Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/QbqljneRCe6aptRWVVXi26oziJQ.roa
File:                     QbqljneRCe6aptRWVVXi26oziJQ.roa (raw, json)
Hash identifier:          P3YO/DZ0+6fMx7GT9aydcwyHRqvUzN3QkMFtinoOuTA=
Subject key identifier:   41:BA:A5:8E:77:91:09:EE:9A:A6:D4:56:55:55:E2:DB:AA:33:88:94
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       07D1
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/QbqljneRCe6aptRWVVXi26oziJQ.roa
Signing time:             Tue 31 Mar 2026 07:42:12 +0000
ROA not before:           Tue 31 Mar 2026 07:42:12 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        175.132.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2001 (0x7d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:42:12 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=41BAA58E779109EE9AA6D4565555E2DBAA338894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cf:41:9b:81:41:9e:88:e2:d5:e3:37:94:4b:
                    56:0c:d3:bc:e7:00:8a:ef:15:a0:06:9d:51:bc:12:
                    fc:0f:eb:11:d0:73:4c:8f:dd:e1:94:20:5f:7c:ea:
                    22:eb:df:40:66:0c:08:f4:da:4f:2f:92:cc:d3:06:
                    26:f2:0e:26:6e:a0:15:12:c0:1a:d6:3b:5f:bb:71:
                    08:32:a4:af:e2:27:32:77:4f:1a:cb:66:a5:61:ce:
                    7c:98:8b:e9:eb:70:d9:3c:13:89:cf:ae:78:d7:3b:
                    fd:fc:1f:51:ef:a7:35:80:1a:29:fc:08:30:7e:5f:
                    82:b1:2c:6e:d3:33:05:71:e9:f3:3e:6a:a5:df:b8:
                    c7:81:18:8d:6c:f2:25:36:fa:3c:e5:d8:c8:5c:78:
                    b3:77:13:cf:ea:62:b8:9b:5d:c8:ad:e1:24:ef:a3:
                    f5:14:83:92:c4:70:85:5e:61:71:3d:07:cb:f4:96:
                    90:ea:63:5c:e7:49:bb:49:f9:6a:30:5f:83:01:cf:
                    19:76:ab:97:b0:01:1b:94:77:85:3e:20:99:f8:c7:
                    1f:9e:3b:bb:a4:3a:62:c3:01:70:b1:5c:64:56:ab:
                    06:c2:63:aa:66:33:8e:e6:4b:31:60:07:0f:31:bb:
                    24:ef:04:8d:92:09:44:92:02:9c:1e:06:ee:98:b4:
                    25:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:BA:A5:8E:77:91:09:EE:9A:A6:D4:56:55:55:E2:DB:AA:33:88:94
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/QbqljneRCe6aptRWVVXi26oziJQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.132.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         24:f2:72:87:ff:03:46:f4:4c:df:9f:06:bc:9d:52:e5:c7:1f:
         cd:8d:ed:1f:ea:b8:30:fc:39:82:24:9e:67:e2:a0:bd:b6:6f:
         03:06:9f:e5:1d:ad:f0:81:ab:fc:5c:09:08:22:03:d0:80:70:
         a6:dd:ab:09:26:6c:81:a9:f9:6a:f6:ad:f6:7b:b0:4e:aa:bb:
         12:68:61:af:8d:6c:2b:24:90:6f:7f:99:28:d6:a8:c3:f5:da:
         14:8d:da:f8:1e:ab:e0:58:39:ff:39:a5:94:15:1f:bc:78:3c:
         cd:53:05:be:38:a1:04:a4:f1:33:81:b9:14:57:fe:ee:e1:1e:
         55:5b:d2:4e:9c:cc:10:7d:11:e5:f1:df:8c:e7:41:db:57:29:
         73:44:24:f4:ae:b9:a6:35:3e:09:f2:ef:5a:e4:12:d1:a2:8b:
         02:97:15:d0:15:da:c4:bb:f2:0d:d6:21:32:4d:f6:84:5f:33:
         11:9c:29:d5:e5:5c:fa:78:21:fb:43:80:78:a1:ec:0b:c9:c3:
         1a:73:df:89:36:16:6f:d0:a6:b1:7d:4c:58:e6:9a:13:fb:1f:
         57:6f:9b:3d:50:89:80:20:b1:33:14:13:6c:c2:99:fc:3e:06:
         77:99:8e:e9:6e:39:e9:07:7d:b9:5f:89:d1:59:06:81:52:3f:
         d3:ca:69:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:13:47 2026 by rpki-client