Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/2UO5-d0J2PkWo08Y5EESs3q5m_A.roa
File:                     2UO5-d0J2PkWo08Y5EESs3q5m_A.roa (raw, json)
Hash identifier:          t6DOmYL+digeqoJaW0nUjvCjThq5hbwFp6WPea5wpc4=
Subject key identifier:   D9:43:B9:F9:DD:09:D8:F9:16:A3:4F:18:E4:41:12:B3:7A:B9:9B:F0
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       07E4
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/2UO5-d0J2PkWo08Y5EESs3q5m_A.roa
Signing time:             Tue 31 Mar 2026 07:42:21 +0000
ROA not before:           Tue 31 Mar 2026 07:42:21 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        106.183.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2020 (0x7e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:42:21 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=D943B9F9DD09D8F916A34F18E44112B37AB99BF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:16:d9:fe:8f:e7:3a:8b:51:d7:f6:7d:35:bd:
                    0a:1d:9d:c8:1e:78:2c:b9:08:75:32:29:7f:e1:f6:
                    e2:f7:ea:40:22:6c:6b:82:a3:c4:51:5b:91:77:6c:
                    9f:3d:df:b7:83:14:ae:d4:44:67:e4:24:54:62:c4:
                    ae:9c:06:ec:70:8c:09:28:94:56:90:c5:ad:b2:4d:
                    81:99:90:b3:8b:5e:cc:9f:88:10:5c:8a:61:a0:e5:
                    2b:98:0e:c5:4d:6a:34:b2:7f:9d:38:ca:08:d0:51:
                    97:7f:81:d8:84:aa:c9:d5:1c:4d:bc:7c:9c:be:bd:
                    a7:eb:84:2a:84:c5:f4:3f:66:5b:c2:8b:e9:7f:e4:
                    40:43:e1:5a:10:be:35:2f:f4:62:3c:61:b4:a8:04:
                    e6:9c:ad:5f:26:d2:fb:7c:60:95:8f:e6:c5:14:08:
                    a0:52:33:6a:56:61:50:e2:51:6d:e4:26:6e:34:ce:
                    87:e6:cb:f1:7f:88:a3:c0:e1:40:62:27:06:6d:d4:
                    e2:88:4b:f6:9b:aa:50:79:bd:65:2d:25:bd:3a:bb:
                    d7:1e:da:66:f8:be:25:fe:8c:f0:cd:ab:96:09:f9:
                    5b:6c:51:32:1c:d2:00:d0:56:3d:1b:dd:39:e6:c9:
                    ce:58:0a:99:29:f8:ef:51:17:4b:71:23:21:26:f6:
                    f8:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:43:B9:F9:DD:09:D8:F9:16:A3:4F:18:E4:41:12:B3:7A:B9:9B:F0
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/2UO5-d0J2PkWo08Y5EESs3q5m_A.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.183.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         33:1e:80:78:50:06:97:5f:e6:4d:04:b2:94:31:96:f3:38:6e:
         6f:52:33:5e:e5:f3:80:af:dc:98:a4:bd:22:7e:b1:20:9a:2d:
         ca:b7:cd:07:b3:8a:56:e4:b8:8d:28:79:d8:67:a6:d0:0d:ca:
         51:83:17:10:3d:d1:d8:6c:27:78:10:68:b6:a3:f3:0c:df:fb:
         89:9f:ad:11:33:5b:6f:7e:a4:a2:d5:5a:4b:99:ef:11:a6:ac:
         42:1f:1b:64:3e:5b:45:53:14:09:19:cd:8c:25:18:18:7a:88:
         45:a7:6c:db:ab:d4:3b:6b:05:41:c2:23:09:7e:a4:13:09:d6:
         8a:17:07:e7:e1:0b:a5:f3:55:08:22:ca:e0:78:b5:3b:33:c6:
         87:0d:dc:cf:2f:30:4d:d7:74:8c:f3:1b:2c:d7:e8:76:92:07:
         9a:c8:59:42:8e:93:5f:17:cf:62:bc:ed:bc:be:7a:ab:dc:d2:
         6a:49:6f:4b:65:7f:a7:e9:ea:14:b1:95:1a:45:34:fe:4d:9f:
         79:11:14:d2:81:1d:c5:47:b1:20:ad:88:07:28:d2:2e:a7:a1:
         33:dd:5a:01:c6:dd:d0:ea:25:7f:98:3e:28:57:73:f6:2f:53:
         88:cc:52:07:66:f0:2a:24:5b:0a:74:df:8a:ed:7c:90:5b:9c:
         0c:4c:96:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:33:00 2026 by rpki-client