Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/35JVM_btxRo1Og4eIWFtxmVVGeQ.roa
File:                     35JVM_btxRo1Og4eIWFtxmVVGeQ.roa (raw, json)
Hash identifier:          nP8cSURbsDpw7I7ZQRTAJrhiciQSHSpesMwHJjIinfU=
Subject key identifier:   DF:92:55:33:F6:ED:C5:1A:35:3A:0E:1E:21:61:6D:C6:65:55:19:E4
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       080B
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/35JVM_btxRo1Og4eIWFtxmVVGeQ.roa
Signing time:             Tue 31 Mar 2026 07:42:40 +0000
ROA not before:           Tue 31 Mar 2026 07:42:40 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        118.156.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 13:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2059 (0x80b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:42:40 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=DF925533F6EDC51A353A0E1E21616DC6655519E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3c:02:8a:a1:29:ee:be:7c:f9:c7:9c:68:b9:
                    db:bf:9e:fc:c7:e6:42:5b:d5:16:02:80:ef:3c:d2:
                    2d:91:10:fb:22:15:71:09:8e:e8:f0:e3:57:00:1c:
                    12:93:17:89:4b:9f:0d:54:92:35:f5:16:3b:13:d1:
                    2f:ce:fc:f5:a5:c1:df:43:72:8e:4f:84:81:34:10:
                    9a:de:a4:5e:11:ab:12:8e:e6:2e:19:14:a6:11:fb:
                    ec:a8:14:3a:54:74:89:7c:eb:32:9f:6f:08:ad:92:
                    d5:b5:57:1e:fd:3f:7a:8f:ee:67:cc:83:46:4e:65:
                    79:e0:72:6c:e7:05:a7:63:2b:be:09:75:bf:ee:9c:
                    6b:fb:ac:d9:6d:f2:64:b1:cf:ef:6c:57:71:c7:31:
                    ac:b5:d8:bb:b2:36:20:02:5f:b6:d2:a4:db:ff:13:
                    f0:9a:44:7f:8d:6f:22:a6:59:d3:2c:ec:a8:c6:38:
                    94:8e:62:ad:29:a5:19:4d:3d:4a:3e:34:43:cf:17:
                    bc:d4:75:3a:f6:b0:ba:6c:28:e7:de:15:52:b8:72:
                    c8:9b:68:10:09:f8:ea:fd:73:d7:19:d4:0e:89:04:
                    85:f1:5b:28:5b:45:e0:24:ed:22:ca:13:bf:6e:23:
                    ea:48:89:10:e1:f3:98:6d:55:2b:02:42:c1:af:7d:
                    d8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:92:55:33:F6:ED:C5:1A:35:3A:0E:1E:21:61:6D:C6:65:55:19:E4
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/35JVM_btxRo1Og4eIWFtxmVVGeQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.156.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6e:31:5b:6b:a6:f6:08:2d:67:3b:00:a3:b6:2f:bf:6c:f8:10:
         e7:6b:a3:ef:a3:4c:32:db:e1:f4:d0:d7:61:bb:8b:45:3f:bf:
         01:7e:74:32:03:f9:38:b5:0b:89:1e:64:f8:4d:b2:ae:23:75:
         07:bb:b1:6d:54:e5:32:e4:56:26:0a:e0:43:8e:60:98:11:88:
         10:6d:70:8f:12:06:d9:3d:e9:4f:a2:21:68:46:c4:dc:bb:8b:
         52:89:74:ad:d3:89:b0:0b:2c:98:e6:23:7a:06:41:36:96:65:
         ca:ef:d8:08:c5:52:0a:85:6a:73:b8:07:0c:fe:ac:be:90:69:
         cc:2d:07:df:02:d7:a8:3a:96:6e:ed:52:b6:7e:22:2f:77:6a:
         9b:a7:01:54:b5:9f:1a:06:0f:6c:70:c8:84:44:df:8e:dc:ad:
         e1:e7:99:bd:87:a4:7e:53:35:e6:6f:16:a1:9a:c4:66:66:58:
         41:93:ca:ff:4a:9f:ed:df:d5:b6:fa:ae:33:fa:38:17:c8:6e:
         cf:4a:22:fe:f2:73:b6:d4:3c:a3:ec:d6:5a:c8:94:d2:e6:80:
         aa:6b:02:ab:6c:fa:e6:52:06:bc:20:96:22:2f:94:03:5e:c2:
         89:87:ae:1a:ef:f8:cc:b2:cc:d2:81:85:8a:76:46:dd:24:e0:
         33:4b:a2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:02:30 2026 by rpki-client