Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/XhpyF1nGmmUGEpLw4TbAatOShMo.roa
File:                     XhpyF1nGmmUGEpLw4TbAatOShMo.roa (raw, json)
Hash identifier:          Y5xwbyWh3Avmk0FLOS8WoQac6JuWecLErt8pVzpiuiE=
Subject key identifier:   5E:1A:72:17:59:C6:9A:65:06:12:92:F0:E1:36:C0:6A:D3:92:84:CA
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       08BD
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/XhpyF1nGmmUGEpLw4TbAatOShMo.roa
Signing time:             Tue 31 Mar 2026 07:44:09 +0000
ROA not before:           Tue 31 Mar 2026 07:44:09 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        210.249.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2237 (0x8bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:44:09 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=5E1A721759C69A65061292F0E136C06AD39284CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fe:3a:d0:eb:cf:4d:ed:23:4a:e3:fe:79:ad:
                    f0:cb:50:00:fe:74:05:52:5f:07:e4:fd:d8:05:ea:
                    c5:93:4a:a0:83:65:e2:37:d4:7e:34:b9:ef:14:e6:
                    41:81:fa:7f:4a:e4:a2:43:a5:df:23:18:17:ee:cd:
                    52:4d:f4:24:43:1f:4b:3d:db:e2:7c:dd:25:83:67:
                    87:0d:de:d3:08:56:f5:53:82:62:3c:b8:77:5d:76:
                    02:02:c1:95:e1:56:cf:57:74:be:12:f3:16:e6:e6:
                    3d:5e:a4:3a:f7:ae:3c:bd:d8:81:5b:31:b4:f4:04:
                    90:be:27:d4:d5:5a:fa:81:8b:4e:4c:02:92:28:ab:
                    c2:d7:e1:03:eb:66:b2:ed:ad:2c:2d:0f:16:a5:d4:
                    5b:af:8f:9f:7f:0f:c6:b1:4d:b3:ca:61:eb:e2:93:
                    19:8b:8e:1d:85:cb:79:f4:29:c8:67:92:6e:c4:52:
                    7b:a6:73:61:fc:84:f6:22:92:cc:e7:97:a4:02:24:
                    a4:6b:21:67:a2:03:b8:c0:c8:70:82:5a:a5:4b:f3:
                    74:a0:9c:32:ee:da:a2:e4:d9:2d:86:9b:13:6a:10:
                    d1:75:5f:05:6e:14:02:f0:fc:e6:04:7a:70:f5:fd:
                    e1:74:1c:c9:e8:f7:9b:6a:44:17:26:2a:52:df:4b:
                    c2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:1A:72:17:59:C6:9A:65:06:12:92:F0:E1:36:C0:6A:D3:92:84:CA
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/XhpyF1nGmmUGEpLw4TbAatOShMo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.249.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:88:1e:d3:3f:ea:f3:25:cd:ab:15:f3:d9:42:d5:82:55:d7:
         8b:1c:8c:f9:eb:a0:b9:88:ce:48:72:75:46:bc:6c:0c:2a:63:
         6b:8e:37:b6:c1:b9:fb:db:53:3f:3b:2e:ea:22:24:5a:67:8b:
         d4:3d:57:77:af:d2:9e:e7:a0:fa:17:b4:c8:72:7d:64:96:c9:
         bc:9d:70:48:be:9c:8f:a7:7a:a7:35:ae:78:fa:42:3f:35:d4:
         a9:75:f7:ea:e9:92:af:49:31:2b:bd:bf:54:a9:62:35:24:77:
         2f:14:a1:8f:bc:cd:72:fa:c8:ed:76:0b:ac:3e:da:ad:05:53:
         20:d2:4e:41:e2:4e:de:21:71:49:c0:24:96:ae:c4:26:28:c9:
         b1:ba:23:d2:ef:41:d3:37:39:31:56:32:ca:cf:5d:9c:c1:3f:
         e1:46:93:d3:5e:24:1b:7c:d5:b5:36:c2:e4:2a:ac:92:05:a4:
         c2:e3:1d:9c:8c:39:4d:b1:73:ee:31:65:ea:7d:35:61:05:5e:
         0a:f7:a9:7b:c5:a8:99:bf:08:76:70:c3:e6:e0:92:fa:15:18:
         ee:5f:00:6f:dd:9f:99:24:fe:e6:9a:08:d4:fe:6e:25:5c:e8:
         e8:9d:a8:88:1d:d4:00:00:64:66:03:eb:c2:03:a2:53:a0:30:
         b6:e0:e1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:12:25 2026 by rpki-client