Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/8l3CAfdsBKJA_GbnZlgRcj32bsw.roa
File:                     8l3CAfdsBKJA_GbnZlgRcj32bsw.roa (raw, json)
Hash identifier:          o/IPMXNAmJ0CaM/QPOC+Zy7CN8WEQlIb/mC8ET9U8NI=
Subject key identifier:   F2:5D:C2:01:F7:6C:04:A2:40:FC:66:E7:66:58:11:72:3D:F6:6E:CC
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0909
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/8l3CAfdsBKJA_GbnZlgRcj32bsw.roa
Signing time:             Tue 31 Mar 2026 07:44:42 +0000
ROA not before:           Tue 31 Mar 2026 07:44:42 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        106.184.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2313 (0x909)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:44:42 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F25DC201F76C04A240FC66E7665811723DF66ECC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:31:41:f7:fa:1f:9c:39:29:98:71:f5:88:f3:
                    07:0a:29:c2:72:01:28:bb:cd:e5:9c:b1:a7:d4:22:
                    2d:a6:7c:69:f5:b5:fd:0c:34:0c:b1:d8:41:1b:f9:
                    b0:a3:a5:27:5a:85:83:d4:3b:b4:e8:6f:45:d6:dd:
                    72:6f:22:41:05:ce:fb:25:74:50:2a:ae:47:6e:41:
                    ff:ff:bd:b5:df:f6:a1:52:11:1f:cb:f0:ec:87:eb:
                    29:65:02:a2:63:9f:a9:2d:62:e0:9c:ac:c8:76:66:
                    59:3b:9e:7c:ec:8b:0f:1d:55:fe:d3:31:17:75:8e:
                    97:9d:74:17:36:2e:84:0d:27:eb:7e:cb:20:d4:06:
                    70:82:82:30:e9:e4:1e:7a:30:d0:48:d7:76:ff:4c:
                    86:64:53:9f:0d:43:39:35:98:7e:90:dd:1a:e6:58:
                    de:dd:d0:4f:43:41:55:95:d8:be:8a:f9:f3:8d:29:
                    89:fd:74:4d:0a:6f:33:3a:26:b0:b1:41:58:a0:ca:
                    01:6b:fb:51:94:7a:e0:37:39:4c:72:61:72:01:82:
                    d0:75:33:93:c7:ff:fa:cb:95:b0:f3:5a:0e:e1:2c:
                    fe:a8:27:de:1e:e2:d1:86:7f:c8:50:bd:5e:b3:21:
                    43:58:ef:98:3a:18:45:ff:df:d4:1c:c0:e1:c9:63:
                    a6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:5D:C2:01:F7:6C:04:A2:40:FC:66:E7:66:58:11:72:3D:F6:6E:CC
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/8l3CAfdsBKJA_GbnZlgRcj32bsw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.184.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         2d:64:71:e2:c4:1d:a0:a4:4d:29:41:97:81:c1:29:82:3d:64:
         84:bd:f4:36:f9:4a:ac:7d:9f:63:55:56:61:1f:d7:6a:4d:c1:
         b4:f1:dc:dd:f4:96:0f:a9:47:61:9f:e1:4f:5d:c2:26:b4:b6:
         d2:73:f5:d2:94:37:50:ef:9c:7f:0d:77:96:6c:07:a6:3f:f1:
         66:a0:83:74:50:be:4c:6f:42:c1:4f:a8:29:38:76:c4:14:da:
         7b:0a:73:4a:e3:f2:1a:81:3e:23:90:63:82:b7:5d:fa:13:a3:
         f3:0a:88:f7:66:00:f7:1c:ac:5b:49:a5:db:46:9a:9b:7a:2b:
         6f:d3:cf:c7:eb:25:1f:eb:8c:f0:18:43:40:d9:2b:ea:2e:71:
         9f:af:0f:b1:59:47:3f:17:c7:a4:e4:1d:12:2c:c5:c9:26:38:
         71:d6:be:b1:e9:47:06:03:86:e2:50:de:95:86:17:3c:54:a9:
         52:0d:37:58:d1:d4:58:9b:28:90:f4:57:69:c6:1e:ea:15:e6:
         14:96:79:a3:a6:71:80:f3:97:a3:8b:33:e8:07:58:80:ee:b9:
         24:79:a4:c1:1f:94:4a:21:54:74:01:d8:bf:ed:8a:84:1a:8e:
         88:eb:3b:1c:ec:3e:02:b5:9f:83:46:ec:d5:0b:b8:e3:28:67:
         b5:81:34:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:33 2026 by rpki-client