Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/3pIw0Wtel9qP733i-WxsTPMMm_A.roa
File:                     3pIw0Wtel9qP733i-WxsTPMMm_A.roa (raw, json)
Hash identifier:          GPIeeb0LzZ1mC1h+LsCEkbsxLon9jmLT3aRPkFnQdJ0=
Subject key identifier:   DE:92:30:D1:6B:5E:97:DA:8F:EF:7D:E2:F9:6C:6C:4C:F3:0C:9B:F0
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0814
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/3pIw0Wtel9qP733i-WxsTPMMm_A.roa
Signing time:             Tue 31 Mar 2026 07:42:44 +0000
ROA not before:           Tue 31 Mar 2026 07:42:44 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        218.222.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2068 (0x814)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:42:44 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=DE9230D16B5E97DA8FEF7DE2F96C6C4CF30C9BF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f4:ca:b3:72:07:65:62:87:7a:a5:b9:d8:7d:
                    98:24:82:15:c9:e7:4a:12:2a:78:00:da:c1:27:37:
                    f2:8a:ba:40:6e:53:25:17:be:01:37:02:ea:68:54:
                    22:3b:30:8f:7f:7c:d7:0d:d9:56:09:fc:21:de:17:
                    e1:22:d3:9f:e8:58:73:b8:bb:5c:49:6c:84:79:56:
                    58:dc:8c:6a:95:3f:0c:12:e1:4f:ee:41:a0:1a:3a:
                    b7:bb:4b:9a:9e:68:ce:94:b4:b9:e5:50:f9:c3:91:
                    7a:6d:83:dd:f8:f7:d7:b7:18:60:0e:c3:5f:9c:72:
                    dc:52:d8:90:fd:7d:62:46:94:b4:4d:47:e3:c2:d3:
                    db:6b:6f:66:b7:61:db:8c:fd:f1:b8:1b:0d:3a:f6:
                    f7:43:05:1c:1b:db:95:f1:7b:81:e8:1b:4a:4d:2f:
                    64:7e:14:93:0d:fb:d2:d1:3d:a5:62:dc:16:d7:90:
                    48:c7:84:f3:18:88:2f:5d:ad:25:f6:85:83:14:60:
                    ed:a3:07:15:0a:7e:21:f1:54:6f:af:a1:4f:48:6e:
                    30:7d:ad:cc:ad:c8:64:9f:51:21:25:95:fa:8e:2b:
                    6e:a4:a3:dd:8d:11:3f:5b:f1:52:31:ad:3e:52:0a:
                    4d:df:b8:0a:5b:c7:c6:1a:f4:37:01:84:f6:fb:22:
                    38:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:92:30:D1:6B:5E:97:DA:8F:EF:7D:E2:F9:6C:6C:4C:F3:0C:9B:F0
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/3pIw0Wtel9qP733i-WxsTPMMm_A.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.222.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0d:8a:c1:1c:65:1c:5a:56:7a:1f:17:c8:68:fe:51:d0:3a:d4:
         c2:d0:47:0c:83:af:55:9d:0a:33:a8:5e:02:bb:eb:cc:d2:f8:
         07:ea:6e:1f:34:65:b8:21:d9:04:7a:84:36:9a:63:a8:4b:ef:
         c8:d0:b9:f7:c6:eb:8c:10:0f:05:b3:1e:75:36:5f:f5:02:a7:
         35:53:05:e6:00:ce:a9:3e:57:ec:67:09:5b:05:bc:f2:79:6c:
         cd:d6:d4:4b:8a:4e:ce:27:8b:d5:8a:0e:6d:e5:f7:0e:77:44:
         af:fe:37:0e:20:87:db:a4:51:d1:c0:f4:75:3e:29:c6:19:ed:
         e7:d7:64:4c:e9:63:02:00:31:46:63:f1:6e:f2:bb:ea:a4:b3:
         51:e3:36:3c:68:02:e9:f4:f7:11:79:ce:2b:4f:6a:9c:1e:32:
         4f:a5:7c:67:09:40:09:2d:19:91:f3:e8:57:99:8b:df:7a:17:
         1d:56:11:92:46:d6:39:65:ce:e6:b1:f1:26:f5:51:7d:ee:ce:
         92:5a:55:de:05:bf:39:9f:33:85:51:71:a4:d4:e8:ea:f8:bb:
         9b:a0:96:1b:71:7c:08:bc:6a:29:6d:03:fe:e8:64:48:fd:50:
         dc:7e:d4:fa:76:36:5c:ff:09:f8:65:40:ec:99:fc:58:a9:65:
         1c:60:0c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:58:01 2026 by rpki-client