Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/Ska3QrsFmrwpHDYzRQtE-uv1ajA.roa
File:                     Ska3QrsFmrwpHDYzRQtE-uv1ajA.roa (raw, json)
Hash identifier:          CZKxcimr78AUH6czDntZNJOQG+DV8+mtai1yOFvSF/A=
Subject key identifier:   4A:46:B7:42:BB:05:9A:BC:29:1C:36:33:45:0B:44:FA:EB:F5:6A:30
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       082D
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Ska3QrsFmrwpHDYzRQtE-uv1ajA.roa
Signing time:             Tue 31 Mar 2026 07:42:56 +0000
ROA not before:           Tue 31 Mar 2026 07:42:56 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        114.22.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2093 (0x82d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:42:56 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=4A46B742BB059ABC291C3633450B44FAEBF56A30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e0:5b:e4:ce:a0:1c:aa:ab:59:a1:b4:0d:71:
                    11:f7:1d:db:06:20:eb:60:24:a7:85:13:1a:83:2c:
                    96:4f:95:02:30:ae:2d:23:9e:b7:a2:04:71:b3:c1:
                    29:24:c5:d7:e6:b6:46:33:4e:7f:63:c9:21:1a:df:
                    34:e0:2f:fa:e3:a4:83:23:fb:34:9b:7d:42:e7:79:
                    98:90:72:be:da:a5:a5:e1:5f:a1:38:a7:5a:f1:73:
                    22:c6:97:02:91:09:72:da:dc:e5:5e:b4:82:0f:10:
                    02:f6:e6:4c:fd:92:e4:db:c6:30:30:94:f6:e9:c4:
                    00:1f:0b:b6:ea:43:9f:5d:86:5b:f2:bf:97:77:cc:
                    8f:cd:f6:28:ef:6f:85:51:eb:74:e2:05:90:6f:d9:
                    7e:f5:62:54:4b:ab:9e:b9:e4:a5:83:f4:c8:11:76:
                    f1:af:09:27:b0:84:aa:44:79:1e:a5:57:e1:33:fa:
                    53:56:a4:81:8d:d7:31:ec:7f:bb:8d:20:d5:1a:cd:
                    fa:12:92:21:72:5d:01:6c:f3:87:50:77:2d:19:81:
                    af:56:4c:ea:10:3c:c5:d8:03:7d:4e:0f:b0:06:84:
                    c6:62:04:fc:04:28:01:03:f7:07:e0:62:bb:b3:8f:
                    45:4c:85:f5:2e:18:f9:b8:a1:59:68:94:a4:ac:7b:
                    85:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:46:B7:42:BB:05:9A:BC:29:1C:36:33:45:0B:44:FA:EB:F5:6A:30
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Ska3QrsFmrwpHDYzRQtE-uv1ajA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.22.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b3:06:34:ca:9e:a7:a7:0d:06:a5:5f:d1:11:ef:38:db:d6:1d:
         65:cc:63:7c:4a:3f:e7:d0:a5:9e:c5:43:95:9d:98:0f:e3:41:
         49:d1:47:24:a9:f8:c2:39:f9:99:02:39:61:78:4c:a7:b2:66:
         72:3f:f8:1d:8c:86:83:ac:20:7e:ce:a9:ff:0b:5d:78:2d:de:
         ce:cf:85:55:7b:c4:66:19:9a:ec:30:39:7f:ba:69:f1:b6:dc:
         b2:d7:74:be:ad:bf:3c:39:19:ca:bc:28:30:df:1b:60:ac:fa:
         1d:11:18:85:da:33:70:43:af:10:4e:e9:7f:77:3d:66:e8:11:
         ba:9e:d3:75:ec:93:ee:e0:5b:18:f1:33:df:63:b9:1a:33:d3:
         54:53:9b:0b:ef:43:35:f3:42:fd:a1:24:16:d5:a6:f2:d2:ce:
         b8:ea:5c:22:ee:07:3a:ff:44:91:c0:83:80:55:e9:7e:82:ae:
         90:c8:81:4b:58:37:c5:5b:8b:c7:db:cc:97:8f:c8:3d:37:02:
         91:74:91:97:66:e8:62:bc:9d:2c:1d:62:4c:d5:08:2a:fa:cc:
         fb:fe:20:5b:97:24:44:af:77:79:9e:f4:95:6d:fb:88:b7:3a:
         eb:79:37:5c:8b:91:7b:8e:26:b2:fe:d1:57:53:86:97:94:0a:
         aa:7c:3a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:47 2026 by rpki-client