Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/c6BJFrMyiLurpkls5qC3dArDD9w.roa
File:                     c6BJFrMyiLurpkls5qC3dArDD9w.roa (raw, json)
Hash identifier:          v0kZQ+BZkeJfFSyzhMuZlngSWBSr4XNNJu3xlSbkrOw=
Subject key identifier:   73:A0:49:16:B3:32:88:BB:AB:A6:49:6C:E6:A0:B7:74:0A:C3:0F:DC
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0918
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/c6BJFrMyiLurpkls5qC3dArDD9w.roa
Signing time:             Tue 31 Mar 2026 07:44:48 +0000
ROA not before:           Tue 31 Mar 2026 07:44:48 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     151387
IP address blocks:        14.15.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2328 (0x918)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:44:48 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=73A04916B33288BBABA6496CE6A0B7740AC30FDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:53:39:88:34:f2:0e:ff:29:dd:ae:9e:06:83:
                    89:2f:65:6c:98:70:7a:1e:70:5e:58:3c:a7:b1:83:
                    a1:9c:6a:6f:64:a8:c4:e7:6a:d4:4d:ac:1d:06:5b:
                    71:2d:36:75:9b:e1:c9:0f:3f:ed:93:6d:e0:17:5f:
                    a8:b1:d3:d0:18:27:0d:7c:b6:d6:44:6b:6b:1a:d7:
                    99:8f:4b:3f:db:2b:35:0a:e0:45:e4:e4:28:0d:0e:
                    0c:28:e5:b8:9b:cd:91:74:98:0c:39:d7:71:6c:2a:
                    b6:f5:ed:86:bf:c6:7b:06:15:f2:f1:88:91:c7:4d:
                    4c:be:49:67:d5:6f:f8:f5:fb:2c:ef:a8:db:78:81:
                    f3:1f:56:4c:35:3a:b0:25:fa:87:87:27:f1:b4:bb:
                    62:fb:fd:70:79:42:91:1f:a2:f5:ae:71:4d:28:b1:
                    d8:09:e3:e8:d6:7c:5c:11:a7:90:8c:23:8c:e1:f0:
                    d1:94:99:d6:76:47:7c:22:e2:d3:bb:fb:ec:00:94:
                    46:a7:e6:0f:8e:64:91:fe:4f:d0:46:c3:9f:21:07:
                    80:d5:62:ba:c7:77:9b:31:59:12:b5:b0:86:99:d5:
                    02:70:62:cd:30:26:d3:3f:0f:41:3d:32:a3:51:2d:
                    76:5e:2c:10:3a:3a:7c:36:ea:84:61:f2:00:ce:fb:
                    e3:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:A0:49:16:B3:32:88:BB:AB:A6:49:6C:E6:A0:B7:74:0A:C3:0F:DC
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/c6BJFrMyiLurpkls5qC3dArDD9w.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.15.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2d:4e:47:eb:45:17:7e:7d:6f:a8:21:c2:d7:a2:e1:88:48:01:
         9e:6c:0d:e4:77:ef:7a:4a:f8:91:d0:3d:9c:4e:5e:b1:db:7c:
         4d:c2:ff:82:a4:a3:bb:0d:88:13:dd:c5:db:4d:ea:3b:59:a4:
         64:78:8e:ec:38:6a:df:c2:c6:cc:46:de:47:ba:42:a2:5b:78:
         e5:9f:ec:85:e2:f9:7f:d7:66:d4:8e:39:83:c1:b6:c1:5e:dc:
         2d:74:41:98:d2:50:90:49:78:12:10:d3:9b:e3:b1:2e:e2:23:
         34:71:7c:cc:92:98:af:94:a0:ad:09:44:7b:9e:63:cf:7d:79:
         b7:c3:02:43:4b:6b:b8:08:1b:af:10:9a:19:36:8f:c0:87:5f:
         75:c3:c2:a4:ce:0e:22:78:64:32:6d:ad:46:52:a1:d3:bf:a6:
         c8:f5:cf:51:bb:f6:56:97:3e:e9:5f:46:40:2a:1b:58:3b:36:
         5f:05:f7:4a:de:25:d7:ba:1e:9d:b4:1a:7b:4f:11:af:37:cb:
         58:dd:50:9b:9c:c8:58:69:79:5c:1e:28:86:80:d2:5e:3b:d1:
         15:ae:72:d3:3c:68:33:c4:78:10:9d:04:57:7c:b0:4b:a4:50:
         1c:4c:5a:4a:13:29:ef:68:6f:52:5e:82:ef:f5:b4:33:89:31:
         27:6c:88:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:52:49 2026 by rpki-client