Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/brgHL2CfpOcooEkiLY6Sr3T3nqI.roa
File:                     brgHL2CfpOcooEkiLY6Sr3T3nqI.roa (raw, json)
Hash identifier:          gEkHIpf6YbUD4f3FSaltllE0NkyagqbzEmiA1EYA86w=
Subject key identifier:   6E:B8:07:2F:60:9F:A4:E7:28:A0:49:22:2D:8E:92:AF:74:F7:9E:A2
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0904
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/brgHL2CfpOcooEkiLY6Sr3T3nqI.roa
Signing time:             Tue 31 Mar 2026 07:44:40 +0000
ROA not before:           Tue 31 Mar 2026 07:44:40 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        124.109.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2308 (0x904)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:44:40 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=6EB8072F609FA4E728A049222D8E92AF74F79EA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d2:06:75:02:92:33:0a:2c:0b:c4:9b:be:c0:
                    0c:78:36:46:82:0b:b8:df:c3:36:70:05:77:fb:52:
                    39:05:87:60:50:58:54:b6:e5:39:bf:46:17:c2:14:
                    c6:cc:9a:05:c1:5a:6d:e9:aa:5f:64:3c:b5:57:5b:
                    25:66:e3:84:19:ec:6b:e9:c5:6f:45:c7:6a:c1:b2:
                    03:10:3d:ae:2e:5b:bc:d9:9c:34:f1:44:75:d1:55:
                    93:4f:af:f9:ed:7a:07:d5:21:2f:45:89:3b:5d:45:
                    30:8c:eb:ce:a1:be:9a:31:bb:ee:89:dd:16:a8:c2:
                    ca:56:0a:ae:6b:a1:68:04:06:1d:fa:64:73:6b:97:
                    07:ad:25:9f:44:49:b1:5d:06:b6:9b:0c:2b:7b:b0:
                    f8:6c:31:e3:ab:5d:fe:a4:70:34:dd:41:c7:27:69:
                    92:d4:10:87:56:8a:6d:30:e7:d7:a5:eb:77:42:39:
                    4f:1d:50:60:e2:93:d3:47:7e:9c:70:08:23:8a:ec:
                    d9:12:bb:d6:ad:c1:64:2b:40:42:c0:65:3b:c4:f2:
                    9a:ac:f9:b2:93:d4:66:c2:08:7a:1d:94:7e:74:c3:
                    23:ef:9e:7c:97:4e:5c:14:2e:ac:67:ec:ca:f4:ab:
                    ec:63:a5:b4:b6:0d:93:17:d3:d4:d2:bd:ab:f7:cc:
                    a4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:B8:07:2F:60:9F:A4:E7:28:A0:49:22:2D:8E:92:AF:74:F7:9E:A2
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/brgHL2CfpOcooEkiLY6Sr3T3nqI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.109.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         3b:ff:a4:a4:bf:16:3f:a4:c5:ac:4e:5f:35:8e:f6:fe:ac:7f:
         b9:4e:29:34:48:d9:a6:0b:92:92:d7:5f:45:09:0d:d6:ef:cf:
         93:2c:f1:bf:dd:30:a0:6d:56:e2:6d:97:c4:18:11:74:29:71:
         c6:07:51:de:4c:f5:4f:00:37:60:e4:55:1e:e9:65:96:fa:e7:
         58:07:66:d7:e9:ac:af:71:38:39:d5:57:9b:92:aa:65:05:bc:
         3d:8c:ae:cc:49:f4:19:e2:b9:dd:10:ca:a8:17:79:1a:ad:fe:
         5a:5c:69:65:89:2d:22:ee:77:ca:7b:42:35:8f:23:bf:bb:75:
         16:80:f0:38:46:aa:e1:b2:c4:13:56:f4:2a:23:81:6a:b3:ed:
         e0:99:21:ba:5b:6f:47:1f:ae:52:12:76:48:79:42:55:ac:c1:
         d8:ca:18:d6:c1:27:3d:87:e2:14:1c:c7:21:38:8a:bc:13:23:
         bc:31:8f:d3:93:f2:ac:b3:87:e4:e7:56:c5:11:78:a4:71:be:
         bc:b3:d0:1c:6d:e2:a7:f9:36:30:c5:08:a0:d7:95:ea:f7:fd:
         0e:f6:7c:dd:f8:a9:d0:79:87:e6:44:8b:ce:d0:06:51:62:76:
         61:b0:ae:82:0a:5d:85:be:11:af:87:4c:55:72:27:85:ef:b4:
         6f:32:56:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:44 2026 by rpki-client