Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/MdNUlG8207STB3yt0fDclKqRXpU.roa
File:                     MdNUlG8207STB3yt0fDclKqRXpU.roa (raw, json)
Hash identifier:          doDBtUfLeFkj8H84GRK37LAcMtjBrqFajZMXyicxUpc=
Subject key identifier:   31:D3:54:94:6F:36:D3:B4:93:07:7C:AD:D1:F0:DC:94:AA:91:5E:95
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       08CF
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/MdNUlG8207STB3yt0fDclKqRXpU.roa
Signing time:             Tue 31 Mar 2026 07:44:18 +0000
ROA not before:           Tue 31 Mar 2026 07:44:18 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        61.114.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2255 (0x8cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:44:18 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=31D354946F36D3B493077CADD1F0DC94AA915E95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b8:0f:75:ac:b7:73:d9:ba:a7:bc:09:9e:1a:
                    18:d9:8a:63:6b:2e:39:74:de:52:df:32:60:d9:8d:
                    88:e0:b2:5f:76:23:68:d2:91:b8:e0:d9:6e:ff:a0:
                    aa:aa:40:61:61:71:87:47:43:bf:fd:f4:5a:fe:e6:
                    81:3c:01:62:98:90:50:83:20:be:ff:b7:1f:f9:9d:
                    c1:54:bd:f9:87:55:eb:3c:40:16:b3:37:9c:b3:93:
                    91:ef:7d:84:0e:47:b7:bb:aa:e8:2e:21:46:d5:e9:
                    c4:92:91:73:6f:79:a2:7e:85:be:a5:5d:e5:16:ea:
                    51:07:bb:e9:c0:d5:ce:1b:2c:61:9b:7a:a9:72:5e:
                    61:1d:b1:ce:23:b8:5a:be:41:b5:54:c2:78:7e:15:
                    06:aa:c5:98:2e:b9:da:70:e4:a4:7d:80:20:fb:ab:
                    a3:c7:7c:87:7a:25:94:d2:92:0f:6b:74:55:14:61:
                    85:bc:eb:4c:f6:44:cb:b9:39:1a:02:8d:1d:aa:53:
                    05:a4:93:9f:99:70:b0:51:ee:f8:b7:ed:1f:e4:9f:
                    7e:0f:13:8b:df:28:cc:17:1e:4a:4a:d2:ac:f9:27:
                    f3:2d:76:39:7e:60:31:c6:ac:a5:c3:c2:69:e2:29:
                    bb:0e:e3:c2:75:fd:4c:e6:ad:fd:bd:b2:fa:7d:06:
                    3b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:D3:54:94:6F:36:D3:B4:93:07:7C:AD:D1:F0:DC:94:AA:91:5E:95
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/MdNUlG8207STB3yt0fDclKqRXpU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.114.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         11:57:c7:c7:cb:ad:fe:ff:67:07:2d:2f:68:6e:bd:a6:b3:45:
         a5:85:91:e2:9d:d7:33:ee:d3:10:10:2f:7b:41:86:98:e0:1b:
         b7:20:f0:f1:f2:c9:4d:80:fb:01:84:02:2c:0c:47:86:76:fe:
         cb:0b:ec:9f:b5:95:62:7d:86:9b:95:5b:cb:67:fc:c3:cf:4a:
         ee:d5:9a:5d:fb:dc:c6:42:d5:35:fb:36:36:93:69:52:2b:e7:
         03:35:97:9d:b7:ad:38:91:02:99:23:45:e8:bd:da:36:20:de:
         d1:2e:1c:9a:68:07:9b:fd:a5:fa:e7:fc:74:b0:60:f2:c9:4a:
         80:13:5c:7e:b9:87:ee:f6:e2:60:3f:60:70:4e:3e:cb:93:81:
         a0:a1:4b:cc:5e:38:3b:60:da:b0:7e:5f:6a:80:da:93:0a:2a:
         9b:30:b3:9e:9d:85:b0:48:10:7d:89:43:64:b9:35:94:bf:7d:
         8d:13:86:34:b9:32:0c:01:7b:1a:82:01:ba:8f:de:9b:75:f5:
         1f:89:e8:98:11:5a:df:21:df:f9:ae:ee:bc:24:6f:73:0d:b7:
         a1:b9:54:c6:c5:4e:a0:54:ec:a9:0a:50:3a:6f:2f:2c:a1:c3:
         93:84:8c:7c:a7:65:f5:c8:68:7e:ee:8c:54:de:89:00:12:e2:
         e2:4b:be:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:57:44 2026 by rpki-client