Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/Crpxfgr6ii9LF_U93I6xMQ4XeGo.roa
File:                     Crpxfgr6ii9LF_U93I6xMQ4XeGo.roa (raw, json)
Hash identifier:          8j5RSSEKsd73IpOBXlQ+RKfFxHMJ1wxdu+18bQnhgIc=
Subject key identifier:   0A:BA:71:7E:0A:FA:8A:2F:4B:17:F5:3D:DC:8E:B1:31:0E:17:78:6A
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       090A
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Crpxfgr6ii9LF_U93I6xMQ4XeGo.roa
Signing time:             Tue 31 Mar 2026 07:44:42 +0000
ROA not before:           Tue 31 Mar 2026 07:44:42 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        210.249.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2314 (0x90a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:44:42 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=0ABA717E0AFA8A2F4B17F53DDC8EB1310E17786A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:0a:3d:3a:a8:eb:29:91:60:28:4b:cd:73:e1:
                    58:ab:e4:11:34:86:e6:66:61:04:eb:e6:ee:83:99:
                    6d:2b:37:64:9d:f2:5d:47:33:1c:57:9d:0f:cb:c2:
                    ad:c8:93:53:e7:7a:00:37:be:32:81:87:30:55:2b:
                    d4:d0:6a:9e:45:00:37:2c:97:56:8f:2f:7b:1c:32:
                    c1:ac:c0:19:d3:b9:46:b1:21:ec:69:29:82:6a:09:
                    f6:63:59:20:a7:83:08:5c:8f:57:8d:4f:32:bb:fc:
                    fd:3f:e8:02:20:e3:7e:c5:71:91:ce:de:a8:55:2a:
                    1f:30:36:78:f1:e9:aa:bd:11:71:76:45:c5:fd:b3:
                    de:bd:5d:b8:67:35:58:1c:43:b0:d0:45:46:d3:60:
                    f0:96:9e:e1:f2:dc:e6:d1:04:70:66:d5:77:9d:65:
                    72:60:28:d8:33:2b:29:71:22:ec:b4:0e:5f:73:f3:
                    4d:4b:2e:0c:65:8d:42:a2:8d:04:2f:12:3c:f1:c8:
                    e0:c4:0c:0d:e3:53:fd:49:1d:f6:12:67:1a:e9:87:
                    40:4b:0e:17:41:fa:44:67:85:8c:78:9e:1a:6f:72:
                    0e:5c:b7:22:48:25:dc:5a:e6:56:56:a8:c1:04:08:
                    40:be:7f:6c:2c:08:6f:ef:c5:9d:3a:64:65:96:57:
                    03:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:BA:71:7E:0A:FA:8A:2F:4B:17:F5:3D:DC:8E:B1:31:0E:17:78:6A
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Crpxfgr6ii9LF_U93I6xMQ4XeGo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.249.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         11:b7:5b:a6:61:26:5f:a6:16:b4:2b:ea:ba:1a:24:66:92:d9:
         b2:73:41:50:44:f0:df:98:1e:ca:91:30:b6:c5:16:52:68:a5:
         28:1d:5d:c6:4b:91:5e:f9:6b:5c:6a:f0:ec:2e:7d:61:02:ce:
         60:99:b2:82:dd:8c:f3:82:98:43:e9:f3:41:7c:8a:5d:58:11:
         5f:24:e2:84:d8:28:6e:28:47:6f:51:e4:e9:cd:88:59:0e:95:
         b0:78:56:bf:d7:b9:5d:d9:f7:11:f3:09:81:0b:69:a4:fa:59:
         c3:60:fb:e2:23:18:f8:02:e9:44:33:20:b7:76:5e:f6:97:28:
         0f:fe:dc:87:a0:37:70:a4:82:26:ff:c6:dc:75:77:58:f5:a2:
         7a:18:66:ad:de:29:a6:6e:f1:67:8f:92:aa:fd:c2:cc:15:c4:
         ed:40:18:7d:b2:07:4d:31:fb:90:95:5a:19:5e:2e:ea:2c:12:
         dc:6d:06:a6:dc:24:90:1d:46:06:b2:8b:c3:7a:08:12:ad:3a:
         09:4d:60:82:a7:ad:14:a6:a2:a1:8c:08:2c:5a:a5:84:13:99:
         6e:8e:38:e4:9a:c6:e9:06:27:87:cf:91:f3:11:96:54:84:35:
         43:d6:ac:17:c2:82:ba:a3:10:47:fb:9e:4f:65:80:bd:ab:ae:
         5c:ca:d3:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:13:19 2026 by rpki-client