Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/bVIwHtKClEpFnzg2lkdRfn35sbs.roa
File:                     bVIwHtKClEpFnzg2lkdRfn35sbs.roa (raw, json)
Hash identifier:          yjSEk3l4TRydM1igF45ubTJ/KXGHgrwz/9zRHIVcuqs=
Subject key identifier:   6D:52:30:1E:D2:82:94:4A:45:9F:38:36:96:47:51:7E:7D:F9:B1:BB
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0861
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/bVIwHtKClEpFnzg2lkdRfn35sbs.roa
Signing time:             Tue 31 Mar 2026 07:43:25 +0000
ROA not before:           Tue 31 Mar 2026 07:43:25 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        113.157.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2145 (0x861)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:43:25 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=6D52301ED282944A459F38369647517E7DF9B1BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ca:cb:00:74:44:85:22:32:eb:b6:7e:8e:dd:
                    b8:25:41:a2:48:b9:51:92:18:38:90:79:78:31:61:
                    a2:4a:08:6c:f8:cc:c0:ca:29:9f:61:53:a1:6d:ae:
                    9e:af:ec:84:df:8e:28:6d:d6:88:3c:9c:dd:0c:fb:
                    8b:0c:57:27:95:bc:bf:ed:f3:94:8f:d5:93:3f:71:
                    7b:0b:b4:1d:02:49:0c:24:79:9d:33:0d:3a:de:1b:
                    23:1b:fd:a4:14:15:8e:5d:6c:45:52:62:d2:f0:66:
                    1f:dd:fa:b9:26:2c:92:b5:32:81:30:73:19:f5:86:
                    b6:08:5a:c2:01:fd:ac:98:fb:46:95:0d:f8:65:aa:
                    76:36:88:68:8c:43:63:28:70:d0:6a:2e:3b:70:c6:
                    6f:d6:63:57:04:9a:7e:00:39:22:5e:0c:53:e8:75:
                    ef:b2:e2:65:fb:02:b8:4d:7a:cd:45:f0:6d:3a:65:
                    8f:5c:23:b4:69:07:c3:83:fc:0d:6f:8e:79:48:4d:
                    26:79:56:93:ec:7f:47:41:2a:d1:f1:83:e8:80:42:
                    63:d7:2e:e2:60:63:3a:09:ed:a0:42:dd:b1:b9:35:
                    d6:9f:9f:31:22:92:3b:ef:da:50:4f:5b:6b:b2:9f:
                    ed:33:eb:55:bd:bf:08:c5:0b:b2:c9:1f:61:65:da:
                    0c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:52:30:1E:D2:82:94:4A:45:9F:38:36:96:47:51:7E:7D:F9:B1:BB
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/bVIwHtKClEpFnzg2lkdRfn35sbs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.157.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         20:37:f4:6c:bf:7a:52:7b:58:1b:2e:4b:9b:12:37:4c:23:8a:
         b9:16:d7:f6:b2:4e:4b:3f:fd:0a:e2:54:dd:67:fe:b2:b3:c8:
         99:e4:17:7e:70:8a:b6:65:e1:c9:6b:98:3f:06:3f:95:c2:1f:
         aa:e4:fd:8c:b9:77:b3:c6:62:3d:a3:ee:34:7c:e0:ce:9c:5d:
         1f:ed:17:0d:62:c7:0b:51:c0:d9:69:95:96:36:df:f2:46:98:
         27:a0:29:d2:a9:a4:c7:30:4f:7d:ea:8b:a6:ae:cf:a6:63:cb:
         e4:0e:65:fe:7e:92:93:d3:78:33:3f:da:c4:3d:6c:0e:5b:c3:
         d7:ea:bb:ec:e5:d4:d2:9b:2e:67:45:2d:14:a9:c6:44:9e:92:
         bc:d7:fa:c4:65:f9:87:d8:04:a7:e5:8f:65:08:e8:e1:1f:d4:
         7c:86:65:3b:6b:fb:7b:b0:c9:85:f4:78:2a:24:09:0f:bd:b4:
         3e:5c:1b:9a:88:3b:01:40:f5:3c:27:fd:21:70:f6:9e:1a:97:
         10:37:9f:c1:b7:ab:92:a2:11:41:6a:b8:14:d6:80:1b:c7:59:
         b4:63:e9:42:01:6b:e6:bc:bc:45:e9:73:3b:4f:e3:2d:c8:60:
         7e:dc:58:c8:0e:54:a9:f5:76:40:92:d9:a5:ec:6a:b1:c4:fc:
         43:c2:61:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:43:25 2026 by rpki-client