Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/TnjwHjDcP1-A-moWbJn0L5-h4l8.roa
File:                     TnjwHjDcP1-A-moWbJn0L5-h4l8.roa (raw, json)
Hash identifier:          yygG14krLdShcMt3IvGK2Y+fDEY4pSreUSijd4jEuV8=
Subject key identifier:   4E:78:F0:1E:30:DC:3F:5F:80:FA:6A:16:6C:99:F4:2F:9F:A1:E2:5F
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0917
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/TnjwHjDcP1-A-moWbJn0L5-h4l8.roa
Signing time:             Tue 31 Mar 2026 07:44:47 +0000
ROA not before:           Tue 31 Mar 2026 07:44:47 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        14.12.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2327 (0x917)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:44:47 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=4E78F01E30DC3F5F80FA6A166C99F42F9FA1E25F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:df:9e:d1:86:ad:6f:1a:77:08:ae:bd:bb:b9:
                    51:0f:b5:67:cf:4f:55:a2:20:28:f8:c1:2e:be:01:
                    08:38:4f:4c:84:e3:a2:92:6e:86:f4:c0:b6:63:09:
                    2d:71:bf:fe:3d:6c:2a:41:c9:2b:73:6f:d1:77:7f:
                    21:e8:66:48:82:cd:ba:f3:b0:de:d3:20:74:41:1b:
                    1e:c9:c0:b4:12:f2:82:cd:2e:f9:43:c2:09:98:f8:
                    13:6f:22:e7:0b:fc:72:c6:0c:b7:14:64:9e:81:29:
                    03:1b:24:d1:a1:8b:19:d9:f8:7c:e4:c0:b5:9a:08:
                    5d:42:03:bf:88:32:8a:5c:e8:1b:f6:6b:e1:64:15:
                    b7:8d:8e:98:31:d1:ac:85:d2:5c:2d:2a:7b:7c:d2:
                    44:cf:36:ba:f2:40:c8:2d:43:20:2c:7e:07:ac:57:
                    c5:b5:83:7d:e1:4e:d2:75:32:6b:8d:d8:54:0c:92:
                    18:44:f7:f8:48:cb:c1:ba:7e:f4:47:9c:63:5f:4b:
                    a2:c0:d2:13:88:fc:6a:84:e3:d1:b8:4a:b8:69:f7:
                    f4:f1:cb:58:8d:ca:b5:01:9d:60:ff:46:b1:59:7c:
                    ad:83:9a:1d:80:9d:4f:40:e6:81:48:84:56:9b:21:
                    02:f5:8b:0c:f6:83:03:fb:74:d1:81:d8:37:7c:d7:
                    d1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:78:F0:1E:30:DC:3F:5F:80:FA:6A:16:6C:99:F4:2F:9F:A1:E2:5F
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/TnjwHjDcP1-A-moWbJn0L5-h4l8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.12.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         a8:cb:d9:1c:98:0b:14:59:89:e2:c2:fd:e2:31:9e:02:54:14:
         16:b0:e4:4f:d6:48:41:c8:69:9f:8c:38:42:30:92:fd:4a:d0:
         5a:3b:b7:dc:fa:72:9f:ed:17:33:fa:c3:65:41:1e:12:64:d3:
         47:26:7c:b8:fe:38:0e:bd:61:a7:04:df:b3:31:3f:33:8d:52:
         de:ce:0f:d8:b6:be:4a:41:1e:b7:c2:25:9c:60:bb:a2:1f:7e:
         4b:85:6f:3d:9f:f1:0f:ad:46:a6:d0:47:fb:fd:f8:6d:32:4f:
         89:3a:b5:59:3c:30:70:e1:0e:99:f3:56:b0:a9:89:f5:4f:cb:
         e0:ba:ec:80:3e:15:fd:c3:ca:7b:d9:46:e3:5a:ae:7d:14:9b:
         d8:8c:eb:48:b5:d2:e6:9f:13:06:9c:e6:eb:a7:48:ea:f0:da:
         a8:e7:eb:28:a1:5d:87:ed:e8:eb:e2:22:6a:15:92:9f:dc:66:
         b8:4a:a3:3b:69:99:8e:26:1b:22:75:06:ee:bd:f2:a9:a5:41:
         40:24:94:5c:52:0d:55:d3:19:cd:a2:37:1c:99:12:d8:72:a3:
         2f:e2:fb:2d:98:52:d1:80:99:1d:05:4f:1c:c4:59:42:60:cd:
         0b:62:7a:6d:41:61:dc:9a:87:ac:54:07:8d:8e:0f:9a:5e:4e:
         78:8d:ab:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:42 2026 by rpki-client