Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/5bVTJvmRNwrqaKSvBbukOhhGqoU.roa
File:                     5bVTJvmRNwrqaKSvBbukOhhGqoU.roa (raw, json)
Hash identifier:          Pxtxq8Gahdkzlex2X33cU1oHT5F/vrVUZfry/xb7bgY=
Subject key identifier:   E5:B5:53:26:F9:91:37:0A:EA:68:A4:AF:05:BB:A4:3A:18:46:AA:85
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       07C9
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/5bVTJvmRNwrqaKSvBbukOhhGqoU.roa
Signing time:             Tue 31 Mar 2026 07:42:08 +0000
ROA not before:           Tue 31 Mar 2026 07:42:08 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        210.132.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1993 (0x7c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:42:08 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=E5B55326F991370AEA68A4AF05BBA43A1846AA85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:96:b2:dd:43:36:c1:9b:9c:c2:ed:fa:6a:5c:
                    e6:82:8c:d8:f7:11:9f:6b:58:6d:40:bd:b3:78:04:
                    2a:71:9f:da:f8:bf:eb:36:5b:c3:40:82:9e:b3:32:
                    5e:d4:7a:47:29:43:f3:86:a2:4d:27:99:c8:f1:12:
                    23:bc:35:5b:98:ca:95:c6:ca:d2:83:6a:cd:ea:e5:
                    2b:63:7d:22:86:b8:b3:2c:63:e3:ab:70:ec:90:a6:
                    a6:c3:b6:63:83:49:0d:9b:06:9a:bc:50:37:0b:57:
                    bf:d3:b3:85:e5:68:b5:91:33:8e:80:e9:7a:4e:77:
                    de:ab:5c:31:85:68:79:f4:ba:97:f5:18:45:06:98:
                    f4:60:75:13:5f:34:7c:2c:77:d7:f8:1f:b6:20:47:
                    62:47:1e:22:3f:bc:61:91:3d:c7:67:8f:47:d8:78:
                    af:77:7f:4e:4b:01:10:12:0c:22:f6:b9:84:9c:c8:
                    d0:7e:4f:20:8f:f1:03:a7:a7:de:68:e9:29:60:9d:
                    35:6f:d2:49:37:5e:db:31:92:c3:8a:b7:6c:d4:ab:
                    87:eb:a5:8f:b6:d9:25:90:15:2c:43:a9:e3:82:2a:
                    c2:50:43:71:a6:80:25:cf:7a:51:67:e3:82:9c:c3:
                    23:38:d9:0f:84:66:2c:c6:bf:07:84:cc:65:5a:60:
                    f9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:B5:53:26:F9:91:37:0A:EA:68:A4:AF:05:BB:A4:3A:18:46:AA:85
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/5bVTJvmRNwrqaKSvBbukOhhGqoU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.132.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         24:94:4a:00:64:49:f5:4f:15:cd:52:c8:6b:4d:f0:2c:f3:5b:
         1d:c2:2b:43:dd:f3:13:c1:18:2e:49:70:47:39:fa:11:8f:41:
         1b:4c:c0:fa:70:54:8e:7f:c9:86:c2:05:5b:bf:1d:a8:d8:52:
         d5:59:dd:b7:16:a9:5d:54:ea:4d:52:ca:60:1e:ca:a4:d0:e5:
         8c:37:11:e5:ff:17:02:c1:b8:a5:ed:46:88:3a:3a:33:b1:a7:
         12:63:0b:4e:4a:25:ef:c4:6c:f7:12:eb:7d:9d:92:1a:d1:fa:
         49:ef:b4:a8:24:6d:87:2e:75:8e:b2:87:01:1d:f2:71:5e:51:
         39:84:e6:21:70:14:7c:7b:a2:a1:c0:17:43:82:44:5a:20:d8:
         3b:93:11:af:19:9f:64:5f:f9:39:86:43:92:b3:8c:5c:09:47:
         a1:9c:30:ad:9d:38:32:f2:ef:ec:e2:19:e6:3d:a2:80:4d:fa:
         e9:d8:29:00:52:68:13:66:82:82:e1:98:d3:7c:3e:e9:e2:d1:
         4a:6b:1d:04:b0:fb:27:5e:6f:ab:c9:5c:fd:a8:95:54:11:88:
         07:a0:e7:47:20:72:3d:ad:78:52:75:5f:75:ae:4a:f9:3f:2b:
         7c:18:9b:de:32:32:50:e7:ea:13:c7:37:46:67:5c:90:dc:b7:
         f5:f7:55:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:58:37 2026 by rpki-client