Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/HCnwb0KGuGii9_ROdcGt0k1tIFg.roa
File:                     HCnwb0KGuGii9_ROdcGt0k1tIFg.roa (raw, json)
Hash identifier:          GuVTANakfTyAxU15Hu/UBBmBNWlHAe45k+j7OvN26PQ=
Subject key identifier:   1C:29:F0:6F:42:86:B8:68:A2:F7:F4:4E:75:C1:AD:D2:4D:6D:20:58
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0886
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/HCnwb0KGuGii9_ROdcGt0k1tIFg.roa
Signing time:             Tue 31 Mar 2026 07:43:43 +0000
ROA not before:           Tue 31 Mar 2026 07:43:43 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        210.198.118.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2182 (0x886)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:43:43 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=1C29F06F4286B868A2F7F44E75C1ADD24D6D2058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0f:d2:9f:1b:cd:cd:69:8c:12:a5:09:db:4c:
                    48:f1:d9:e8:72:9a:46:14:35:87:44:0d:72:2d:4a:
                    29:f6:78:7b:51:29:a2:d5:6f:f9:29:db:fc:7e:20:
                    81:de:c9:64:01:b3:fe:e7:1b:c1:34:ba:30:b6:2c:
                    b5:ca:90:4b:ff:e9:c8:19:8c:1b:78:2e:05:74:3c:
                    dc:7d:e9:c7:21:ac:4a:03:52:f2:33:a7:cf:11:94:
                    cf:57:c3:53:02:a2:dd:46:5a:2f:94:08:e2:55:af:
                    e7:70:4b:57:e1:d7:18:fd:fd:0e:0c:3b:10:1b:b8:
                    b7:b1:12:a7:58:10:f8:30:d9:aa:5c:e6:5d:a5:b9:
                    42:09:3e:2c:e0:8d:12:9f:06:31:34:52:94:3a:a7:
                    5d:71:04:83:eb:f1:f6:eb:0a:fe:c0:d4:83:74:36:
                    2b:81:0f:9f:28:24:20:0c:02:f4:80:b4:3f:21:aa:
                    49:56:07:43:0f:08:e4:b6:c7:9f:68:08:aa:c3:c3:
                    64:8c:0b:7a:31:e1:40:31:b9:3a:6a:09:3f:c6:7b:
                    59:e0:ba:3d:d4:cc:a6:b9:14:f4:98:21:08:c3:52:
                    8f:70:d4:7c:77:b0:58:56:62:2c:4d:ba:e1:e5:ef:
                    b2:b6:ce:6c:43:56:59:87:6d:a1:95:46:ab:42:c5:
                    01:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:29:F0:6F:42:86:B8:68:A2:F7:F4:4E:75:C1:AD:D2:4D:6D:20:58
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/HCnwb0KGuGii9_ROdcGt0k1tIFg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.198.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:a9:e8:45:44:b6:84:72:ed:02:d0:44:0b:28:05:2a:81:60:
         1c:5d:08:ea:de:67:e3:a1:b2:de:30:64:c7:5f:ea:2f:2a:0c:
         3a:95:f7:39:f0:6d:03:58:89:ce:de:d3:3e:9a:e2:da:0c:26:
         dc:63:4c:d6:5d:a3:0a:f2:29:85:45:b9:5b:99:ae:7e:0d:94:
         23:00:cb:f4:45:05:d9:e6:69:b7:b9:ca:9f:2a:3c:23:23:7d:
         80:00:a4:a6:42:d8:c6:d5:5d:45:5c:78:56:73:cc:38:96:fb:
         3b:31:ff:0c:a6:3f:89:9f:b7:63:30:51:db:9e:bf:3e:0f:15:
         ac:8d:6f:5a:f4:21:21:26:9f:27:de:c6:46:3b:6a:4f:3e:d2:
         17:60:92:52:7d:e2:f0:23:7c:49:b0:58:92:4b:91:41:ac:59:
         4a:38:81:93:6c:45:f4:33:28:ae:76:65:46:a8:31:c9:18:7f:
         18:18:ae:fc:30:b9:d9:58:42:68:dd:2b:74:6d:f1:57:de:94:
         8f:bb:67:fd:dd:51:fc:22:b1:ba:90:fb:10:d7:64:1a:7e:02:
         e4:db:22:a4:19:a6:1c:94:ad:63:f2:52:33:a9:e8:4b:3a:30:
         94:0d:74:2b:2f:7d:e3:2f:2f:ff:a4:44:e6:81:5d:98:9f:ba:
         7e:ca:57:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:33:26 2026 by rpki-client