Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/PJRJV34s8JcLHrt9fVFumkMtZOU.roa
File:                     PJRJV34s8JcLHrt9fVFumkMtZOU.roa (raw, json)
Hash identifier:          69k0cSKyf8MhAwErFn46NqBGEcGVbmxo4/w6RrTJ+KM=
Subject key identifier:   3C:94:49:57:7E:2C:F0:97:0B:1E:BB:7D:7D:51:6E:9A:43:2D:64:E5
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       08CA
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/PJRJV34s8JcLHrt9fVFumkMtZOU.roa
Signing time:             Tue 31 Mar 2026 07:44:15 +0000
ROA not before:           Tue 31 Mar 2026 07:44:15 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        218.230.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 13:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2250 (0x8ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:44:15 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=3C9449577E2CF0970B1EBB7D7D516E9A432D64E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0d:60:a5:71:8f:2e:73:0a:1f:4f:37:70:37:
                    11:29:8a:f4:4e:1d:e4:b1:52:90:cd:6b:20:0f:d5:
                    e9:42:88:31:7a:a4:4b:37:c7:3b:4a:55:55:c0:16:
                    d2:a9:11:b0:ba:49:b1:0b:f4:aa:63:b7:d9:c2:e8:
                    98:37:0d:8c:19:67:5e:db:0f:a1:7f:6f:2b:f0:4a:
                    f8:9e:cb:c8:06:e7:f2:3e:5d:41:5e:29:56:1b:8e:
                    66:11:f6:f1:a4:ab:e1:1e:53:11:af:15:c2:6a:56:
                    f0:4f:40:67:93:ae:40:f0:30:4e:36:11:b9:50:c6:
                    3b:01:f4:0a:56:0a:aa:2e:78:a6:9d:07:db:fa:41:
                    c5:09:e9:ae:d5:67:78:b8:52:dc:86:03:56:36:96:
                    d6:04:eb:bb:0d:d4:6b:fc:56:9a:b9:cc:75:aa:ae:
                    31:ad:f3:ee:fd:de:f2:d0:27:5e:5f:8b:ca:3c:ed:
                    e1:b7:0e:ab:d3:bf:78:b3:a8:2e:ec:48:3a:63:3b:
                    09:99:99:d8:6a:45:cd:a5:2c:8a:3d:5b:81:51:49:
                    11:11:0b:48:5b:c9:37:55:c2:3d:d4:61:89:89:1c:
                    e6:38:0c:9d:d6:75:e2:de:03:e3:6e:1a:22:db:bf:
                    a3:db:f8:a5:27:89:a4:1e:ad:42:e1:65:b8:c8:8e:
                    85:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:94:49:57:7E:2C:F0:97:0B:1E:BB:7D:7D:51:6E:9A:43:2D:64:E5
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/PJRJV34s8JcLHrt9fVFumkMtZOU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.230.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         02:c1:34:7a:d3:f3:af:81:ab:6d:77:0e:f5:68:d8:69:b7:3f:
         60:79:13:88:3f:b3:99:ff:73:91:e0:cf:bf:7c:01:f3:17:20:
         b8:38:fb:dc:7a:72:3f:b2:00:12:29:a7:1c:54:fa:77:b0:0c:
         c7:e0:79:06:92:eb:a2:eb:6f:f8:61:dc:b7:88:b9:3f:ee:af:
         9e:1c:a0:86:af:2c:2c:e9:64:4a:fe:d1:22:95:dc:a9:19:81:
         d3:81:a3:b4:80:73:53:ae:ba:9a:97:2c:5a:f4:33:7e:5d:de:
         ab:9f:6c:7a:57:5e:53:b7:71:4c:a6:91:fe:4c:17:67:a4:07:
         01:14:d3:05:c8:4a:c9:0e:ee:33:d6:2f:48:b5:87:2f:76:01:
         78:d4:8a:40:bc:2b:1b:e6:bb:89:33:04:54:25:a9:67:c7:2f:
         f9:dd:8e:79:5b:f2:d8:57:5e:6d:60:e2:ef:1a:5b:18:9a:8b:
         f7:02:b9:98:65:44:9c:44:9f:f3:85:ad:43:62:0f:78:8e:b6:
         ed:34:ed:2c:8a:2e:61:49:1d:a3:40:b5:12:87:25:58:71:64:
         51:78:3e:5a:7b:db:95:49:44:77:a9:85:55:17:49:45:65:01:
         21:3c:ac:7c:a0:1f:68:68:65:9c:7b:8f:fa:03:84:37:60:4b:
         8d:d0:4a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:02:22 2026 by rpki-client