Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/1utlMGrNlwBOZVxMmexzV2Ci1JA.roa
File:                     1utlMGrNlwBOZVxMmexzV2Ci1JA.roa (raw, json)
Hash identifier:          RzVEPkH2R/jDfDAFw/dlTpTa0pwPIdx+GEj9tsqev8o=
Subject key identifier:   D6:EB:65:30:6A:CD:97:00:4E:65:5C:4C:99:EC:73:57:60:A2:D4:90
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0871
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/1utlMGrNlwBOZVxMmexzV2Ci1JA.roa
Signing time:             Tue 31 Mar 2026 07:43:33 +0000
ROA not before:           Tue 31 Mar 2026 07:43:33 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        210.228.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2161 (0x871)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:43:33 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=D6EB65306ACD97004E655C4C99EC735760A2D490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c0:4f:7b:f7:78:07:f7:f1:c1:e6:d6:36:60:
                    7b:c2:98:ec:c7:fd:e9:39:41:05:f2:e6:47:bc:51:
                    b1:b9:ad:40:7c:bb:fc:5d:67:da:a4:92:3a:46:29:
                    6b:dd:25:74:99:53:eb:03:01:bf:b2:85:95:c5:6e:
                    ac:a2:24:1b:9e:09:37:71:3c:cb:da:2c:f6:c5:c3:
                    9a:bd:ca:73:5b:bb:43:16:d9:b8:2a:79:bb:fb:97:
                    46:92:44:76:26:fe:e4:be:17:7b:20:26:45:11:13:
                    b2:2e:1c:2b:84:49:d5:aa:62:ac:0f:cf:05:93:4b:
                    39:aa:70:f1:65:27:0f:e2:be:2e:44:d3:89:a0:10:
                    aa:4f:36:ef:ff:63:51:23:c6:3e:c4:97:3f:45:d5:
                    b2:c3:14:14:d8:e8:87:f2:37:03:1a:b0:9c:d5:8f:
                    18:7b:86:03:39:f1:b4:1a:d3:cf:74:3f:60:94:91:
                    dc:c6:97:10:19:5f:e6:3b:78:f7:fa:7e:60:70:40:
                    24:89:58:1c:d4:79:24:37:41:55:64:37:b8:bb:34:
                    49:1b:b8:63:39:78:84:8c:b1:d7:05:2f:05:d3:ae:
                    b4:0a:42:0c:d6:d1:b1:94:1a:ea:f5:4d:92:da:d8:
                    42:29:10:11:b7:f1:a7:7c:cf:e5:c1:6d:81:d6:2c:
                    06:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:EB:65:30:6A:CD:97:00:4E:65:5C:4C:99:EC:73:57:60:A2:D4:90
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/1utlMGrNlwBOZVxMmexzV2Ci1JA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.228.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8a:71:c3:43:ce:f0:c4:87:cf:84:86:b3:ed:51:d8:6e:28:7a:
         ed:ef:29:39:cb:31:4d:4f:55:9e:26:ff:ee:f1:4d:52:17:f3:
         db:f9:10:9c:b8:45:95:5d:3c:ce:c5:f9:5f:eb:20:4b:70:8b:
         f4:77:49:23:b0:9d:fb:35:f1:4f:c1:09:48:8c:b8:94:ec:c9:
         47:b5:d0:b4:49:65:5f:11:9a:34:dc:de:fd:eb:bf:c0:e4:a8:
         09:25:9e:4c:98:5c:9c:4f:09:3d:6a:85:91:0b:de:41:d6:59:
         ef:08:02:8b:81:2c:cb:dc:46:97:22:1d:8b:8f:1d:2d:e6:a9:
         f9:6b:5d:56:65:85:fc:68:36:bf:04:a6:23:7b:16:9d:07:cf:
         b6:88:db:5e:5c:ad:14:93:18:1d:18:2b:65:44:a0:c8:3d:57:
         bf:16:51:9d:d8:a7:93:d0:25:53:a8:c5:24:2b:69:87:66:82:
         2d:a1:38:20:b6:3f:60:68:15:9a:87:ab:a0:59:8b:69:05:a3:
         28:a6:5f:80:5c:76:ba:42:1f:51:6f:48:66:c9:38:bd:64:14:
         fc:1d:43:0b:07:35:0e:cd:70:a0:b3:97:37:80:a7:ff:67:63:
         4d:bf:15:62:9e:75:78:82:eb:79:25:fc:61:8c:0d:47:68:4f:
         c7:e5:47:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:20:06 2026 by rpki-client