Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/dFSzXjgq1BjyGAYJOo2SICRYQoM.roa
File:                     dFSzXjgq1BjyGAYJOo2SICRYQoM.roa (raw, json)
Hash identifier:          wlBpXXuVXhLlN2lRBwfriGC7NKXbFkEQl+JBH0GvFMs=
Subject key identifier:   74:54:B3:5E:38:2A:D4:18:F2:18:06:09:3A:8D:92:20:24:58:42:83
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       085E
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/dFSzXjgq1BjyGAYJOo2SICRYQoM.roa
Signing time:             Tue 31 Mar 2026 07:43:24 +0000
ROA not before:           Tue 31 Mar 2026 07:43:24 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        106.186.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2142 (0x85e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:43:24 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7454B35E382AD418F21806093A8D922024584283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cf:f0:d1:ce:16:74:1c:32:d9:8c:e7:87:95:
                    21:a1:89:20:3b:8d:b8:e8:e0:9d:0f:be:a2:25:f0:
                    8b:a9:d8:6c:34:22:57:f5:c2:3a:61:5c:f3:43:d3:
                    98:ac:f0:ff:ee:91:65:96:6a:65:ed:b4:20:17:2d:
                    43:7a:10:7f:32:2c:0d:29:c9:e2:97:e3:ff:71:4e:
                    f4:cc:8f:05:dc:f3:c1:73:27:57:60:81:8d:b4:20:
                    68:0c:7e:85:1d:17:ad:d1:f4:a1:c5:0f:4e:f9:7b:
                    8f:aa:e5:14:fb:dc:17:ac:08:1a:0f:9d:8f:d7:0c:
                    a3:91:d9:c9:3d:0d:80:73:7b:fd:b8:23:23:c9:45:
                    a7:f0:a5:77:f6:c4:8d:19:cd:93:8b:ac:4a:8f:51:
                    56:43:f4:07:89:2a:86:56:93:68:1b:13:59:53:c6:
                    22:71:38:64:95:79:79:ec:19:15:15:8b:7d:62:71:
                    95:10:a8:32:d9:97:95:4f:49:3f:98:b8:ad:2c:a4:
                    7b:e6:25:2d:fa:88:c7:9f:c5:ab:4c:64:3e:34:1a:
                    2b:20:36:72:e8:93:39:a8:f2:71:60:49:54:20:ee:
                    6e:d9:af:2b:d7:43:0f:61:af:92:13:2a:4a:7b:82:
                    74:b0:e9:22:13:3e:10:36:01:16:1b:92:0f:99:0e:
                    00:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:54:B3:5E:38:2A:D4:18:F2:18:06:09:3A:8D:92:20:24:58:42:83
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/dFSzXjgq1BjyGAYJOo2SICRYQoM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.186.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a2:47:fa:73:d5:a5:04:37:95:73:bc:d9:ac:01:21:f8:32:5f:
         94:d8:97:b9:63:33:92:c4:85:04:40:fb:84:ad:c2:35:da:77:
         28:17:b7:0f:00:7d:e1:cb:b7:d3:82:ce:cf:91:06:78:51:d8:
         3d:75:5b:f4:fa:4d:c4:aa:73:14:f0:33:cf:f6:88:02:9d:f2:
         d4:41:dd:f9:65:ba:70:b4:7f:02:4e:b9:58:4f:70:4f:c4:9b:
         6f:e5:81:6a:1f:11:c8:86:80:b1:c2:d6:f3:20:9f:7d:a8:5e:
         23:d1:e5:15:b2:29:a8:10:94:93:35:f3:7f:4e:80:47:09:4a:
         62:fd:97:99:ca:5a:ef:da:e8:28:e7:30:57:99:d2:47:7a:b7:
         da:4f:62:2a:0c:af:47:12:67:dd:58:81:db:d5:d3:77:36:3c:
         e9:b7:c5:49:ac:da:32:a1:bc:1d:71:d3:68:69:51:5d:2a:9a:
         30:d7:7a:7b:37:fb:d5:19:b3:82:38:10:54:02:c6:bf:58:a8:
         e8:5d:2f:ec:12:72:58:aa:59:a4:a4:86:51:54:cc:2e:73:b6:
         3a:20:db:c6:85:00:3d:29:3a:3f:04:31:ac:9f:d8:d2:c7:60:
         ea:a9:10:85:05:33:5f:81:7c:00:18:11:08:8e:18:2b:23:f1:
         11:73:f9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:29:42 2026 by rpki-client