Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/S2tgV7ws_Vz3PjWNg_yx4vAJyF0.roa
File:                     S2tgV7ws_Vz3PjWNg_yx4vAJyF0.roa (raw, json)
Hash identifier:          kGxWyySU5JQXnyyrmc6oDcF2qrdjluU4MEq4/mNvL6w=
Subject key identifier:   4B:6B:60:57:BC:2C:FD:5C:F7:3E:35:8D:83:FC:B1:E2:F0:09:C8:5D
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       090F
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/S2tgV7ws_Vz3PjWNg_yx4vAJyF0.roa
Signing time:             Tue 31 Mar 2026 07:44:44 +0000
ROA not before:           Tue 31 Mar 2026 07:44:44 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        106.187.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2319 (0x90f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:44:44 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=4B6B6057BC2CFD5CF73E358D83FCB1E2F009C85D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bb:74:c1:fa:9c:84:07:4e:48:b3:c3:eb:0b:
                    de:2f:f7:e9:bc:15:ce:3a:6d:62:03:5d:f0:5d:68:
                    56:92:e0:49:e5:8e:26:98:33:75:8c:fd:5e:d1:2d:
                    f6:00:6c:4a:fc:e1:99:65:f3:3b:b7:4c:02:09:65:
                    09:8d:19:b3:ca:28:90:5e:6e:7f:3c:49:6b:73:42:
                    29:4a:a5:10:43:35:30:95:59:b3:de:63:e1:0d:49:
                    32:3c:74:b1:a9:c7:36:46:11:62:9c:41:55:52:e9:
                    e9:b6:5b:3a:9c:24:65:a9:13:c2:dd:fc:85:e3:80:
                    79:18:c8:46:e1:01:35:75:ca:50:ea:a1:90:dc:d0:
                    3a:bf:83:47:d2:8d:77:9b:3a:9d:27:d1:e4:02:d7:
                    1c:6f:b2:c5:6b:2e:2b:71:26:f0:ce:c9:05:ba:4b:
                    54:11:71:e5:b1:62:3c:99:90:6c:bf:10:12:00:63:
                    0b:9c:89:fa:94:42:c9:46:11:08:a4:f8:2b:69:3e:
                    1b:a5:68:3d:08:d9:ca:30:46:6c:9f:d5:93:4a:22:
                    e5:3b:a9:9c:dd:99:26:3c:ee:06:d0:46:ac:a6:e3:
                    c7:e6:b7:2e:4a:21:fd:e2:30:a0:4e:ed:4e:ff:2e:
                    e1:67:70:e9:de:0e:5d:cc:c6:a9:6f:41:01:db:81:
                    ec:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:6B:60:57:BC:2C:FD:5C:F7:3E:35:8D:83:FC:B1:E2:F0:09:C8:5D
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/S2tgV7ws_Vz3PjWNg_yx4vAJyF0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.187.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         06:e9:86:2f:e6:51:a5:bc:58:17:fa:b0:36:81:07:cc:1b:fb:
         d6:e0:18:f8:70:0b:c7:08:cb:10:34:6e:60:5e:0a:e3:da:d9:
         47:21:cd:d8:b1:f6:c5:bc:7d:90:a6:87:97:a3:c4:6d:57:1f:
         ba:79:3a:2f:5e:b2:87:23:e6:8d:28:62:2c:2c:08:62:10:56:
         a6:7b:1e:6a:bd:57:ba:c1:bf:71:37:90:e8:76:ad:ea:e2:76:
         cc:09:c4:08:f4:99:07:0b:13:a0:6e:ac:db:b3:04:26:5a:66:
         11:e2:61:ab:b7:66:83:dc:76:75:91:0e:24:9c:f1:b3:3c:58:
         ab:ed:fc:35:e1:44:4d:eb:ff:22:bf:38:dc:49:36:7d:56:14:
         15:03:26:d8:d3:54:73:f0:1d:a2:42:d0:be:1c:d5:ac:83:f8:
         9a:d9:65:28:7b:ef:1c:71:b8:a4:cf:eb:f3:3a:ef:79:26:f0:
         4e:81:51:ab:19:cd:6c:e7:21:da:de:15:2c:f6:79:66:92:49:
         23:d1:c9:90:43:65:d1:1a:d7:d6:64:d6:03:76:e3:23:5c:1b:
         2f:4f:51:bb:6f:b5:29:52:37:4a:0c:6d:5a:d0:f7:1e:b2:d7:
         1c:86:c6:3f:54:b6:3c:7a:82:7d:1b:c9:10:81:d0:0e:16:72:
         fe:17:3f:7e
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICCQ8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw
NzQ0NDRaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDRCNkI2MDU3QkMyQ0ZE
NUNGNzNFMzU4RDgzRkNCMUUyRjAwOUM4NUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDCu3TB+pyEB05Is8PrC94v9+m8Fc46bWIDXfBdaFaS4EnljiaY
M3WM/V7RLfYAbEr84Zll8zu3TAIJZQmNGbPKKJBebn88SWtzQilKpRBDNTCVWbPe
Y+ENSTI8dLGpxzZGEWKcQVVS6em2WzqcJGWpE8Ld/IXjgHkYyEbhATV1ylDqoZDc
0Dq/g0fSjXebOp0n0eQC1xxvssVrLitxJvDOyQW6S1QRceWxYjyZkGy/EBIAYwuc
ifqUQslGEQik+CtpPhulaD0I2cowRmyf1ZNKIuU7qZzdmSY87gbQRqym48fmty5K
If3iMKBO7U7/LuFncOneDl3MxqlvQQHbgex3AgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUS2tgV7ws/Vz3PjWNg/yx4vAJyF0wHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTYxL1MydGdWN3dzX1Z6M1BqV05nX3l4NHZBSnlGMC5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZqu0AwDQYJKoZIhvcNAQELBQADggEB
AAbphi/mUaW8WBf6sDaBB8wb+9bgGPhwC8cIyxA0bmBeCuPa2Uchzdix9sW8fZCm
h5ejxG1XH7p5Oi9esocj5o0oYiwsCGIQVqZ7Hmq9V7rBv3E3kOh2reridswJxAj0
mQcLE6BurNuzBCZaZhHiYau3ZoPcdnWRDiSc8bM8WKvt/DXhRE3r/yK/ONxJNn1W
FBUDJtjTVHPwHaJC0L4c1ayD+JrZZSh77xxxuKTP6/M673km8E6BUasZzWznIdre
FSz2eWaSSSPRyZBDZdEa19Zk1gN24yNcGy9PUbtvtSlSN0oMbVrQ9x6y1xyGxj9U
tjx6gn0byRCB0A4Wcv4XP34=
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:50:23 2026 by rpki-client