Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/HjpaMNhwpe2qsa_rHregtfSVofA.roa
File:                     HjpaMNhwpe2qsa_rHregtfSVofA.roa (raw, json)
Hash identifier:          SgHwLGZiMaGFos23ZFzzMdTpKTOXpjeiaRoGnq7uqz8=
Subject key identifier:   1E:3A:5A:30:D8:70:A5:ED:AA:B1:AF:EB:1E:B7:A0:B5:F4:95:A1:F0
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       080C
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/HjpaMNhwpe2qsa_rHregtfSVofA.roa
Signing time:             Tue 31 Mar 2026 07:42:40 +0000
ROA not before:           Tue 31 Mar 2026 07:42:40 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        113.156.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2060 (0x80c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:42:40 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=1E3A5A30D870A5EDAAB1AFEB1EB7A0B5F495A1F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2d:0b:26:c2:1c:62:62:0d:43:eb:13:b4:7d:
                    ef:02:80:c8:24:47:35:9a:62:27:63:d3:3b:7e:b2:
                    6f:fe:4c:2a:a6:69:7d:e5:dd:ad:5b:65:b5:0b:12:
                    75:9f:b2:3b:eb:c9:8f:1b:67:c7:58:70:1e:91:15:
                    81:23:a2:af:9f:8c:22:bc:29:5a:c5:73:73:86:ea:
                    45:ac:b3:30:3c:c8:ce:69:dd:2f:a9:f8:a4:72:fe:
                    00:fe:65:e5:bc:0a:bb:9e:71:c4:42:a4:83:9f:0a:
                    29:94:fb:68:b4:9d:04:13:60:ad:b5:86:c7:6c:66:
                    3b:05:94:5f:06:af:6a:a2:ec:cb:d1:53:18:cf:0d:
                    56:d0:e5:ad:92:bc:2c:04:b7:4b:8e:af:5d:fd:33:
                    e1:3d:63:b7:64:52:f1:8e:5f:eb:21:bf:25:12:9a:
                    07:43:92:d2:71:c5:ef:9e:95:58:c1:0e:81:16:65:
                    71:2c:0c:54:43:1f:f2:fb:5b:09:64:74:fb:a8:57:
                    80:67:8f:ba:30:3f:db:63:f5:ec:d4:0e:f4:b4:cb:
                    c7:0b:5e:22:f5:58:ed:f1:74:f2:34:65:1c:31:05:
                    68:00:bd:7d:14:2d:8d:06:58:af:ab:17:8d:7f:1b:
                    14:10:cd:8e:9d:a1:2a:b6:20:f0:54:73:f7:73:47:
                    fb:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:3A:5A:30:D8:70:A5:ED:AA:B1:AF:EB:1E:B7:A0:B5:F4:95:A1:F0
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/HjpaMNhwpe2qsa_rHregtfSVofA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.156.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0e:3f:24:ac:66:ed:23:27:b0:83:86:80:e2:3d:92:f9:ca:0a:
         87:e1:82:bc:a6:35:02:9f:37:48:bb:23:ca:4f:7c:9e:53:58:
         5c:56:30:ae:f4:10:e6:40:9b:98:43:5b:b5:d4:42:ef:4c:c2:
         2a:58:09:c4:f9:58:96:e7:13:1d:53:35:86:bc:b6:31:10:ef:
         d9:23:51:42:92:03:d4:74:15:33:79:f8:08:10:96:fa:4e:f3:
         ae:6e:52:c7:a2:2a:ef:86:39:ab:52:a3:3b:2c:0c:3a:28:ee:
         03:c0:6d:33:39:52:3d:93:da:fe:df:ff:a2:ec:8c:13:5e:8e:
         26:00:f9:17:02:c1:70:1c:de:80:b6:d2:ef:0e:83:a3:be:07:
         47:90:5a:4f:7b:0f:4f:49:e3:90:75:f5:38:29:b2:0e:c8:01:
         a0:e7:26:38:5f:dc:63:ea:86:6b:a9:7f:6d:57:29:ce:03:c1:
         13:69:b8:48:9b:17:ee:5f:d6:59:2d:91:e4:11:27:4a:72:a3:
         0a:e3:d3:fa:c7:0b:28:eb:90:90:a0:cf:f8:27:c5:1e:ff:2c:
         9a:3d:f9:6c:67:65:25:db:44:c0:76:12:76:6d:a1:86:fd:a5:
         f3:67:fa:e4:3d:f2:65:a3:eb:e7:29:12:b8:4e:78:90:76:79:
         83:e6:11:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:10:43 2026 by rpki-client