Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/5QbVNO22IFavM1ac2ZacqvK3Ies.roa
File:                     5QbVNO22IFavM1ac2ZacqvK3Ies.roa (raw, json)
Hash identifier:          7+F90iS2juE31Z+gg0XULAKfTHrc3LbsC1uKoOwMqzw=
Subject key identifier:   E5:06:D5:34:ED:B6:20:56:AF:33:56:9C:D9:96:9C:AA:F2:B7:21:EB
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0837
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/5QbVNO22IFavM1ac2ZacqvK3Ies.roa
Signing time:             Tue 31 Mar 2026 07:43:01 +0000
ROA not before:           Tue 31 Mar 2026 07:43:01 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        106.179.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2103 (0x837)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:43:01 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=E506D534EDB62056AF33569CD9969CAAF2B721EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:42:22:55:8e:bc:27:ff:25:fd:98:44:de:10:
                    a8:75:8c:e1:6d:ea:cb:81:03:87:ce:98:cf:36:c3:
                    c6:dc:8d:1d:a8:58:e1:a3:09:1c:dc:07:81:df:1f:
                    4a:b0:bd:e4:1d:39:2a:9e:58:ff:9c:95:ad:9f:ba:
                    3f:3c:b3:a7:2a:f0:68:ee:85:87:9b:f7:6d:4a:30:
                    2c:a8:b1:d7:bf:0c:b8:0b:b6:74:60:15:56:d1:ab:
                    77:16:f1:29:49:8b:48:6b:46:a5:2b:b8:14:3c:ef:
                    0f:a7:e0:d6:8b:17:48:fa:b1:65:56:47:03:7f:e0:
                    0c:ef:97:ef:e3:d9:b2:9f:da:ef:9a:9c:11:13:d9:
                    be:a6:41:c3:00:00:2f:c2:14:bd:80:cf:5f:2a:b1:
                    ab:15:85:2f:4a:89:43:0a:da:70:d7:f9:08:f7:9d:
                    f7:7d:a6:81:55:2a:46:92:53:52:06:ee:cf:e4:3c:
                    ac:d5:04:0a:1b:b2:18:43:df:7a:17:3e:f9:28:6d:
                    47:b5:31:e3:62:a6:2c:fc:80:c0:db:3a:ae:36:84:
                    44:b2:2e:86:12:fa:49:62:cb:e4:67:2a:4f:66:58:
                    7b:98:07:48:0f:63:59:2d:57:12:e4:1b:4d:50:70:
                    ad:10:94:35:f3:8d:8c:be:b0:82:1d:7f:50:bc:51:
                    45:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:06:D5:34:ED:B6:20:56:AF:33:56:9C:D9:96:9C:AA:F2:B7:21:EB
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/5QbVNO22IFavM1ac2ZacqvK3Ies.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.179.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         46:36:86:cc:06:ca:62:ad:3a:85:7c:e5:31:ea:b8:10:93:3e:
         dd:66:e1:bb:5a:46:78:a3:30:29:97:2f:63:6f:40:5c:8b:ee:
         7c:14:a1:12:12:5f:1b:d4:3f:07:1b:92:9a:6d:7f:49:0e:15:
         2e:93:b2:e0:a5:25:83:69:21:91:a3:a7:70:be:ff:07:a2:25:
         b3:6d:8e:df:5c:ae:50:95:2f:98:2e:9f:32:fc:9b:4c:51:e2:
         5d:b6:55:86:f1:6d:05:9a:d4:be:41:71:68:66:2e:7b:6c:da:
         3b:26:fa:25:74:1b:94:ec:28:16:4a:bf:5a:98:d8:86:e7:e1:
         e6:10:1c:80:3b:81:fe:35:f8:63:96:d5:5f:0b:c7:97:6d:a8:
         73:c1:b9:5c:e7:09:49:1b:a0:6d:c5:ae:71:2a:ad:07:4b:f7:
         57:b9:e4:01:f6:9a:4f:87:ac:35:22:7c:a5:80:11:df:26:0b:
         b2:1a:09:ea:be:7d:a1:b1:ec:bd:de:a2:48:88:27:0f:db:d5:
         28:a4:07:9e:d7:f8:b7:17:14:1f:86:ef:8c:25:e9:bb:ae:3f:
         3a:2d:c0:e3:d5:b8:1b:69:fe:ae:71:a6:d1:a7:da:5a:19:42:
         f6:ba:6b:e0:86:a8:7f:54:24:53:b5:55:e2:6d:b0:88:7f:cc:
         bf:04:a1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:13:23 2026 by rpki-client