Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/dciUBecTfCQoZ02bNLdiMNRY2zs.roa
File:                     dciUBecTfCQoZ02bNLdiMNRY2zs.roa (raw, json)
Hash identifier:          P9uiqTTltzvXZexzOv0s3usPBgQduhc4Jq566Yv4OGs=
Subject key identifier:   75:C8:94:05:E7:13:7C:24:28:67:4D:9B:34:B7:62:30:D4:58:DB:3B
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0825
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/dciUBecTfCQoZ02bNLdiMNRY2zs.roa
Signing time:             Tue 31 Mar 2026 07:42:53 +0000
ROA not before:           Tue 31 Mar 2026 07:42:53 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        59.140.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2085 (0x825)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:42:53 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=75C89405E7137C2428674D9B34B76230D458DB3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:29:33:f8:8c:1f:d9:b1:c0:9d:d2:e6:62:9d:
                    4f:fa:c0:af:49:90:5b:a1:36:5f:c5:5f:83:fb:d9:
                    e3:13:8f:8b:e9:d1:e1:85:9b:a8:8c:8b:c1:6f:cc:
                    71:11:b3:4b:b9:68:1d:d8:00:58:20:76:02:60:cd:
                    b8:b6:0b:ef:4f:2b:26:e0:2c:5b:61:d0:99:f3:a5:
                    d4:0f:80:14:ac:42:9f:58:d1:ea:77:35:0f:73:d1:
                    2e:c0:f3:59:bc:64:cb:96:7e:a5:10:9a:6d:b0:3d:
                    19:af:85:d3:6c:be:67:77:63:fe:29:ee:b1:8c:7d:
                    6f:fa:d2:71:b8:c0:63:f8:3a:75:0c:4f:d8:1b:df:
                    de:24:aa:7e:61:64:6b:8e:d8:c4:55:46:64:5e:bc:
                    a5:63:ca:56:ab:ac:af:29:74:c9:9b:9a:fc:3e:7c:
                    45:3c:13:96:b7:66:40:f3:d0:ab:73:a4:64:4c:c2:
                    81:2b:11:f0:33:c9:d0:4d:53:eb:06:12:df:42:b4:
                    13:b6:e3:62:ee:8d:3d:4a:80:09:18:8f:b4:c8:a9:
                    3b:17:82:d2:9a:54:3f:bf:e5:c8:e4:d4:f0:b2:a4:
                    b1:3b:2c:09:b3:81:fb:e2:a9:c3:8d:fa:09:39:47:
                    32:5a:4f:45:fb:e1:a0:0e:52:c8:73:de:48:9e:1d:
                    64:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:C8:94:05:E7:13:7C:24:28:67:4D:9B:34:B7:62:30:D4:58:DB:3B
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/dciUBecTfCQoZ02bNLdiMNRY2zs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.140.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         81:8d:7c:09:99:43:1d:cd:30:5f:98:cd:0a:fb:e5:c5:77:f1:
         90:35:db:3d:c6:31:df:bc:c2:24:95:06:ef:6e:de:f7:c0:85:
         eb:f1:91:9e:1a:8e:2b:a8:03:4b:44:74:8f:d3:4b:39:a8:ba:
         e4:f4:46:34:ab:e2:6e:4e:1a:bb:f5:ea:6b:b9:11:39:a3:5e:
         8e:6a:af:d9:c0:40:38:8a:b2:34:3a:54:ac:6b:9e:d8:7b:bd:
         eb:0f:eb:b8:be:65:49:d4:c4:69:76:43:19:51:e2:1d:0c:90:
         f5:69:a4:59:a6:c8:2a:cd:5c:88:c3:7d:24:1c:93:fc:d9:b4:
         bd:13:af:e1:b9:32:ef:5a:bf:1e:ed:74:50:6b:27:b4:14:ee:
         bd:c8:f4:62:0c:dc:7f:5b:30:14:c3:f2:4d:93:d4:b7:61:71:
         92:e5:55:28:38:82:2a:f7:65:2f:5e:c6:b2:64:ad:02:9c:38:
         39:35:3a:cb:46:85:da:fd:c0:79:05:a2:91:9d:23:c7:51:8f:
         b5:e5:f4:27:e4:e4:f6:3b:98:af:53:44:73:c0:ba:2c:3b:e6:
         0a:d4:92:70:23:a9:f3:2d:3f:54:56:b0:9d:a9:67:3f:96:6a:
         5d:df:e7:03:ad:54:01:a7:90:4e:4c:11:36:21:f8:15:b7:d5:
         44:be:de:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:13:25 2026 by rpki-client