Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/1pAxaJ6kfRqG7L332_V47Q-RSYY.roa
File:                     1pAxaJ6kfRqG7L332_V47Q-RSYY.roa (raw, json)
Hash identifier:          F5HuNV1GCjUZ6axdw8GoeR88oqMQsfXTml3Uglmh2ws=
Subject key identifier:   D6:90:31:68:9E:A4:7D:1A:86:EC:BD:F7:DB:F5:78:ED:0F:91:49:86
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       07E5
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/1pAxaJ6kfRqG7L332_V47Q-RSYY.roa
Signing time:             Tue 31 Mar 2026 07:42:21 +0000
ROA not before:           Tue 31 Mar 2026 07:42:21 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        106.184.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2021 (0x7e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:42:21 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=D69031689EA47D1A86ECBDF7DBF578ED0F914986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:76:d8:eb:f3:de:3c:26:a9:8e:2e:86:17:17:
                    2c:8e:b9:4c:6d:9c:5c:1d:7c:45:1c:b0:67:2b:40:
                    7b:99:52:9b:3e:cb:27:50:91:54:80:b7:b6:06:09:
                    b1:68:b1:70:db:1a:aa:65:dd:6b:ad:47:a6:a1:d8:
                    ee:f0:1d:ff:ad:27:ea:4f:b9:7f:e4:44:92:a3:8d:
                    7f:0c:55:dd:42:64:df:4c:e3:74:43:95:2b:4c:08:
                    ee:da:e8:ed:cf:f2:42:03:e6:b8:5b:f3:92:8d:0f:
                    07:c7:cf:2b:a3:b8:43:fc:03:b8:4f:ef:11:13:70:
                    93:25:f6:58:49:1a:e2:7a:e8:83:e3:e0:b2:b2:43:
                    df:5a:87:d6:ce:75:ff:58:1d:e9:a7:e1:9d:7f:5a:
                    8e:41:53:8d:14:78:ea:51:24:d5:d1:28:09:d8:2c:
                    76:82:79:10:a6:0c:de:ec:55:5e:7c:5c:95:51:48:
                    53:44:12:01:61:03:82:e3:c7:46:24:ae:c0:3b:62:
                    da:b8:20:62:30:2b:14:5f:01:0f:fe:85:16:ea:32:
                    9d:62:e9:0a:e3:be:3f:4f:74:a7:d4:0e:07:db:c3:
                    8d:ef:14:6c:bb:74:30:f1:5a:28:59:9e:09:d9:40:
                    6d:89:3e:00:c4:3d:73:81:5d:85:f1:9a:e9:7b:dc:
                    ff:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:90:31:68:9E:A4:7D:1A:86:EC:BD:F7:DB:F5:78:ED:0F:91:49:86
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/1pAxaJ6kfRqG7L332_V47Q-RSYY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.184.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:40:de:53:ea:ea:45:a4:d9:31:db:93:e9:92:c8:af:57:30:
         47:ef:5e:11:95:f9:16:11:6d:c7:71:bc:ad:c3:05:9e:d7:fa:
         22:a5:a5:0c:24:7f:80:29:9b:09:7c:f2:ed:bc:8e:13:f5:7b:
         5a:7d:e4:b4:e8:29:c0:ef:9c:cc:5e:f8:e8:3f:31:d7:97:04:
         f8:fd:58:01:22:04:19:63:11:7f:08:0c:ab:78:dc:2e:10:bc:
         d4:85:7a:b5:6b:6c:db:d8:68:fd:76:8e:ea:5b:e1:96:f1:ae:
         32:72:7e:9c:e2:b5:d5:46:8f:38:ac:04:1c:c3:73:4c:bb:ec:
         53:15:f9:f8:00:de:d2:cd:fb:25:06:70:43:d1:59:54:62:a9:
         4f:40:ae:00:95:25:64:42:3d:19:87:37:b4:1c:53:7f:60:c0:
         3e:1a:df:d9:7a:a0:83:49:7a:6e:6e:e5:bd:36:b8:80:e4:33:
         d6:7e:82:cf:17:ca:95:73:f2:8b:df:a7:eb:5c:15:a6:9c:40:
         75:6f:ad:5a:52:7c:7b:bd:1c:f5:6f:59:37:da:ba:a8:4c:51:
         97:8b:03:b3:3a:9d:56:fa:57:65:fb:9b:4f:3f:db:f4:5d:b3:
         be:60:94:7b:88:ed:67:43:12:f9:31:aa:4d:67:6e:f6:4a:1a:
         62:f1:cc:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:31 2026 by rpki-client