Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/YFl6lGIOqG8fuNIeceKfT7bsd6Q.roa
File:                     YFl6lGIOqG8fuNIeceKfT7bsd6Q.roa (raw, json)
Hash identifier:          HCeSn8utZF2N3ZSfj2lGB6XekJQY7sAOQmQ2Icd54FU=
Subject key identifier:   60:59:7A:94:62:0E:A8:6F:1F:B8:D2:1E:71:E2:9F:4F:B6:EC:77:A4
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0784
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/YFl6lGIOqG8fuNIeceKfT7bsd6Q.roa
Signing time:             Tue 31 Mar 2026 07:41:34 +0000
ROA not before:           Tue 31 Mar 2026 07:41:34 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        106.178.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1924 (0x784)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:41:34 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=60597A94620EA86F1FB8D21E71E29F4FB6EC77A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:64:28:d3:4e:d7:d1:0d:b3:c8:83:2a:f9:71:
                    9c:4d:a4:8b:13:f5:30:9a:2d:b4:3b:47:ac:66:e6:
                    14:63:45:a3:11:c7:16:4f:38:64:b8:da:12:f1:b3:
                    cc:f2:08:c2:5a:6c:06:db:b5:f5:23:06:f1:76:c4:
                    59:61:94:d6:d1:16:28:1c:71:03:9f:5d:aa:f2:27:
                    52:cd:22:f6:2d:f7:1b:fd:1a:0d:e5:1a:26:54:25:
                    b9:1f:41:84:f1:e1:1c:66:e1:bd:7b:2b:50:1f:6a:
                    99:b4:8a:c9:e8:cc:7f:51:64:85:5e:db:7a:c7:9d:
                    0c:2e:39:da:9c:02:79:7d:6c:d6:3e:7a:32:57:a9:
                    7e:1b:12:07:9d:12:01:c7:14:4d:d3:56:97:bd:2e:
                    d5:4d:c9:6a:9c:35:5f:87:33:bf:32:50:80:16:72:
                    61:fc:c2:26:d2:37:50:b0:86:75:29:60:2a:23:5c:
                    2d:cf:5f:d8:e8:72:de:28:01:c9:ca:d8:fb:e7:64:
                    ed:42:6d:c3:f9:ea:27:57:ce:c6:8c:d3:18:ce:59:
                    ea:9a:54:e2:5c:a1:fa:c4:df:89:03:bf:1f:cb:6b:
                    a0:0c:ed:eb:36:22:8f:83:e2:19:b7:eb:ad:b0:26:
                    7f:b8:bf:b3:fb:52:32:74:33:75:a3:2c:43:bf:86:
                    c3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:59:7A:94:62:0E:A8:6F:1F:B8:D2:1E:71:E2:9F:4F:B6:EC:77:A4
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/YFl6lGIOqG8fuNIeceKfT7bsd6Q.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.178.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         43:d7:7e:98:85:33:c8:9e:71:86:7c:ee:76:9a:7a:ae:a1:1d:
         29:2f:b7:8d:11:6d:99:fb:af:92:20:e6:68:b3:ec:df:24:43:
         5a:73:a4:ae:11:06:e5:69:69:57:ce:c0:a3:4c:94:0c:46:df:
         41:45:34:7e:1e:6c:76:5d:34:81:0d:91:7d:db:33:56:75:05:
         c7:5e:e7:ed:36:59:62:1e:24:d1:aa:7f:46:fc:0b:5b:8e:94:
         34:72:a2:63:78:0e:0d:bd:d0:62:d3:83:48:75:25:ad:e6:17:
         a6:b3:56:75:2b:14:a1:54:a9:f5:9e:58:2b:5a:47:81:54:63:
         78:4a:ad:22:0a:44:1c:43:91:2d:ea:8c:4b:a3:09:2f:9e:2e:
         7a:ab:c6:29:5d:31:44:45:c8:72:24:88:ef:0a:77:e2:b7:06:
         06:0a:f9:ef:2f:3d:d1:08:cc:ee:d5:73:b2:51:be:7b:2b:05:
         5c:cb:1a:a2:ae:95:8e:22:ae:e8:6a:09:ac:90:fa:29:4f:2e:
         8e:0c:a0:f9:63:83:26:5c:d7:68:e1:cd:f5:d3:8c:3d:b7:02:
         44:1e:4e:e4:e1:65:4f:f3:5a:79:cc:20:b1:72:3c:31:8a:c3:
         50:ea:c2:e2:19:3b:93:02:09:52:44:dc:81:a6:77:92:19:ce:
         0f:fa:3b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:13:36 2026 by rpki-client