Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/YDjNp_e053cgo87p3TrWaqU234k.roa
File:                     YDjNp_e053cgo87p3TrWaqU234k.roa (raw, json)
Hash identifier:          Vy8lxM7nlwl1bnJzk99EcjcidhDxCH0PmDDJqMsknj8=
Subject key identifier:   60:38:CD:A7:F7:B4:E7:77:20:A3:CE:E9:DD:3A:D6:6A:A5:36:DF:89
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       07D2
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/YDjNp_e053cgo87p3TrWaqU234k.roa
Signing time:             Tue 31 Mar 2026 07:42:12 +0000
ROA not before:           Tue 31 Mar 2026 07:42:12 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        59.139.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2002 (0x7d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:42:12 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=6038CDA7F7B4E77720A3CEE9DD3AD66AA536DF89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4c:1e:d5:c6:63:a8:d5:5f:7e:df:2f:a7:b5:
                    62:9d:92:b5:88:84:a9:17:24:1f:ab:37:71:d6:aa:
                    d3:87:3e:fe:1b:36:53:84:94:cc:5d:fc:ac:71:5c:
                    2f:eb:84:9b:d4:39:6b:a2:2f:31:2d:f0:9c:9d:62:
                    13:75:b6:0e:f1:72:a1:7f:2c:4e:32:6b:c9:ff:b7:
                    fe:1a:15:c5:fd:7c:26:97:b5:59:fc:06:1d:88:30:
                    1a:26:9b:54:64:fb:6a:98:0b:e5:35:16:a4:0e:74:
                    46:cc:e1:04:4b:f2:2a:82:80:dc:b9:58:aa:2e:24:
                    fd:2b:f1:85:82:1f:97:97:ab:b7:cf:f6:b7:10:47:
                    42:02:06:6a:27:53:49:ed:ae:e1:28:b8:e9:6b:39:
                    98:77:6b:c6:f2:c4:50:f5:e7:2d:d5:19:04:b5:26:
                    b5:56:c4:29:4d:2e:e2:e8:b5:e4:50:62:7f:5b:c4:
                    a5:88:fc:48:50:29:14:f7:69:53:72:5f:52:00:f3:
                    cd:cc:61:fa:66:0e:2f:59:aa:37:cf:16:c5:81:04:
                    26:e7:27:ab:ad:32:4d:bb:0f:56:6a:b4:16:64:9e:
                    32:d5:e7:9b:e1:af:89:82:04:94:97:81:a1:69:29:
                    db:22:5e:23:09:e5:8b:26:c4:d8:e1:94:fd:49:97:
                    bb:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:38:CD:A7:F7:B4:E7:77:20:A3:CE:E9:DD:3A:D6:6A:A5:36:DF:89
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/YDjNp_e053cgo87p3TrWaqU234k.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.139.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b5:51:51:76:cd:3f:b5:eb:2d:09:aa:01:de:ff:93:bd:28:1c:
         0b:f3:8f:ba:8b:9d:b9:f9:4c:3f:4f:8f:07:5b:ad:b4:da:0c:
         20:43:f9:78:ca:4b:e9:94:46:d4:dc:93:36:a1:20:0f:82:a9:
         ee:f9:23:db:4e:e0:67:f9:54:1e:a3:27:10:03:4d:46:2b:eb:
         28:83:3f:82:e0:fe:ee:f3:0d:8e:2f:7b:32:ab:e3:66:e4:c9:
         d2:53:ef:93:00:2f:63:72:a2:f2:45:48:e8:a8:62:c7:88:12:
         46:18:8a:f9:3b:54:e3:32:2f:67:e2:b4:c9:9b:fa:02:ec:b1:
         c9:0c:68:92:1a:3d:aa:6d:b7:cf:1c:d5:52:a5:6b:5d:3b:56:
         25:26:f1:ec:30:d1:5b:db:1c:5e:0b:1b:9b:1b:62:8e:df:d7:
         17:f5:72:b3:48:2c:ac:67:f7:36:b9:78:a8:b4:f6:80:44:b3:
         21:12:b7:d3:46:9d:37:55:a7:ea:8c:fc:b3:43:77:a2:78:9b:
         f5:75:06:7b:06:aa:b4:b1:c0:dd:23:43:58:fc:ce:20:44:de:
         38:ba:d1:f2:87:d9:05:df:20:4c:15:01:59:b4:cb:8e:43:11:
         16:11:8c:ed:37:74:2f:8f:e0:27:f1:95:6e:38:df:52:da:17:
         26:1d:1a:61
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgICB9IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw
NzQyMTJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDYwMzhDREE3RjdCNEU3
NzcyMEEzQ0VFOUREM0FENjZBQTUzNkRGODkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDKTB7VxmOo1V9+3y+ntWKdkrWIhKkXJB+rN3HWqtOHPv4bNlOE
lMxd/KxxXC/rhJvUOWuiLzEt8JydYhN1tg7xcqF/LE4ya8n/t/4aFcX9fCaXtVn8
Bh2IMBomm1Rk+2qYC+U1FqQOdEbM4QRL8iqCgNy5WKouJP0r8YWCH5eXq7fP9rcQ
R0ICBmonU0ntruEouOlrOZh3a8byxFD15y3VGQS1JrVWxClNLuLoteRQYn9bxKWI
/EhQKRT3aVNyX1IA883MYfpmDi9ZqjfPFsWBBCbnJ6utMk27D1ZqtBZknjLV55vh
r4mCBJSXgaFpKdsiXiMJ5YsmxNjhlP1Jl7ufAgMBAAGjggHYMIIB1DAdBgNVHQ4E
FgQUYDjNp/e053cgo87p3TrWaqU234kwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTYxL1lEak5wX2UwNTNjZ284N3AzVHJXYXFVMjM0ay5yb2EwHgYI
KwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwA7izANBgkqhkiG9w0BAQsFAAOCAQEA
tVFRds0/testCaoB3v+TvSgcC/OPuouduflMP0+PB1uttNoMIEP5eMpL6ZRG1NyT
NqEgD4Kp7vkj207gZ/lUHqMnEANNRivrKIM/guD+7vMNji97MqvjZuTJ0lPvkwAv
Y3Ki8kVI6Khix4gSRhiK+TtU4zIvZ+K0yZv6AuyxyQxokho9qm23zxzVUqVrXTtW
JSbx7DDRW9scXgsbmxtijt/XF/Vys0gsrGf3Nrl4qLT2gESzIRK300adN1Wn6oz8
s0N3onib9XUGewaqtLHA3SNDWPzOIETeOLrR8ofZBd8gTBUBWbTLjkMRFhGM7Td0
L4/gJ/GVbjjfUtoXJh0aYQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:33 2026 by rpki-client