Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/4EaS3ZKjy5MsvqWDp9wzOfru1sE.roa
File:                     4EaS3ZKjy5MsvqWDp9wzOfru1sE.roa (raw, json)
Hash identifier:          TO+xt/TjDr8XZI58af+9OXqu4hVE2Yz3CZD8HkLNcWk=
Subject key identifier:   E0:46:92:DD:92:A3:CB:93:2C:BE:A5:83:A7:DC:33:39:FA:EE:D6:C1
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0893
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/4EaS3ZKjy5MsvqWDp9wzOfru1sE.roa
Signing time:             Tue 31 Mar 2026 07:43:49 +0000
ROA not before:           Tue 31 Mar 2026 07:43:49 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        210.238.18.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2195 (0x893)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:43:49 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=E04692DD92A3CB932CBEA583A7DC3339FAEED6C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:08:9a:60:fb:b7:95:05:08:52:bf:eb:ee:17:
                    5d:22:3b:44:07:fe:06:20:74:81:0a:f6:56:45:6a:
                    ed:5f:36:92:f0:51:7e:29:6d:2a:2d:a1:51:c0:48:
                    df:30:3c:14:a0:cc:f9:7e:73:4a:f0:ff:70:e4:c9:
                    0b:c7:64:40:00:04:40:e5:e5:21:e8:e7:77:8c:c6:
                    21:33:6c:8d:3e:e7:2c:c5:b5:ee:83:32:2d:08:db:
                    6c:14:c6:b1:5e:d3:56:67:43:ba:83:4b:07:5d:ba:
                    25:0d:d6:d1:ca:95:ff:d4:12:7b:57:30:64:b9:3e:
                    39:83:d1:7b:4e:cc:24:a2:f6:fd:94:78:cc:d0:46:
                    d3:7f:5f:d9:4e:c1:40:0a:19:2f:fb:ca:78:9d:8e:
                    66:c0:c3:2a:37:84:1c:d8:f0:b4:e0:bf:5b:85:24:
                    9d:6f:1d:e1:1e:30:31:04:05:2a:da:e2:c9:46:20:
                    8c:fb:9e:03:5c:28:a5:cd:55:0d:70:eb:81:60:4e:
                    f7:c9:3e:c0:b7:31:9f:6b:67:c0:47:90:c8:e8:55:
                    07:98:50:77:0b:6f:77:c6:86:1b:26:e3:60:61:9e:
                    2f:fe:10:c5:d1:ca:25:4f:9c:6d:5a:1b:5c:dc:eb:
                    df:34:a4:bd:ab:65:bc:68:8c:34:8a:54:51:97:92:
                    37:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:46:92:DD:92:A3:CB:93:2C:BE:A5:83:A7:DC:33:39:FA:EE:D6:C1
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/4EaS3ZKjy5MsvqWDp9wzOfru1sE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.238.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:06:8d:cb:6d:aa:36:04:7e:cb:da:8e:c7:48:95:9d:e1:47:
         9e:01:44:b1:b1:93:ea:c3:7d:2c:d2:e4:d1:32:a3:79:51:7e:
         3d:f4:86:06:f5:38:dc:84:be:33:97:5f:b3:9f:2f:f3:32:72:
         34:8a:1b:b6:28:90:88:af:8d:55:75:bc:37:cb:dd:84:e2:36:
         c6:b7:59:4c:66:6d:61:8b:b1:94:82:08:84:07:bb:d6:3a:be:
         7a:a1:e3:d7:e6:87:35:1e:81:7d:3b:95:51:6b:42:c2:75:14:
         2f:77:eb:a9:8a:82:46:07:21:36:3e:c0:73:10:b2:d1:08:8b:
         dd:f5:ca:40:29:bd:8d:d7:ef:ef:7b:20:22:10:aa:2e:ab:8b:
         d0:8e:47:60:e0:90:11:ee:34:39:a8:42:49:54:42:e8:9a:9f:
         42:dd:e1:f2:9b:17:4a:88:8b:b4:f8:8b:70:9c:a1:d0:77:6e:
         a7:0d:c0:bb:f6:c6:55:f1:f9:ab:b3:69:f1:b0:48:09:f1:52:
         a6:a0:3e:4f:ae:34:2f:3f:3b:b2:25:a1:9a:22:41:8f:f6:3a:
         a9:bc:ca:b3:96:69:6e:b1:33:7f:6f:38:54:99:21:4e:14:a8:
         a4:88:91:11:ca:36:3b:b1:13:af:d2:04:ea:b6:1c:c9:10:77:
         8a:4d:1f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:50:21 2026 by rpki-client