Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/St3Gc6B5OfWvxsfGEEPuXHB_kqE.roa
File:                     St3Gc6B5OfWvxsfGEEPuXHB_kqE.roa (raw, json)
Hash identifier:          5KtmePqW156f+v279AfxegJKNduvg/qVOoM9Y+pEA/c=
Subject key identifier:   4A:DD:C6:73:A0:79:39:F5:AF:C6:C7:C6:10:43:EE:5C:70:7F:92:A1
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       079C
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/St3Gc6B5OfWvxsfGEEPuXHB_kqE.roa
Signing time:             Tue 31 Mar 2026 07:41:45 +0000
ROA not before:           Tue 31 Mar 2026 07:41:45 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        111.104.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1948 (0x79c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:41:45 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=4ADDC673A07939F5AFC6C7C61043EE5C707F92A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:83:66:e4:76:cf:0e:14:b3:b4:24:db:26:5e:
                    97:45:de:f9:df:a5:ab:72:86:bc:96:11:19:22:90:
                    f9:13:08:11:74:bb:50:34:eb:3a:2b:eb:4e:21:a1:
                    5e:90:fc:13:80:b4:33:81:5d:ce:f1:10:ad:0e:a4:
                    99:4b:59:a4:81:e3:5b:d3:a7:f3:79:3c:c5:41:32:
                    04:6a:77:84:f0:9e:91:aa:59:eb:e0:0f:d9:58:6a:
                    25:77:00:91:58:bd:29:fd:bc:7b:5b:04:8e:31:45:
                    b0:4c:17:3f:d8:2c:55:a6:92:19:8e:e5:f5:4c:4c:
                    12:45:1b:01:00:92:f9:dd:f2:04:92:4c:4f:69:0b:
                    0c:6d:5e:47:4b:91:e1:2a:0b:6d:d2:b6:ee:e7:40:
                    53:e9:4f:c4:c2:31:c6:f7:00:27:7c:a8:ff:7c:f4:
                    f4:a2:aa:d2:5e:a8:84:09:b8:b1:ea:ef:af:0c:78:
                    65:3b:f0:13:b4:56:0b:e1:d5:23:0d:c3:85:4c:e9:
                    fb:a8:6f:76:79:af:58:5f:82:6a:27:50:bd:dd:ab:
                    a9:55:27:a2:0d:f3:00:72:4d:56:5d:8f:6e:ae:4a:
                    b0:a5:12:7f:03:c2:56:dd:91:b2:1b:78:61:75:24:
                    f4:e7:50:05:88:03:b4:6c:aa:40:3c:17:e6:40:0b:
                    36:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:DD:C6:73:A0:79:39:F5:AF:C6:C7:C6:10:43:EE:5C:70:7F:92:A1
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/St3Gc6B5OfWvxsfGEEPuXHB_kqE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.104.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         22:80:27:27:96:8d:63:8d:1c:2e:fe:50:bb:8d:de:19:3d:1a:
         ca:c2:05:8e:91:4c:a4:0b:ea:f5:20:9c:9b:52:20:1d:e4:f6:
         dd:06:6b:f2:a5:f8:8c:3b:73:9c:cd:11:30:8b:13:13:75:87:
         39:80:9f:58:be:02:4b:cd:94:9f:0e:37:f5:83:bb:8e:fa:eb:
         42:7d:ae:e1:a1:22:30:6a:a4:b5:30:7f:8a:94:c5:d2:83:a7:
         b6:8e:ca:a0:80:56:ca:3a:4a:99:47:67:bc:a9:01:3d:41:25:
         94:f2:de:18:6b:64:ee:d6:11:83:6c:f7:15:da:a2:1e:d9:34:
         4e:cd:51:b4:a5:02:96:47:8d:7c:d5:b7:bb:cf:8e:26:72:da:
         d7:c4:44:dc:9d:9c:9d:02:f7:5a:e2:70:a3:52:45:8a:3b:ed:
         1f:2a:5d:e1:c4:3e:39:a7:30:78:6e:0a:d4:ff:a8:64:4f:93:
         d0:f8:47:b0:e2:2c:6a:a9:dd:9f:14:96:44:45:32:c5:e6:ed:
         0e:59:a0:bc:ac:b5:c0:66:b5:e9:39:06:97:e1:e4:0b:c4:ba:
         ec:36:02:ad:26:0e:c9:bd:03:87:4b:9d:4b:55:55:39:eb:11:
         e5:05:de:29:87:d9:b4:cd:79:7f:57:b7:0c:92:71:30:3f:6c:
         ea:be:39:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:04:47 2026 by rpki-client