPfdDZWslyuhnQ8404b7sN8l56sxhiEP2nZuIjz/k=
Subject key identifier:   D1:A4:B1:AF:CE:B0:93:DF:45:4C:35:DE:93:05:53:DE:99:65:D6:4E
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0834
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/0aSxr86wk99FTDXekwVT3pll1k4.roa
Signing time:             Tue 31 Mar 2026 07:43:00 +0000
ROA not before:           Tue 31 Mar 2026 07:43:00 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        106.184.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2100 (0x834)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:43:00 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=D1A4B1AFCEB093DF454C35DE930553DE9965D64E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:66:13:a1:43:08:60:5e:ef:01:ee:83:5e:5e:
                    98:bd:71:dd:b3:19:79:c8:a5:d2:36:a3:17:14:3d:
                    56:c7:dd:75:83:bd:fc:45:a0:ed:02:6d:61:e2:d1:
                    21:5c:1e:9e:e9:ff:e8:71:1a:d8:8b:e8:6f:75:36:
                    5d:c8:8e:df:d0:5d:ae:dd:fa:9d:56:51:9a:96:c4:
                    9a:0e:06:fc:e8:ff:52:ec:65:22:cb:4b:6e:fc:da:
                    c6:2e:73:c5:2a:7d:95:30:b9:54:3a:3d:8c:83:7c:
                    90:35:f6:f2:ec:bf:b2:78:6a:9d:fe:01:bc:ab:17:
                    b4:8e:93:96:fd:49:05:db:8f:fc:21:6c:70:1d:74:
                    14:5f:43:16:29:f7:9d:b6:a2:93:01:47:50:c6:01:
                    24:4a:34:df:e2:f4:f2:da:e5:93:7c:29:73:32:b8:
                    a9:ed:0d:12:6a:a9:e0:da:3a:18:bb:91:77:b6:7f:
                    b1:49:5d:ad:27:b9:83:c2:1b:57:66:89:c2:50:2d:
                    95:a0:bb:3b:6e:f5:86:46:1a:b9:17:af:cb:9b:06:
                    69:14:0a:b3:0c:04:a7:de:37:0c:82:bc:75:53:fa:
                    ac:58:df:fd:d0:d5:7a:94:cc:46:b6:49:16:61:84:
                    32:ed:d5:11:b0:3d:bb:6c:6a:57:3b:a2:2b:11:e2:
                    8e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:A4:B1:AF:CE:B0:93:DF:45:4C:35:DE:93:05:53:DE:99:65:D6:4E
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/0aSxr86wk99FTDXekwVT3pll1k4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.184.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b5:0e:74:85:1a:35:e0:4b:ec:3e:52:01:5b:b2:f6:1e:b3:87:
         c7:d7:76:bd:6c:b3:95:da:6d:07:2e:5c:4f:99:54:48:52:f6:
         f4:ba:7a:29:08:63:d5:91:9a:1c:40:22:46:12:03:f0:af:65:
         00:c1:46:3b:8a:ab:e5:c4:7f:7f:4c:5d:65:14:61:cd:80:ac:
         59:ae:37:6c:db:1d:c5:f8:f3:a8:06:a9:ae:85:8e:0a:3c:fd:
         87:fe:73:2f:f8:b3:5c:b7:57:53:39:ce:41:87:6d:42:46:a6:
         20:7a:52:06:4f:b0:a8:df:ec:84:44:f4:33:3f:47:c6:1f:e4:
         0d:6b:73:9f:54:8d:c9:ba:2d:a0:3f:90:1f:e7:73:19:d4:f7:
         fe:37:31:d4:62:cc:b1:2e:2c:87:79:3d:39:42:8d:22:cf:ba:
         71:c6:b7:15:d2:04:79:12:97:c4:a7:4d:00:ee:6b:50:93:3b:
         11:11:de:0d:31:ba:8b:ad:4d:ee:3f:4e:65:fe:ca:d0:a5:87:
         69:be:1c:f4:8a:ff:65:d9:51:2f:0f:28:16:95:73:94:b1:70:
         08:56:dd:7c:6f:d8:f3:f8:b0:6a:af:10:e8:37:e4:9a:ff:b2:
         dd:12:e1:bd:66:8c:a7:f7:fc:96:93:5f:34:c8:d3:68:30:5c:
         e6:03:6c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:13:21 2026 by rpki-client