Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/1GnNP-4Syy6W9S57I8PZ7l65PHA.roa
File:                     1GnNP-4Syy6W9S57I8PZ7l65PHA.roa (raw, json)
Hash identifier:          elOeOiztQGmsIXT6c1PoY+B8UzaNAIaW0emw/4Men2M=
Subject key identifier:   D4:69:CD:3F:EE:12:CB:2E:96:F5:2E:7B:23:C3:D9:EE:5E:B9:3C:70
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0795
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/1GnNP-4Syy6W9S57I8PZ7l65PHA.roa
Signing time:             Tue 31 Mar 2026 07:41:42 +0000
ROA not before:           Tue 31 Mar 2026 07:41:42 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        106.184.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1941 (0x795)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:41:42 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=D469CD3FEE12CB2E96F52E7B23C3D9EE5EB93C70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b5:cb:29:7e:72:c9:fa:a1:2d:00:d3:28:d4:
                    b4:00:4f:e0:98:7e:d1:18:a1:43:c2:99:c3:7e:20:
                    a9:04:e2:70:3b:a1:28:80:b6:85:01:ff:0a:bd:1e:
                    32:b6:7c:6d:6f:a6:18:12:79:fc:13:a8:b9:41:22:
                    39:30:6f:2f:e9:3e:e7:f6:4f:43:78:c3:e8:f5:79:
                    fb:f5:f7:7a:7b:38:27:93:15:5f:eb:1c:10:95:b0:
                    65:7a:db:50:af:84:6b:3f:87:9b:de:fc:a4:3c:2e:
                    63:0a:28:01:40:c2:f4:05:68:aa:97:65:01:91:67:
                    cc:9b:e9:1e:30:a8:2e:da:d4:c3:36:96:c2:97:82:
                    df:4f:59:50:41:41:0f:99:66:23:e5:3e:76:bc:94:
                    b9:a1:83:88:c6:9d:fe:b0:cd:81:a3:18:9f:4b:ed:
                    60:51:5b:ae:1c:74:5a:27:be:a2:9a:28:bc:01:3d:
                    91:2c:33:bd:ad:7a:8c:9f:45:67:c9:4f:f7:a1:30:
                    43:23:a3:6d:4c:98:ae:0b:a0:9e:48:54:05:bb:0f:
                    84:9d:28:e6:75:9a:43:22:a5:20:6e:22:4d:d5:f1:
                    ec:7b:da:bf:ee:46:9e:ce:1c:15:a9:b4:c7:a1:db:
                    bc:bd:77:f3:64:af:e1:49:e2:2f:3f:bc:a8:a9:c6:
                    9f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:69:CD:3F:EE:12:CB:2E:96:F5:2E:7B:23:C3:D9:EE:5E:B9:3C:70
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/1GnNP-4Syy6W9S57I8PZ7l65PHA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.184.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         75:76:25:c1:ff:9d:1f:67:19:cd:aa:cb:be:10:3c:fa:df:d5:
         48:13:92:64:56:1c:52:b0:9a:d2:1e:32:c8:c9:55:51:70:7f:
         dc:d7:27:ae:cd:39:13:4b:9e:3f:47:8a:21:88:82:94:4a:ba:
         af:30:ed:0d:da:5f:f3:5e:6b:d7:55:3f:6d:c0:aa:ac:7b:dc:
         55:7f:a6:49:75:c0:e0:47:5a:c9:74:61:a3:12:44:ea:6f:99:
         47:97:aa:d7:14:fb:85:da:eb:7a:c1:f4:aa:30:5a:59:a3:b2:
         7f:c1:9b:3d:ee:13:14:8f:53:4e:e2:ee:c8:e5:4f:33:94:0d:
         49:eb:d1:63:74:32:c1:22:45:c1:7e:7a:fc:69:87:1a:54:cb:
         fe:c7:27:43:63:d0:cc:2e:75:b1:92:27:fd:53:7b:73:a7:ea:
         12:8a:49:4d:07:b9:26:87:5e:b8:7e:ee:27:4d:e2:da:04:6f:
         f6:74:05:bf:87:43:62:f8:70:0c:d4:7b:76:c9:ac:80:40:54:
         d1:06:9e:3c:a3:9d:ba:75:a4:63:07:40:6e:3c:31:1a:bf:ac:
         84:24:17:d5:85:04:08:dc:fc:da:a5:a6:fe:50:43:a3:d9:e8:
         c6:ac:5c:fc:14:2b:88:a3:3b:54:e9:d8:54:5d:16:0e:d5:09:
         c2:83:39:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:13:29 2026 by rpki-client