Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/ZlWarkSplxHMiO6-f7RIbcsV4f4.roa
File:                     ZlWarkSplxHMiO6-f7RIbcsV4f4.roa (raw, json)
Hash identifier:          7r5mXwY7HD4+d0ACcbkEdNVIm9lkacpSBJch1pxirDM=
Subject key identifier:   66:55:9A:AE:44:A9:97:11:CC:88:EE:BE:7F:B4:48:6D:CB:15:E1:FE
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       08FC
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ZlWarkSplxHMiO6-f7RIbcsV4f4.roa
Signing time:             Tue 31 Mar 2026 07:44:37 +0000
ROA not before:           Tue 31 Mar 2026 07:44:37 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        210.198.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2300 (0x8fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:44:37 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=66559AAE44A99711CC88EEBE7FB4486DCB15E1FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:5a:d7:1c:39:ff:73:d1:87:17:1d:d9:8e:be:
                    14:5d:eb:61:d9:d2:69:d8:a1:b2:c3:96:7e:f2:c0:
                    c1:20:51:58:76:37:74:20:98:45:14:e8:2d:5d:f1:
                    ac:83:f1:d7:83:34:a7:dd:a3:2e:66:89:6a:d2:05:
                    28:78:ea:46:9f:48:4c:22:38:7e:3e:67:f3:37:0c:
                    6a:ed:d3:54:ae:55:87:51:f0:1b:9c:57:89:7f:96:
                    74:2d:bd:7d:cd:76:c4:63:c0:1e:d9:28:dc:95:1f:
                    11:b7:a5:e7:5e:d6:24:5f:d3:ba:8f:e4:35:2e:70:
                    2d:5b:b7:b9:92:53:ab:0d:04:65:d9:d3:13:3c:f3:
                    fd:38:b9:1c:27:50:c7:ff:24:69:c1:67:a9:6a:2b:
                    5e:82:75:6d:05:a4:cd:06:6f:02:9b:8b:2c:c9:d0:
                    ee:28:f1:3e:02:1a:f7:af:ff:21:c6:bc:3a:07:24:
                    67:90:c0:55:c2:de:65:93:8c:67:82:ed:c4:ab:a4:
                    22:e7:b4:53:84:70:93:ee:34:13:f3:ec:03:6f:b4:
                    39:4b:ce:9e:2f:1c:af:48:3b:22:25:80:67:8c:a0:
                    96:f7:62:0a:69:e7:5e:de:42:57:1e:28:9f:f4:08:
                    20:1b:a1:02:ad:28:d6:4b:7c:ff:c6:f2:7b:10:23:
                    e8:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:55:9A:AE:44:A9:97:11:CC:88:EE:BE:7F:B4:48:6D:CB:15:E1:FE
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ZlWarkSplxHMiO6-f7RIbcsV4f4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.198.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         65:61:4e:47:f6:e5:40:f8:1c:4b:96:69:ee:20:d4:c4:25:2c:
         0e:e5:d2:16:87:1f:45:06:b4:23:cd:98:29:ae:4f:f7:13:e4:
         33:44:23:77:4b:d7:08:00:c2:99:d0:45:62:b2:37:72:5d:07:
         df:ba:e6:24:5e:58:ea:1f:9a:7c:1c:9f:f7:f3:88:e0:db:18:
         37:52:31:46:db:f4:1e:26:38:77:58:45:ff:6e:30:0a:8e:36:
         50:38:9a:ba:99:81:50:ae:9d:6f:ee:52:63:db:72:86:c2:3f:
         2f:9d:32:b8:ab:5f:b3:f5:30:28:59:9a:59:b2:96:aa:a1:dd:
         da:8b:86:46:c0:05:9a:08:e6:db:dc:f5:99:e3:ae:95:63:3f:
         07:6e:db:b1:dc:27:7d:1b:48:9f:d1:0a:2b:b1:b8:ad:dd:6f:
         36:1e:8c:ea:f7:8e:74:cb:f1:64:e4:a5:53:a9:0a:aa:57:43:
         93:c6:10:65:be:d4:58:3f:40:db:4c:bf:7c:60:9f:ee:13:1b:
         da:52:59:a4:c6:45:b0:1e:53:b6:b6:2e:9c:82:99:e6:34:e0:
         fb:d5:d8:ad:ca:e3:98:bf:3d:df:30:af:f1:67:e4:50:ff:82:
         08:48:de:24:83:51:de:88:56:3a:8c:57:50:7c:d1:e7:21:b0:
         d5:25:d1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:13:39 2026 by rpki-client