Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/Jzyo3dQxyOr3jwyx7_X301g1Vms.roa
File:                     Jzyo3dQxyOr3jwyx7_X301g1Vms.roa (raw, json)
Hash identifier:          aXx+Jw/Dxjz5ga3kjRWs8O+nhL3yV+V+poE+xL64Gug=
Subject key identifier:   27:3C:A8:DD:D4:31:C8:EA:F7:8F:0C:B1:EF:F5:F7:D3:58:35:56:6B
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0775
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Jzyo3dQxyOr3jwyx7_X301g1Vms.roa
Signing time:             Tue 31 Mar 2026 07:41:27 +0000
ROA not before:           Tue 31 Mar 2026 07:41:27 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        125.29.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1909 (0x775)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:41:27 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=273CA8DDD431C8EAF78F0CB1EFF5F7D35835566B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c9:d2:37:a7:11:99:ea:6c:fb:90:c6:be:47:
                    2a:15:11:df:4d:1e:66:93:17:f6:4c:16:57:a2:97:
                    04:a3:94:1b:41:de:f7:b4:b9:a0:5d:90:cb:6c:57:
                    07:06:2f:bb:e8:7d:1a:20:39:52:0d:b4:01:a5:f3:
                    e6:e9:d5:70:5a:8a:7f:4e:79:c1:34:08:07:6f:c7:
                    e7:e9:4d:09:0a:08:0b:54:30:cc:f6:1d:05:71:ff:
                    50:9e:f2:57:d5:9b:4e:74:c5:2a:b1:c4:da:c7:c1:
                    5e:5e:44:29:fd:40:5d:f6:d7:01:d8:e9:19:d8:98:
                    0b:97:8e:c1:72:87:d3:15:f1:d8:d8:f7:71:69:38:
                    e0:d1:95:c6:56:f3:45:8b:7f:b4:a8:8f:bc:54:6c:
                    49:3c:06:cb:18:78:95:16:46:22:32:6f:7d:b4:9a:
                    65:f3:db:ab:92:75:27:cf:fe:14:7b:2b:6f:ba:44:
                    0d:40:c4:de:6d:23:20:2c:da:bf:b8:38:cc:ce:2d:
                    a7:09:ba:8b:0c:b2:1b:28:d5:2c:17:85:69:1e:51:
                    17:56:c3:60:3e:26:39:35:22:4e:af:3c:29:fa:79:
                    fb:74:ef:d7:ff:aa:ae:b5:cd:47:cd:f6:46:7b:22:
                    48:45:69:b9:76:95:34:6f:72:1f:2c:4d:e1:00:9c:
                    0c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:3C:A8:DD:D4:31:C8:EA:F7:8F:0C:B1:EF:F5:F7:D3:58:35:56:6B
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Jzyo3dQxyOr3jwyx7_X301g1Vms.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.29.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a1:1f:36:c2:ef:02:75:63:d5:8f:1d:a9:24:cf:86:ba:7e:c6:
         5e:84:70:fc:2e:94:30:1f:0b:2d:cb:d5:98:8b:2d:9c:fb:57:
         96:a9:2e:70:10:0e:be:eb:03:be:3c:54:3a:81:fa:aa:23:11:
         30:9e:33:d5:e5:d9:e7:67:4d:45:00:79:86:41:28:ac:8f:f6:
         0a:67:60:f0:28:69:8d:62:a9:c7:ee:cf:90:53:33:7c:3e:6f:
         10:cb:b6:a1:6a:a1:54:95:b1:08:0e:ee:92:45:c0:10:5f:cc:
         0c:a6:83:33:46:d9:74:3f:15:5a:0d:3d:a8:28:f2:13:fb:8d:
         8e:7f:a1:5c:93:45:9f:9d:fe:dc:15:f5:8a:c7:74:9b:78:24:
         94:01:e7:98:91:f0:f0:a8:e7:ed:58:54:cd:c5:c2:92:6e:44:
         bb:87:1f:3c:9a:1b:0e:29:07:2f:15:76:8e:db:de:30:4b:7a:
         22:b1:2f:e8:bf:96:2e:15:a8:f6:0d:15:7a:5b:23:2f:c9:7c:
         6d:26:be:73:92:27:ec:30:02:e5:96:6a:8b:13:e0:f4:c7:da:
         01:18:2b:e9:7e:76:93:44:ec:fa:af:58:59:b2:4e:87:6d:c6:
         5e:86:46:8a:55:83:7d:88:ab:46:ac:e5:e3:e5:84:27:30:d2:
         ec:9e:1d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:35:44 2026 by rpki-client