Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/NSodnofcl_aktKq9viTs1Wanrh0.roa
File:                     NSodnofcl_aktKq9viTs1Wanrh0.roa (raw, json)
Hash identifier:          c2bOnWAApkjgEchOKh8kAXKgu0uPOH45m4LXpKLUeVA=
Subject key identifier:   35:2A:1D:9E:87:DC:97:F6:A4:B4:AA:BD:BE:24:EC:D5:66:A7:AE:1D
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       07B7
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/NSodnofcl_aktKq9viTs1Wanrh0.roa
Signing time:             Tue 31 Mar 2026 07:41:56 +0000
ROA not before:           Tue 31 Mar 2026 07:41:56 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        210.234.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1975 (0x7b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:41:56 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=352A1D9E87DC97F6A4B4AABDBE24ECD566A7AE1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1c:e0:b5:05:40:c1:a2:c5:63:a1:89:da:7e:
                    98:99:1f:73:ab:c2:6b:dd:78:8f:a9:7b:fc:5b:91:
                    9e:bc:2d:2c:3a:96:1c:bf:57:e5:a8:be:1e:d0:bd:
                    53:57:3e:69:57:c7:f9:93:ad:51:c0:2c:61:f6:59:
                    9b:5f:8d:d6:70:d5:b9:32:6e:99:43:44:0f:cc:9d:
                    2e:26:4d:a8:f3:5f:40:9a:40:76:61:79:4c:32:87:
                    18:4c:e7:97:dc:fe:ab:8c:53:92:19:5a:2c:53:9c:
                    dc:25:63:03:29:74:f8:d0:e3:6a:a0:7b:aa:93:9f:
                    0a:83:38:cf:88:8c:9b:f6:c2:13:fe:ee:1a:b4:9d:
                    d0:2c:d9:9c:96:b7:e8:a7:43:13:74:34:a9:69:e4:
                    6f:f2:7f:83:d3:0d:90:e1:0a:d1:05:8f:bf:0f:3b:
                    fa:cd:df:93:de:1e:2e:34:49:bd:c6:de:6f:91:ff:
                    ab:32:73:65:1e:11:13:f9:c4:39:31:11:45:53:03:
                    f9:ce:61:e8:8b:29:5f:84:f7:e9:73:2f:a9:8f:3e:
                    9e:6a:34:2c:4e:34:ee:47:ac:22:8e:92:f2:b8:bc:
                    4b:29:27:4f:93:bb:90:a1:95:30:cf:f9:1d:d5:2d:
                    e0:f1:a3:eb:a9:2b:0a:e1:9f:80:88:ea:22:6b:cb:
                    cc:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:2A:1D:9E:87:DC:97:F6:A4:B4:AA:BD:BE:24:EC:D5:66:A7:AE:1D
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/NSodnofcl_aktKq9viTs1Wanrh0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.234.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a7:82:4b:90:93:52:e3:d5:95:e2:28:b3:2d:9e:a2:aa:2e:1b:
         ac:75:e8:d6:36:d9:2f:6f:a2:bc:d4:65:ca:e3:bd:ab:6a:9c:
         35:6d:05:91:d6:8a:b5:05:72:45:52:51:45:a4:48:ce:76:96:
         aa:c0:70:f1:f5:c4:50:d7:fa:fd:21:e5:be:c5:49:31:20:18:
         69:e7:16:8e:d2:a3:23:af:45:d7:78:3f:a8:f9:f8:3e:b8:d9:
         3f:22:3b:48:b6:0d:46:df:93:18:ad:e9:34:ee:2d:30:b6:c8:
         61:71:b4:8e:9b:a8:b0:cf:d5:83:59:51:99:82:c6:88:0b:5e:
         5d:ce:c5:b3:25:fe:d7:08:4d:3c:b6:d1:8a:a0:55:08:0b:3f:
         83:39:43:3b:1a:79:ba:3e:cc:00:f4:b3:17:a1:ff:43:b2:23:
         ad:c0:96:83:26:38:1f:75:8f:c7:89:12:40:15:8a:28:57:b0:
         bd:99:58:cc:74:ab:11:03:4e:56:b4:87:ce:1c:2d:ce:c2:cb:
         f4:5b:3e:01:25:6f:56:0a:2a:83:bd:ea:fa:b9:0a:ba:3e:d7:
         1e:cd:95:fe:03:64:f1:a3:4d:0a:85:e8:92:bc:01:5c:a2:1d:
         81:89:97:10:ee:c7:d6:24:b6:d8:6f:3e:e6:2d:c2:9f:24:17:
         bf:52:37:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:23:29 2026 by rpki-client