Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/GWoP-PeoudKezVU-Nw45w6meZfo.roa
File:                     GWoP-PeoudKezVU-Nw45w6meZfo.roa (raw, json)
Hash identifier:          6BPCg/8TlpPJtZrIBOSYpxeJSYgRaIxj1Ou7bwvbduY=
Subject key identifier:   19:6A:0F:F8:F7:A8:B9:D2:9E:CD:55:3E:37:0E:39:C3:A9:9E:65:FA
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       075A
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/GWoP-PeoudKezVU-Nw45w6meZfo.roa
Signing time:             Tue 31 Mar 2026 07:41:16 +0000
ROA not before:           Tue 31 Mar 2026 07:41:16 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        106.187.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1882 (0x75a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:41:16 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=196A0FF8F7A8B9D29ECD553E370E39C3A99E65FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:65:d6:50:89:86:bb:58:e4:5d:37:e9:79:aa:
                    1f:a2:2c:b1:a2:21:49:6d:8f:bb:2d:48:c2:42:66:
                    24:21:f4:46:a5:bd:63:94:9d:ab:a4:85:b6:a0:c9:
                    df:c0:15:7c:fb:98:c6:8a:94:3f:63:c2:f0:f6:24:
                    46:24:60:9f:2f:94:aa:47:f4:46:08:22:32:02:e3:
                    34:c0:4a:38:74:e2:85:8e:b1:9a:11:fe:51:e0:ec:
                    f1:f1:7a:1b:7c:b9:30:de:62:2e:92:29:fb:12:c8:
                    1a:f4:28:9b:e0:10:76:12:70:ec:34:bd:5e:1f:f5:
                    5e:72:26:5e:0f:bc:92:dc:b1:b0:61:83:63:c7:cd:
                    78:11:07:fd:e2:df:6a:36:7f:33:8e:c2:0f:80:9d:
                    24:6b:59:d2:dd:31:e5:a9:0b:77:d1:ef:6d:ae:f7:
                    c6:02:27:56:99:3d:58:50:0f:fe:1a:1a:f9:b2:c0:
                    d9:67:fb:00:18:2e:44:51:d2:48:5f:26:00:03:c2:
                    5d:75:e6:aa:d1:53:7f:47:58:99:cf:57:44:9f:b2:
                    fe:ae:18:2c:aa:c9:c8:95:4a:af:62:c6:28:98:91:
                    ad:50:0e:b6:f6:47:b7:9a:0c:d1:0a:31:96:bd:0f:
                    6d:b8:f5:56:26:79:69:9b:7a:60:6e:70:36:15:0b:
                    85:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:6A:0F:F8:F7:A8:B9:D2:9E:CD:55:3E:37:0E:39:C3:A9:9E:65:FA
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/GWoP-PeoudKezVU-Nw45w6meZfo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.187.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         65:e1:cc:72:78:e7:43:81:7a:c2:08:ba:f7:e8:19:38:c4:4f:
         88:d9:21:2b:56:32:92:f9:6c:20:1d:39:53:4e:cb:b0:2b:b9:
         03:df:ef:54:07:cb:74:b7:a0:91:f0:8e:20:9b:ad:a2:65:15:
         26:03:a5:1a:48:d1:73:88:44:15:21:ee:7c:dc:53:e6:87:06:
         f2:61:b2:75:c9:e4:35:b2:6c:59:da:25:f7:14:90:99:46:b3:
         77:44:d6:e3:4e:52:d2:50:ec:03:c1:74:d1:1e:c7:dc:01:09:
         ce:00:f8:82:e3:8e:d8:e0:ab:33:92:24:81:23:fa:7f:28:23:
         24:b1:f1:19:15:8f:d0:3d:77:d5:21:84:eb:7b:76:b2:b4:69:
         e3:81:c9:85:26:f3:26:2e:75:8f:31:d8:63:2b:24:a0:37:60:
         c5:39:23:b4:18:b2:b6:9e:5f:95:41:b8:d4:1c:e5:78:d4:a0:
         62:ab:6f:67:de:f9:bd:e6:20:52:0b:80:4c:56:44:01:15:c2:
         20:a3:40:f1:75:18:72:69:ce:f1:3f:f6:df:ac:d7:62:5d:29:
         ed:f0:8a:c1:ff:77:db:aa:6e:0f:14:9b:bc:34:8f:97:13:60:
         a3:83:28:8b:45:d0:02:7a:c9:b2:b8:ee:71:7e:79:56:22:19:
         3b:ef:2d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:59:57 2026 by rpki-client