Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/5j7-IAESXYBsvI4ugU7wKPDeOWg.roa
File:                     5j7-IAESXYBsvI4ugU7wKPDeOWg.roa (raw, json)
Hash identifier:          yBBF+5NpVVef2RDeD+w0XpzwvpTUgTQHs4ULOWKJnlo=
Subject key identifier:   E6:3E:FE:20:01:12:5D:80:6C:BC:8E:2E:81:4E:F0:28:F0:DE:39:68
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       08E2
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/5j7-IAESXYBsvI4ugU7wKPDeOWg.roa
Signing time:             Tue 31 Mar 2026 07:44:26 +0000
ROA not before:           Tue 31 Mar 2026 07:44:26 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        211.1.100.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2274 (0x8e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:44:26 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=E63EFE2001125D806CBC8E2E814EF028F0DE3968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3a:e4:10:34:d7:ea:01:d1:6f:fd:22:5d:d1:
                    d5:63:01:db:4d:ca:3b:6f:f9:8f:ed:d0:ba:5f:ff:
                    25:b4:1c:5b:eb:5f:46:10:b8:0f:93:85:ad:c3:f2:
                    27:8d:c5:53:4e:05:0e:cc:9c:3b:e4:ba:23:9c:e2:
                    0e:b2:22:ea:dd:e1:8a:59:62:35:de:0f:e7:de:18:
                    ef:ec:54:bc:60:dc:9d:42:91:31:cb:87:b4:4b:1d:
                    75:2e:e6:34:83:3e:98:ca:e6:17:2e:df:14:ee:cd:
                    07:f6:ca:55:2f:ea:6b:32:3c:44:c7:c2:6d:43:81:
                    58:fc:1b:a0:6f:0e:9b:e0:59:16:62:87:4f:4d:4c:
                    cd:fc:8d:ff:66:90:c8:63:03:7c:20:e1:51:ce:62:
                    77:12:96:f2:f9:06:2b:43:d1:f2:c7:10:dc:a3:32:
                    f8:04:36:23:b3:22:bf:63:9b:e5:c6:79:04:8a:31:
                    0f:c6:6e:0e:91:a1:92:36:4c:3c:8d:e6:1f:9c:87:
                    0c:b6:ba:0f:c0:91:75:e7:7e:af:e6:bd:54:d3:da:
                    77:72:f9:d2:ca:3c:4f:4e:50:cb:5b:d2:d5:a2:89:
                    77:f7:32:f3:c1:5d:1c:d2:80:cf:78:f9:d3:2b:60:
                    71:d0:8a:4a:8f:a8:2c:85:80:d8:ed:88:d6:6c:40:
                    02:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:3E:FE:20:01:12:5D:80:6C:BC:8E:2E:81:4E:F0:28:F0:DE:39:68
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/5j7-IAESXYBsvI4ugU7wKPDeOWg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.1.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         84:a8:1a:c7:a7:1a:17:c6:a2:42:a0:bf:90:73:61:8d:5c:58:
         7c:d1:b6:0e:e5:58:ac:3a:6f:15:71:05:2c:1b:03:11:c9:a9:
         c1:67:f7:b4:11:28:08:38:1b:50:95:49:87:1b:b3:48:bf:27:
         09:79:88:49:4d:f4:9c:7d:a7:40:7f:fa:38:f4:dc:5c:81:69:
         12:bf:11:04:39:ab:3a:5a:5e:a6:8b:a7:49:e2:be:e8:2b:e4:
         3b:b9:bc:a5:c3:d7:2b:33:1e:1e:d0:22:ea:91:d3:0c:d6:60:
         4b:eb:ae:94:a9:f8:f6:97:fe:6b:91:f9:af:67:be:21:de:2e:
         48:34:6a:f2:54:9c:37:4a:cd:01:9d:17:c5:8a:42:13:d6:e3:
         95:9f:4a:3f:28:3c:bb:2d:d3:59:a0:ef:23:b6:f0:fe:2e:9f:
         e7:b2:19:2c:98:ae:28:d4:fe:18:ff:f5:9e:f1:79:8c:77:3b:
         82:3c:9f:67:c1:c5:9c:b9:5a:fa:82:95:ec:07:81:3f:d5:db:
         7c:1c:c9:c7:75:d2:61:56:d1:fa:0a:76:d9:78:2e:4f:f2:66:
         ce:c3:2f:e4:64:e2:e3:f0:78:a1:42:82:c0:5f:6a:f2:fd:d7:
         aa:19:6d:49:86:70:1e:89:3f:28:42:76:f7:fb:22:de:5a:2c:
         23:21:9d:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:49:30 2026 by rpki-client