Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/XpE59Tc5z8UMcxp_trcBoS9JjfY.roa
File:                     XpE59Tc5z8UMcxp_trcBoS9JjfY.roa (raw, json)
Hash identifier:          Jdteidp3eM1PhDvrnFFKn7DdysR99IIGwi1ikAvI/RQ=
Subject key identifier:   5E:91:39:F5:37:39:CF:C5:0C:73:1A:7F:B6:B7:01:A1:2F:49:8D:F6
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       07CC
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/XpE59Tc5z8UMcxp_trcBoS9JjfY.roa
Signing time:             Tue 31 Mar 2026 07:42:09 +0000
ROA not before:           Tue 31 Mar 2026 07:42:09 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        106.185.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1996 (0x7cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:42:09 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=5E9139F53739CFC50C731A7FB6B701A12F498DF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:91:cd:e9:b4:11:72:6f:4a:42:8e:77:f4:b0:
                    c5:f8:ee:96:69:b9:f0:ee:94:c4:e4:48:47:6e:26:
                    8e:a0:af:70:0c:74:72:df:d5:ce:78:9c:d3:fa:1d:
                    6e:d2:29:90:46:08:93:12:5d:46:1a:b5:cd:28:42:
                    22:0c:bd:28:ac:37:07:c6:b4:d1:43:6b:88:0b:3d:
                    b7:f6:60:e4:c0:e0:47:5e:dc:53:f9:97:02:13:d4:
                    1a:83:88:cb:17:6c:90:7b:ea:54:ec:57:81:eb:1d:
                    3f:81:be:70:7c:7f:cc:64:29:2d:ef:72:00:a6:44:
                    27:c0:58:93:9f:b4:cf:f8:af:a3:65:3f:92:32:f4:
                    df:97:a0:59:32:e6:15:9f:0b:6c:50:96:0b:49:29:
                    23:67:39:6c:fb:ce:b6:96:04:db:50:68:98:11:72:
                    7d:87:4b:bf:87:3b:06:b7:dc:cd:b3:41:3a:04:66:
                    5b:e3:ed:6a:9d:24:29:f1:86:9c:0d:ee:a5:d4:84:
                    7e:56:cb:eb:82:2d:63:10:11:56:dc:fd:82:28:b2:
                    b6:46:17:1c:ea:84:89:c0:27:cf:a7:4a:cc:68:f9:
                    bd:b4:20:6f:6f:38:9d:20:df:fa:6e:95:d2:63:e4:
                    3e:8f:ff:e1:9e:de:46:f1:54:47:25:89:99:aa:12:
                    18:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:91:39:F5:37:39:CF:C5:0C:73:1A:7F:B6:B7:01:A1:2F:49:8D:F6
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/XpE59Tc5z8UMcxp_trcBoS9JjfY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.185.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         40:73:92:fe:0a:9a:a8:28:2e:96:9f:08:87:10:e8:41:e1:1c:
         d4:94:24:87:33:62:ca:33:8f:8d:1d:92:81:15:5a:4e:f4:2a:
         d5:7d:b9:8a:2d:3d:20:d8:27:16:c4:ad:5c:1d:e6:42:d0:8d:
         65:51:29:83:15:a7:05:37:01:a2:69:d9:4d:1a:c2:ec:ca:a9:
         8e:50:87:83:d6:0b:b8:8f:98:8c:0c:a9:98:88:f9:23:c9:72:
         6a:d6:16:59:a1:ca:99:e8:63:4b:24:53:37:7e:48:9b:c1:c6:
         dc:2e:88:3c:45:05:c4:97:4e:61:ed:70:92:25:56:f1:55:6a:
         da:25:dc:11:97:04:41:85:c1:f3:ab:e7:4c:e3:a6:f7:16:d7:
         f8:0b:1c:a5:a8:1a:cd:0e:0a:a0:37:3b:40:35:6a:3a:ab:53:
         fb:38:0a:a9:2d:3e:56:77:f2:f6:65:65:1c:7e:b9:95:dc:31:
         21:ee:59:a3:47:c6:5a:c7:ef:a7:69:fb:f7:f9:16:9a:bc:58:
         35:42:20:d9:02:cc:aa:fe:1b:47:ac:da:80:06:26:09:5e:28:
         dd:6b:d4:42:aa:5d:f3:40:34:24:ce:53:d6:64:ce:6f:a3:5f:
         8a:51:bb:93:a0:4b:35:c0:89:4a:3b:7c:12:fe:b9:80:a0:4c:
         3c:97:fe:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:05:36 2026 by rpki-client