Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/OzISf20UC-xWvtq5CrQh2F5IGY4.roa
File:                     OzISf20UC-xWvtq5CrQh2F5IGY4.roa (raw, json)
Hash identifier:          H0qxFCwPSfqEPvRWIC55XFEKedJnAP/cTYzkfAM0h6Y=
Subject key identifier:   3B:32:12:7F:6D:14:0B:EC:56:BE:DA:B9:0A:B4:21:D8:5E:48:19:8E
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       07A8
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/OzISf20UC-xWvtq5CrQh2F5IGY4.roa
Signing time:             Tue 31 Mar 2026 07:41:50 +0000
ROA not before:           Tue 31 Mar 2026 07:41:50 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        175.131.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1960 (0x7a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:41:50 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=3B32127F6D140BEC56BEDAB90AB421D85E48198E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:47:1e:2e:2c:73:35:4e:83:b6:67:d6:12:40:
                    f6:2f:bb:95:bb:76:3b:e9:1f:b5:19:28:93:b7:0d:
                    0a:c0:ae:61:38:7f:9e:09:ec:f4:01:9c:29:f0:5e:
                    e9:14:3b:57:57:35:a3:61:2f:2d:e5:87:af:bb:3e:
                    49:cd:e6:08:54:ae:3e:7f:b4:c5:09:d4:eb:d4:fe:
                    88:54:85:95:10:c1:d5:92:8d:30:39:61:ef:e3:c4:
                    9f:6f:c0:a6:02:97:9c:f4:44:d3:fd:fb:83:45:b7:
                    a9:4f:ad:e3:19:93:b0:96:64:dd:29:06:0c:f5:82:
                    57:e5:40:33:a0:31:d2:cf:04:a3:12:75:0c:8c:3b:
                    88:f4:c6:b1:d1:12:bf:70:64:10:5f:ca:d4:84:fa:
                    63:6d:d8:68:02:1d:61:61:82:1b:71:9c:92:71:c1:
                    cc:f0:82:8f:05:f5:70:1b:6e:a8:a5:d2:50:24:0c:
                    cb:b7:cd:64:cf:9d:b6:be:b5:01:be:13:7d:0a:72:
                    7a:f0:df:7b:c4:46:54:c6:86:9c:19:0e:de:8e:83:
                    59:d7:48:fb:45:7a:74:e8:94:b2:96:c7:26:df:6d:
                    f9:e9:7a:46:ba:38:39:59:6c:e1:ca:a5:48:e1:49:
                    53:ec:7c:a5:bc:3c:83:af:7c:f7:f6:44:00:e9:1b:
                    89:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:32:12:7F:6D:14:0B:EC:56:BE:DA:B9:0A:B4:21:D8:5E:48:19:8E
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/OzISf20UC-xWvtq5CrQh2F5IGY4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.131.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         20:4f:bf:40:5f:4c:49:90:6f:73:86:fb:7d:69:1a:a7:70:b0:
         59:ef:3a:af:c3:48:17:12:68:d3:c0:75:23:01:38:cf:fc:16:
         1a:70:6c:4c:f9:cc:c8:8f:4b:ca:a2:31:47:e0:50:80:b5:3d:
         cc:55:97:38:01:b8:88:54:a2:c8:56:01:96:f3:07:56:94:c4:
         7c:7c:b0:79:5d:c7:c6:98:a3:af:80:22:e9:78:83:b3:93:42:
         2a:19:3a:9a:f7:2e:35:5f:d0:f2:29:4f:07:cf:2c:d8:27:b0:
         c0:5b:17:d5:42:ff:09:b9:5d:94:b9:08:22:1a:7c:84:7f:61:
         fb:2b:51:0b:38:3e:06:04:52:47:74:5a:11:1b:8c:19:eb:bd:
         2f:15:f9:c9:94:cd:f4:4c:71:3b:04:69:14:55:ab:96:8c:3c:
         c0:fa:3a:75:c1:2c:8a:d4:dd:08:47:b6:2f:ce:15:1f:90:eb:
         38:3b:b4:d5:df:e8:74:b9:cd:ef:79:a3:82:89:83:fb:c0:72:
         10:d5:bb:4d:9f:3b:47:c5:1d:32:10:c9:ac:4a:c5:af:65:a4:
         f9:22:08:fb:ed:56:dc:8d:f6:0d:78:e3:94:f1:70:4f:1d:6b:
         c3:9e:31:97:a7:88:30:53:72:bb:47:39:8d:91:b1:c0:df:87:
         4b:7d:69:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:32 2026 by rpki-client