Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/HJBmN4-CjSjkcCATdNj8KqMTCPI.roa
File:                     HJBmN4-CjSjkcCATdNj8KqMTCPI.roa (raw, json)
Hash identifier:          y1f0tE71fw75eb4zBKl7U/D82sWKrm1+O/0CtjCOF08=
Subject key identifier:   1C:90:66:37:8F:82:8D:28:E4:70:20:13:74:D8:FC:2A:A3:13:08:F2
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       07A7
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/HJBmN4-CjSjkcCATdNj8KqMTCPI.roa
Signing time:             Tue 31 Mar 2026 07:41:49 +0000
ROA not before:           Tue 31 Mar 2026 07:41:49 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        106.185.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 13:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1959 (0x7a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:41:49 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=1C9066378F828D28E470201374D8FC2AA31308F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:26:3d:4a:d7:02:69:22:d9:b5:2a:44:ac:0f:
                    a8:c8:04:cc:91:2a:31:b4:c9:b0:c0:fc:23:87:9c:
                    0b:e1:da:9b:12:54:1c:b8:73:08:35:5c:f2:2d:91:
                    f3:5d:9e:c4:6f:c8:06:4f:4a:fa:c2:c0:a9:fb:8f:
                    b7:f0:1a:ba:39:fc:21:04:61:70:87:f0:d8:a2:3c:
                    a4:39:5b:52:71:56:4f:2a:80:50:cf:98:75:61:5a:
                    00:80:97:52:0d:38:55:e6:79:88:03:5a:08:4a:0c:
                    08:a1:e2:73:fc:63:2c:df:41:a4:0f:b8:7f:d3:1b:
                    2e:25:60:33:4b:c5:27:5f:d2:c4:91:d1:26:c1:ee:
                    3d:e4:01:77:c0:8b:da:69:a1:36:17:ec:64:ff:a7:
                    92:a7:61:39:65:1a:c1:3d:45:e2:60:70:d2:dc:f7:
                    3d:0e:62:f7:59:0d:f0:68:80:c7:af:62:1c:d2:a4:
                    88:45:5e:8f:03:09:28:f4:fa:a0:59:d9:98:0c:7b:
                    34:8e:9f:7b:3b:ce:e6:e4:1f:14:95:8b:ff:e0:8d:
                    15:8f:6c:8d:43:89:9e:e8:0e:3a:90:51:18:71:4f:
                    7f:6f:63:62:54:71:47:b4:56:77:11:61:cb:fb:4c:
                    a0:05:16:89:e9:6a:97:1a:bd:d3:26:9d:f2:40:41:
                    b7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:90:66:37:8F:82:8D:28:E4:70:20:13:74:D8:FC:2A:A3:13:08:F2
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/HJBmN4-CjSjkcCATdNj8KqMTCPI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.185.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         9f:68:15:5b:9a:51:8f:f5:a5:53:11:9b:7c:e0:9c:9e:b8:35:
         b8:39:e3:4b:a5:54:2a:1e:5d:72:75:82:37:2c:46:b2:6f:90:
         0e:5a:2a:c1:54:fa:00:a7:c6:96:8a:ac:92:60:af:42:6f:1e:
         ba:61:62:a6:1c:dd:f4:03:7c:61:2a:13:38:7e:31:21:59:6b:
         0f:69:50:42:a5:a7:0d:26:23:20:c8:63:06:1c:53:44:73:19:
         cc:3d:f6:05:f0:21:78:63:c2:b3:00:e5:8c:52:29:96:88:68:
         e8:62:28:bd:f7:87:58:35:4b:91:39:66:25:9e:bf:14:23:52:
         f0:b7:37:cf:a4:2d:c8:a7:6a:b7:0c:75:ce:27:5d:73:27:66:
         8d:ee:29:c8:2b:83:03:0a:1e:bc:29:63:67:5f:6d:a5:e7:45:
         d6:59:6a:e7:50:4f:3c:7d:32:12:d2:15:57:ee:8f:66:1e:f0:
         68:74:03:71:20:c2:7d:49:72:ec:12:73:69:fb:d4:83:75:0c:
         31:34:93:96:4a:34:05:53:5c:af:b1:e0:f1:48:ef:1d:23:a3:
         14:71:89:46:61:a7:4e:18:15:f6:9e:fc:99:12:4e:ae:0d:bd:
         02:a3:77:53:4c:5a:95:44:d4:fe:65:f9:1e:a1:ae:da:c5:8e:
         4e:9f:4a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:02:25 2026 by rpki-client