Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/A82UO5W2caiGrYs2mi83J2Uq7yE.roa
File:                     A82UO5W2caiGrYs2mi83J2Uq7yE.roa (raw, json)
Hash identifier:          drUYni3H2RR1JgjN6/ZiNGT5eM8H1ejrQuL7cf2e5mc=
Subject key identifier:   03:CD:94:3B:95:B6:71:A8:86:AD:8B:36:9A:2F:37:27:65:2A:EF:21
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       079A
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/A82UO5W2caiGrYs2mi83J2Uq7yE.roa
Signing time:             Tue 31 Mar 2026 07:41:44 +0000
ROA not before:           Tue 31 Mar 2026 07:41:44 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        175.135.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1946 (0x79a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:41:44 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=03CD943B95B671A886AD8B369A2F3727652AEF21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2d:60:60:52:03:35:88:d2:28:8b:ec:41:04:
                    56:ae:82:e7:b9:2b:30:d4:c5:e5:68:67:45:cb:66:
                    4d:dc:02:b5:cb:61:c7:87:1d:a1:50:39:4e:d5:a5:
                    50:9a:6b:4e:1f:9e:73:a6:f7:09:d1:29:3c:4c:1e:
                    89:35:db:9b:e1:27:67:cb:5e:e3:ed:dd:fd:30:89:
                    1e:07:89:22:3c:d1:80:b1:ce:6c:a0:2a:e8:57:e7:
                    3a:98:1f:6f:de:1c:93:38:a4:0c:f9:d7:a4:50:91:
                    18:1c:d8:a0:72:25:f3:96:68:3d:d5:90:af:af:69:
                    4a:26:3d:03:03:5a:1f:42:0d:90:e6:9a:45:cf:74:
                    c3:ac:49:34:08:5c:22:90:ad:98:68:cd:2b:d8:49:
                    da:e5:d1:eb:70:a8:c7:ba:3b:3a:be:af:72:7f:33:
                    09:a3:3f:d7:f8:7c:63:4e:74:a0:21:bc:67:ba:30:
                    19:23:6b:42:78:37:f9:a2:1a:51:11:a9:a3:f5:6f:
                    7b:a5:9b:9c:e9:95:4b:72:3f:13:e0:27:dd:1f:d7:
                    76:0a:2b:95:c7:28:ee:52:93:f4:f1:11:23:83:cf:
                    77:b1:8f:73:6b:2e:fc:83:71:40:be:ff:99:c5:7d:
                    03:a1:d1:79:f5:8e:ff:9e:75:9d:8e:47:bf:22:9d:
                    50:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:CD:94:3B:95:B6:71:A8:86:AD:8B:36:9A:2F:37:27:65:2A:EF:21
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/A82UO5W2caiGrYs2mi83J2Uq7yE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.135.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         09:8f:e7:c6:65:87:05:4a:4f:0e:68:81:96:b4:2f:d8:65:56:
         2e:55:b1:a7:9e:66:80:57:07:52:6b:20:90:76:5b:84:46:28:
         77:ed:76:ed:c7:8b:a6:f5:5f:f3:96:0f:79:66:21:b6:e2:6f:
         fa:49:d4:bc:89:44:23:91:3d:cb:a1:f1:33:1a:d0:bb:c8:7f:
         73:ff:86:cf:a1:30:3f:95:be:c1:af:b0:3d:bc:42:58:cf:82:
         ba:a3:5f:c6:f4:6a:d1:bb:bf:4b:5f:af:8d:5b:7c:58:a1:d1:
         87:ed:82:5a:4b:d4:fe:f3:54:84:16:fd:d3:4d:cd:3e:a6:ae:
         f4:ae:21:63:cc:8a:63:9e:24:a3:14:55:a7:21:97:00:38:56:
         aa:06:3b:bc:fe:11:d8:03:0a:c7:ec:c9:27:35:69:21:99:15:
         2d:73:c9:ec:89:04:72:8d:25:e3:64:df:51:0c:d5:7a:39:74:
         39:0b:28:01:b5:8f:3b:1f:6d:09:cc:33:d5:44:c5:58:0e:8b:
         13:d2:a4:6d:e6:bc:00:49:32:4b:7e:4f:6c:6c:11:87:ca:5a:
         11:96:d9:df:33:e6:a6:a1:fd:50:7c:cb:dd:64:72:cc:f0:14:
         7d:73:93:f6:22:4d:74:32:36:62:14:b7:00:68:94:88:de:51:
         94:24:f5:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:40:13 2026 by rpki-client