Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/ahUIVQS5Xi1efDKkJNzz4Ls-_V8.roa
File:                     ahUIVQS5Xi1efDKkJNzz4Ls-_V8.roa (raw, json)
Hash identifier:          21xoRmHmDMu9cP+zrs7KCxgLdU4a4HMBnDSQ6SMlahw=
Subject key identifier:   6A:15:08:55:04:B9:5E:2D:5E:7C:32:A4:24:DC:F3:E0:BB:3E:FD:5F
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       077D
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ahUIVQS5Xi1efDKkJNzz4Ls-_V8.roa
Signing time:             Tue 31 Mar 2026 07:41:32 +0000
ROA not before:           Tue 31 Mar 2026 07:41:32 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        106.190.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1917 (0x77d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:41:32 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=6A15085504B95E2D5E7C32A424DCF3E0BB3EFD5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7b:6d:f0:3d:17:c9:6c:72:63:31:36:cc:05:
                    34:62:f4:74:5d:0d:22:1e:18:bf:f4:3e:cb:69:36:
                    6a:50:20:04:d7:0a:b2:db:41:df:95:3c:ef:0e:12:
                    e7:eb:aa:84:f5:5f:f3:ef:f7:4a:9a:56:9d:34:5f:
                    d8:f9:cd:8b:96:aa:2a:81:02:f3:77:da:7f:79:a3:
                    22:ce:be:64:61:4f:1d:f4:08:f0:d3:ad:02:fe:95:
                    50:a2:43:53:a4:b9:35:d4:88:68:c1:4e:f5:d9:23:
                    f5:6e:d3:f8:a6:57:3e:79:b6:b6:2e:de:34:f8:0d:
                    2d:34:33:39:59:31:c8:6d:ac:da:af:0b:4c:bd:e6:
                    78:50:90:6b:49:53:8b:d6:e2:6a:a0:2f:10:ab:c3:
                    02:f5:49:e8:6e:1d:10:83:0b:d9:5f:88:dc:71:44:
                    c8:af:ba:85:8e:26:e0:6c:42:28:e9:e6:76:b4:e2:
                    0e:d2:2b:4e:58:b9:71:1f:f3:c3:92:d1:e4:91:aa:
                    a9:b5:43:e6:b9:37:cd:32:92:eb:25:7b:ca:07:06:
                    96:47:58:af:80:f9:6b:db:21:7d:6d:57:dc:8e:0f:
                    2f:c6:47:cf:13:d6:c6:b1:ff:e6:d7:85:93:6a:f5:
                    ca:5f:ff:ac:1f:a4:33:09:39:d3:29:4a:63:c4:77:
                    b1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:15:08:55:04:B9:5E:2D:5E:7C:32:A4:24:DC:F3:E0:BB:3E:FD:5F
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ahUIVQS5Xi1efDKkJNzz4Ls-_V8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.190.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         55:38:13:69:47:2f:c7:94:8a:13:8a:e2:91:59:72:8f:88:e0:
         fe:20:97:2c:8a:26:4d:7f:23:6f:32:9d:64:53:c4:e0:4a:ea:
         6f:18:91:0f:57:01:9d:75:f3:59:d3:29:ea:e7:66:97:a4:62:
         68:a2:20:0f:37:28:aa:ba:0c:9c:0a:05:5f:12:3a:a8:85:d7:
         f8:6d:b7:53:b9:09:b6:42:25:59:45:7d:5d:28:46:fb:84:80:
         14:9f:2d:fb:e9:10:7c:da:b2:2f:d6:61:40:f9:d7:9e:d3:36:
         bc:5a:ee:48:80:d0:ba:4c:f5:9e:43:1d:1a:2f:eb:f7:44:7b:
         02:2d:41:a1:bb:23:9b:69:0d:fc:c4:ff:1b:ba:c7:df:d8:89:
         69:19:20:55:8d:87:cc:8a:d5:0b:68:be:12:4c:f9:92:99:e9:
         83:c4:73:7b:cc:56:43:f6:04:48:7d:e1:27:24:00:e2:87:9a:
         7e:c5:d3:0e:78:25:df:98:8b:dc:dd:76:de:a5:5b:55:bc:42:
         64:46:24:41:50:30:3f:71:d8:83:b8:d2:0f:cd:33:cb:b7:63:
         9c:8a:d2:95:52:79:d0:b2:ca:3b:57:6f:3e:55:91:3b:dc:aa:
         0f:72:8d:13:49:1f:09:3e:9c:d6:a6:e4:3b:db:55:c8:d2:60:
         cc:50:b7:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:44:01 2026 by rpki-client