Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/M_ZVFXKrPWwK7MaaSsAmyCtIGC4.roa
File:                     M_ZVFXKrPWwK7MaaSsAmyCtIGC4.roa (raw, json)
Hash identifier:          ajSfewp2YFFEqMTVxinwriitDjiOBWP099OrIogAjUY=
Subject key identifier:   33:F6:55:15:72:AB:3D:6C:0A:EC:C6:9A:4A:C0:26:C8:2B:48:18:2E
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0890
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/M_ZVFXKrPWwK7MaaSsAmyCtIGC4.roa
Signing time:             Tue 31 Mar 2026 07:43:47 +0000
ROA not before:           Tue 31 Mar 2026 07:43:47 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        211.10.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2192 (0x890)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:43:47 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=33F6551572AB3D6C0AECC69A4AC026C82B48182E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:a3:29:6f:74:33:1d:a2:76:1b:5c:e5:c4:8a:
                    cb:6e:b1:a5:47:d7:d0:e4:d0:6a:de:a4:89:84:4a:
                    b0:0b:7e:9f:8e:38:91:5a:46:7d:23:da:ab:df:3d:
                    0d:91:29:37:5c:14:4f:00:2c:27:12:29:68:02:77:
                    21:b5:66:07:49:d3:c9:40:71:ff:a5:f8:38:f8:68:
                    02:5f:a9:88:5c:a7:66:8d:36:0b:12:fc:94:9c:03:
                    09:62:15:2c:ad:8f:06:10:c2:72:5a:7e:ad:c8:cb:
                    15:9f:3a:68:64:80:02:a5:ac:cb:1c:82:15:2c:32:
                    d5:fd:5e:9e:57:27:f1:31:ff:1a:11:5d:b7:42:6d:
                    b7:33:50:dc:25:3b:f0:00:dc:cf:7f:65:48:9e:24:
                    f7:81:7f:b1:55:26:79:de:ec:0e:bc:5e:bd:b5:06:
                    7e:33:6b:e4:27:ea:65:15:2a:99:d6:be:58:8b:b0:
                    13:fd:0e:7f:c1:2e:ba:9b:2a:8b:e8:6c:da:23:4c:
                    4d:99:30:85:21:97:ac:55:53:4e:0e:f9:98:d2:67:
                    87:81:de:d0:c5:05:47:a7:eb:58:a6:7b:d2:25:e7:
                    ca:a0:e4:fd:fc:cc:a2:74:7e:e7:ad:3e:be:b4:bb:
                    8d:fb:c8:69:4e:c0:63:2a:43:87:6f:4b:4c:bd:4a:
                    78:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F6:55:15:72:AB:3D:6C:0A:EC:C6:9A:4A:C0:26:C8:2B:48:18:2E
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/M_ZVFXKrPWwK7MaaSsAmyCtIGC4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.10.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:0a:d4:41:ae:24:87:64:44:6b:56:47:54:16:2c:a0:78:d3:
         14:c0:94:53:23:39:8d:17:99:8f:9d:bb:01:28:31:cb:3a:8c:
         7c:aa:fb:f2:60:90:48:d6:ab:78:ff:76:cb:e9:ed:63:7b:69:
         bb:ba:79:94:b7:d3:fe:13:7d:8d:63:a7:4a:af:2d:60:16:dc:
         f7:76:a7:8d:f5:f2:53:87:c9:fb:4f:3b:7d:60:29:7a:f7:2d:
         02:2b:4a:29:04:51:b7:9b:ab:ab:ba:e1:5f:5e:d0:b0:20:82:
         36:8a:d7:1d:bc:a2:21:7f:df:89:84:d7:e1:a9:da:89:96:5e:
         96:be:5b:8d:1b:29:ae:c2:56:c1:2f:55:8c:e6:cd:21:52:c9:
         74:34:4f:12:16:26:1c:31:76:42:45:40:15:a9:9e:40:f3:b0:
         b7:5d:c9:d0:93:f8:3c:d3:ee:90:1b:0c:44:c3:af:a9:56:a5:
         88:7c:c4:a4:2b:e8:05:17:48:92:7f:a4:93:75:81:7d:67:40:
         ec:25:38:d5:81:4f:bb:10:a9:7b:2f:c8:61:a9:2f:69:bf:2f:
         94:fd:cf:da:8e:c7:ae:3d:32:02:24:6e:c0:df:04:ab:9f:17:
         4d:87:09:39:0d:8a:83:16:10:59:0b:11:30:51:18:44:d8:b4:
         0d:40:ab:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:13:33 2026 by rpki-client