Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/KwKUUszifB9nzP3DeiwGBsh_PDc.roa
File:                     KwKUUszifB9nzP3DeiwGBsh_PDc.roa (raw, json)
Hash identifier:          n4beXTJ6ZMaolDOaEXyNlYOJUz4QMeGT3dCMD3KQ1PI=
Subject key identifier:   2B:02:94:52:CC:E2:7C:1F:67:CC:FD:C3:7A:2C:06:06:C8:7F:3C:37
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0803
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/KwKUUszifB9nzP3DeiwGBsh_PDc.roa
Signing time:             Tue 31 Mar 2026 07:42:37 +0000
ROA not before:           Tue 31 Mar 2026 07:42:37 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        111.101.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2051 (0x803)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:42:37 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=2B029452CCE27C1F67CCFDC37A2C0606C87F3C37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:01:2c:d6:b8:17:f5:35:08:e9:a4:08:c5:a3:
                    51:91:da:47:68:97:3a:2d:16:99:1d:09:41:c0:8f:
                    de:60:f6:87:ea:08:ac:f1:a2:db:e9:69:9f:56:13:
                    fc:f0:e7:35:30:55:80:e4:63:c6:27:cc:8a:37:11:
                    ce:1b:9e:a9:b4:b7:72:71:2b:a1:4c:f8:cd:e6:e6:
                    2a:fc:73:9c:a6:86:da:2b:fc:3a:72:0b:3e:f2:d9:
                    f9:61:f7:c7:0a:94:1d:72:c7:44:92:51:fa:a4:d8:
                    0d:0e:68:dc:9c:0a:8b:dc:03:f6:7d:6e:6d:ac:10:
                    f1:15:1a:44:f2:70:dc:22:da:12:50:ae:7a:ca:48:
                    9f:f6:77:29:8a:93:c2:48:ac:91:9a:74:49:a5:81:
                    08:b9:ba:5e:8b:96:58:60:8a:66:32:fd:05:8d:72:
                    bf:5e:8d:bb:38:ec:69:a7:1a:45:a9:19:70:3e:1b:
                    9c:87:eb:5c:6f:77:56:6d:22:5d:f4:4b:4e:e0:ec:
                    2c:75:39:3a:dc:0b:03:a5:08:19:b1:d2:7e:5c:d2:
                    3e:e7:c1:2d:18:ad:80:70:d3:ce:13:e7:58:6c:99:
                    f2:c6:ea:eb:e5:5f:bb:e9:c7:10:6b:bf:c7:17:0c:
                    56:4d:64:bf:87:d8:a3:96:42:c6:85:56:fb:59:7f:
                    a2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:02:94:52:CC:E2:7C:1F:67:CC:FD:C3:7A:2C:06:06:C8:7F:3C:37
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/KwKUUszifB9nzP3DeiwGBsh_PDc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.101.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         52:91:d5:bb:81:5b:e4:1a:5f:c7:61:a1:13:9e:cb:c1:b2:30:
         07:52:06:b4:fc:e1:0b:61:6c:95:3c:d3:5e:9a:5f:d5:e3:92:
         74:45:3c:28:e4:a9:a4:30:26:74:73:e0:67:5e:2b:70:2e:a8:
         eb:b8:b3:78:f2:09:79:e7:6e:53:41:f8:03:0e:5c:89:1a:22:
         9d:fe:33:04:0d:16:19:d6:24:39:10:89:44:71:e6:f4:5e:79:
         21:3f:a4:12:01:81:5a:47:5d:06:79:20:3e:f7:93:6a:ab:6c:
         b2:96:07:70:ff:2f:37:88:9f:63:9c:90:17:25:86:7b:46:b1:
         e6:ba:ea:e5:08:fb:cd:dc:cd:4f:b7:6d:54:c2:4d:bf:36:1a:
         45:65:ef:c8:8c:ec:9b:a6:13:f3:6e:7a:43:74:f7:a3:66:e4:
         33:49:9d:ce:d8:d7:33:9c:ca:91:fe:53:ae:62:1a:79:b6:b3:
         6d:9b:29:31:34:28:e3:36:e2:5a:b9:81:81:1b:d8:f2:d6:10:
         8e:b6:da:c4:f8:fd:fd:f1:6b:58:17:d1:72:22:34:86:c6:54:
         5a:49:db:63:6f:38:27:66:fe:ae:69:f7:5f:42:c2:61:58:2b:
         f4:cf:e8:76:b1:f1:61:d0:cd:4e:6c:2e:30:93:d6:d3:99:20:
         6b:e5:9d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:20:49 2026 by rpki-client