Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/B6pb6i7-eVe_OYF0LXsl8qGXryY.roa
File:                     B6pb6i7-eVe_OYF0LXsl8qGXryY.roa (raw, json)
Hash identifier:          Kjx1OsyiAUtkCdhO8fqJMuO6RaudbcfuRiYLzMalXVE=
Subject key identifier:   07:AA:5B:EA:2E:FE:79:57:BF:39:81:74:2D:7B:25:F2:A1:97:AF:26
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0835
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/B6pb6i7-eVe_OYF0LXsl8qGXryY.roa
Signing time:             Tue 31 Mar 2026 07:43:00 +0000
ROA not before:           Tue 31 Mar 2026 07:43:00 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        106.167.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2101 (0x835)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:43:00 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=07AA5BEA2EFE7957BF3981742D7B25F2A197AF26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:fd:e8:9c:0d:12:ba:ed:fd:38:0f:5b:a5:fa:
                    5c:25:20:ab:ca:0c:27:24:c5:07:1f:48:00:94:1b:
                    bc:ec:89:cc:28:2a:5a:dc:a1:1b:77:29:24:c9:a5:
                    8a:20:3c:79:92:47:a8:f6:5a:ba:fd:1b:d1:d8:2e:
                    d9:36:0f:32:d1:4d:42:a7:2f:a4:6a:a8:5a:aa:f4:
                    a3:42:0e:28:e4:2b:b6:de:44:b8:8b:66:19:fc:26:
                    0b:38:50:89:2c:49:d2:a2:f2:0e:07:c2:87:e0:3b:
                    ec:85:d3:e0:f6:0a:46:32:14:45:6e:60:11:0a:38:
                    b3:7c:18:63:89:2c:0b:ef:45:9b:e5:89:ca:03:40:
                    e0:cc:63:3a:2f:d3:ac:68:14:ef:7c:b0:a4:56:4a:
                    9c:27:f6:92:98:22:37:3c:ae:70:54:f1:fe:e3:38:
                    7d:cb:42:ba:1e:5e:44:17:70:46:ab:c3:b3:8c:d4:
                    40:8f:2a:8c:6e:ce:56:e4:f0:17:ed:dd:2b:fb:67:
                    93:92:41:d2:ad:40:ff:6f:dd:a2:ed:66:3c:07:bc:
                    ec:6b:b2:ac:88:0c:dc:01:3a:7c:08:d7:80:e1:dc:
                    64:69:45:a1:72:ce:b4:bf:ab:34:fa:d9:e2:16:88:
                    61:02:17:de:f4:84:b4:20:1e:93:25:cd:42:cc:e9:
                    b4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:AA:5B:EA:2E:FE:79:57:BF:39:81:74:2D:7B:25:F2:A1:97:AF:26
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/B6pb6i7-eVe_OYF0LXsl8qGXryY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.167.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         69:06:78:72:00:a8:40:93:64:18:30:4d:16:94:64:97:5d:01:
         1d:e5:3e:22:10:7d:25:f0:dc:74:55:e0:75:ca:14:b8:75:0f:
         53:01:fa:74:33:1a:d3:57:22:a2:77:b1:40:0c:73:ed:10:ba:
         68:59:31:b4:ad:c1:32:42:f1:89:0d:34:03:b4:fe:68:28:6d:
         a5:16:15:03:3d:59:48:27:24:46:31:b4:24:7a:8e:86:53:25:
         7e:b9:56:da:28:c5:66:55:68:65:8d:df:d0:99:3c:6d:40:28:
         28:aa:bd:a5:1e:5b:82:aa:9c:fb:f3:f0:cb:91:f9:4f:7b:7e:
         f0:57:d0:63:9c:d1:d1:02:75:c9:6d:c4:20:e8:6a:32:39:f4:
         8d:fb:2d:36:e7:19:43:0b:c6:d5:ce:20:ad:ef:bf:4a:f1:28:
         98:23:34:d1:1f:32:1f:15:62:7e:ad:22:65:ba:83:b1:b0:cb:
         ea:e3:bd:d4:93:e4:94:6b:d2:01:0a:ab:6e:d2:5b:26:97:0f:
         c3:94:c2:9c:40:30:55:a9:d1:8c:5e:49:6e:68:09:16:1b:ed:
         1e:e3:9a:96:ea:ea:9c:d5:85:06:a4:71:d9:27:ee:6a:4b:8b:
         7c:23:9b:b3:ca:57:10:d4:4b:2d:ab:7a:35:ff:7d:f5:cc:36:
         1e:3d:1a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:48:32 2026 by rpki-client