Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/Qmi365RnBKCz43lXPms_wKixsAA.roa
File:                     Qmi365RnBKCz43lXPms_wKixsAA.roa (raw, json)
Hash identifier:          5Yp7hheDhDc7PTiAPTl0I4dKIhINyoCXQOjZ4VOIqs0=
Subject key identifier:   42:68:B7:EB:94:67:04:A0:B3:E3:79:57:3E:6B:3F:C0:A8:B1:B0:00
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       07E7
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Qmi365RnBKCz43lXPms_wKixsAA.roa
Signing time:             Tue 31 Mar 2026 07:42:23 +0000
ROA not before:           Tue 31 Mar 2026 07:42:23 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        106.180.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2023 (0x7e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:42:23 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=4268B7EB946704A0B3E379573E6B3FC0A8B1B000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1f:6a:b7:59:2a:36:3a:b5:50:f3:58:fb:32:
                    02:29:2b:ad:f2:06:67:46:04:61:17:ae:85:e1:5d:
                    42:f4:26:5c:20:6e:aa:a7:57:90:4c:d2:d0:31:69:
                    8c:f4:f9:c2:30:5e:cc:15:c6:d0:8b:c7:30:2b:76:
                    b2:98:64:65:df:3b:6b:9f:5d:da:aa:30:c0:ee:53:
                    00:f1:1a:d0:ec:96:49:28:44:5e:87:ba:b2:8d:27:
                    12:7a:ad:5a:0d:cc:52:17:e0:b1:35:15:7b:25:9f:
                    80:df:33:01:aa:6f:c9:c9:1a:34:ac:6c:59:dd:70:
                    ed:cc:a0:51:1f:ba:b5:1b:47:39:ee:75:32:c6:ec:
                    7a:4e:ea:15:91:fc:61:79:33:f6:08:77:06:ae:6b:
                    11:02:c5:e6:5e:eb:74:a0:d4:90:14:00:6f:7d:35:
                    c8:38:85:11:b2:4f:97:5d:3c:79:1e:79:9b:da:c9:
                    79:b9:77:f3:e6:dc:5f:4e:9a:bd:52:c5:46:03:6a:
                    0c:dd:21:2d:f1:0c:67:4d:80:ab:8c:42:70:a4:62:
                    8a:f3:e7:b2:55:2a:c1:20:11:93:fd:52:e5:57:4c:
                    9b:e8:1f:6c:2c:c7:15:41:1b:5f:dc:b0:72:09:d9:
                    e9:f0:59:3e:3b:b8:8a:cb:e0:d9:6c:11:d7:54:4b:
                    57:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:68:B7:EB:94:67:04:A0:B3:E3:79:57:3E:6B:3F:C0:A8:B1:B0:00
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Qmi365RnBKCz43lXPms_wKixsAA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.180.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         20:c2:f2:14:2b:e1:8b:63:2c:73:a3:27:fa:09:c6:32:8e:b1:
         e8:a0:a2:7a:a4:02:9b:96:5d:f1:ae:b5:66:ca:60:a0:6e:89:
         b4:d4:6b:34:68:41:5f:6f:da:36:f5:12:f4:4b:bc:f5:e7:23:
         45:4f:b2:9b:dc:01:a2:98:f2:6b:44:11:91:b5:3a:16:67:06:
         aa:2d:da:0a:89:39:4a:15:a3:3a:a4:a9:83:e0:f2:1a:7f:b5:
         24:b2:81:1a:54:08:a2:be:f6:56:68:88:cc:ce:d0:7a:fa:bb:
         6a:ec:13:da:55:2c:e1:91:7c:71:3e:fe:80:04:a7:30:c8:30:
         6f:43:5b:28:58:77:87:6b:99:04:c8:21:d6:67:8d:db:1c:6b:
         6a:ba:5a:4e:d2:12:c3:53:46:3e:97:97:71:2d:f3:01:35:8b:
         69:8c:b1:72:46:c1:7f:41:e3:1e:a6:be:99:4a:27:85:ca:6f:
         8d:5f:c9:db:e4:f7:51:91:c1:d3:cc:e3:f9:64:e8:0c:ac:57:
         71:30:56:eb:2e:34:18:37:cd:7c:d5:a5:65:f1:51:5f:74:fc:
         46:2e:be:97:c8:63:a3:48:80:ea:1b:30:51:2b:70:0b:50:da:
         73:b6:10:2d:65:dd:b4:9e:ae:b9:7d:bc:80:04:08:b6:ca:e9:
         e7:1c:4e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:59:41 2026 by rpki-client