Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/YomPOu4fm_sKJPnmQ3AeRbu2KiA.roa
File:                     YomPOu4fm_sKJPnmQ3AeRbu2KiA.roa (raw, json)
Hash identifier:          8e+pXEQcI4wXwNgeNPRqWKWoJlC+Jr8Q7ktkYSDW+cQ=
Subject key identifier:   62:89:8F:3A:EE:1F:9B:FB:0A:24:F9:E6:43:70:1E:45:BB:B6:2A:20
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0922
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/YomPOu4fm_sKJPnmQ3AeRbu2KiA.roa
Signing time:             Tue 31 Mar 2026 07:44:52 +0000
ROA not before:           Tue 31 Mar 2026 07:44:52 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     24279
IP address blocks:        14.15.64.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2338 (0x922)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:44:52 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=62898F3AEE1F9BFB0A24F9E643701E45BBB62A20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:41:34:4e:bd:48:5e:aa:98:ac:e9:da:fe:55:
                    52:45:be:aa:2d:34:ed:ca:a2:1a:5c:d4:41:d7:30:
                    3c:09:69:ad:19:65:3d:a6:25:0b:40:2c:b4:e8:9f:
                    ec:b4:cd:d2:ef:18:c5:fb:38:d7:a3:7e:b6:48:3e:
                    0c:7a:d4:49:da:df:ee:8d:51:c6:a9:ea:6d:1c:a6:
                    fe:38:ca:9e:f4:61:14:f6:a0:d3:7c:b5:85:3d:c2:
                    ae:4d:fd:c4:36:75:9c:7a:ed:d4:0c:7f:41:bc:d7:
                    d8:7d:2d:c0:2c:4c:e8:cf:ad:4c:d1:6a:4c:bb:3a:
                    37:88:62:17:10:e8:2d:67:4f:ec:ce:29:8d:61:77:
                    94:2b:ea:ef:a2:5c:21:37:7a:ce:54:3d:7b:5d:5f:
                    b3:8b:7a:74:16:49:39:3a:93:15:a2:c4:01:d1:90:
                    58:4c:6c:d9:3f:fe:9d:57:2e:4d:2f:28:95:d5:81:
                    16:2e:44:0d:34:5a:d7:c5:fb:c1:bc:d6:bb:28:b3:
                    dd:0b:42:ff:69:c0:12:3d:5a:9e:ba:2a:00:99:1c:
                    bf:2d:86:75:b4:9e:c7:64:7f:7d:e4:34:1c:d3:83:
                    d7:6d:a9:64:38:4b:ae:d1:0d:52:a4:85:72:85:f5:
                    1e:d7:9a:ee:85:07:0f:08:ba:92:33:25:a2:b6:8f:
                    3f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:89:8F:3A:EE:1F:9B:FB:0A:24:F9:E6:43:70:1E:45:BB:B6:2A:20
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/YomPOu4fm_sKJPnmQ3AeRbu2KiA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.15.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         67:2c:2e:97:db:ef:12:80:ba:0b:3f:6d:ec:a4:c5:70:d7:14:
         b6:28:c7:10:e0:b2:4e:1c:84:ae:dc:7b:b1:1f:50:af:b4:58:
         22:b1:d2:7a:44:ed:c5:97:3e:b1:89:a9:fe:0f:41:da:ad:ed:
         a3:5c:ca:62:45:af:fc:34:ed:b5:2d:c6:9d:a8:a4:97:91:b0:
         21:eb:6d:1a:71:36:e8:82:8f:ae:53:20:f5:c8:ee:46:42:5b:
         4d:ec:c4:b4:9a:86:97:df:ec:72:f9:19:e9:ae:06:a4:f6:5c:
         43:a0:98:19:f0:54:f5:c5:88:e5:e6:76:30:5d:7d:0a:e0:07:
         bf:2b:df:5d:3b:43:4a:73:fe:77:14:5b:c0:32:ee:87:b3:81:
         bf:8e:00:1c:ac:10:dd:bf:ad:f3:6a:80:d7:fa:f8:e7:31:27:
         d1:9b:ba:7b:6e:81:a9:8d:eb:cd:a8:db:b1:8b:1a:e7:7f:a9:
         4e:2b:63:02:b2:1d:dc:08:fd:35:59:26:a8:6b:dd:2b:2a:14:
         6c:1b:6c:be:ea:20:88:55:b8:07:63:9c:de:7b:31:ac:c0:6a:
         4c:1c:bd:38:f9:b9:5f:ff:d0:dc:0d:3b:17:c3:6f:22:ec:44:
         82:63:5b:4e:f4:60:b5:2d:9e:9e:c4:5d:38:6f:b6:b2:0e:95:
         65:50:cc:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:43:24 2026 by rpki-client