Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/dwvEkTXDRhNJ2GLu00j0uN7om2c.roa
File:                     dwvEkTXDRhNJ2GLu00j0uN7om2c.roa (raw, json)
Hash identifier:          LCGLte925xbwy4gFGOX7t2Hmq3QCAobJrGm2EIfXaqc=
Subject key identifier:   77:0B:C4:91:35:C3:46:13:49:D8:62:EE:D3:48:F4:B8:DE:E8:9B:67
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       07CD
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/dwvEkTXDRhNJ2GLu00j0uN7om2c.roa
Signing time:             Tue 31 Mar 2026 07:42:09 +0000
ROA not before:           Tue 31 Mar 2026 07:42:09 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        106.165.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1997 (0x7cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:42:09 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=770BC49135C3461349D862EED348F4B8DEE89B67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8a:1e:1a:e8:ea:47:1e:31:b8:27:44:84:9d:
                    63:f6:46:18:93:64:01:e0:2e:ba:e9:8c:7a:6d:57:
                    2a:3b:a4:f3:0c:fb:28:04:5c:e0:e4:3c:78:6a:ed:
                    98:8a:ec:02:95:6f:a2:fa:c1:3e:6f:06:79:16:d5:
                    dd:be:95:44:12:e7:8b:e4:b9:88:25:a2:05:ab:b2:
                    63:b5:48:5e:f2:bc:a4:02:e2:06:84:96:47:b7:ab:
                    40:6f:1e:05:7a:ce:ab:9d:79:91:04:1b:17:c9:7d:
                    1d:7c:3e:af:9b:3f:13:9d:da:b5:7a:99:6d:21:97:
                    cd:66:bf:22:c8:89:03:6e:f5:fd:c5:09:5c:45:18:
                    8a:16:d1:dd:ed:7a:54:74:18:08:4d:f2:70:ff:36:
                    75:a5:5a:ba:fb:0b:60:70:45:61:42:7f:e0:30:f9:
                    ac:68:c4:8e:cc:7e:02:fe:ba:dd:97:95:5b:b5:02:
                    f0:bc:3d:a0:7e:4d:04:74:51:64:80:54:5f:b8:0b:
                    02:48:ad:c2:56:ec:ae:3e:db:e9:08:87:a6:db:a9:
                    78:1c:75:46:85:f5:60:d2:3c:a1:f3:ed:3f:40:48:
                    76:3e:e0:63:85:a1:ba:64:5d:68:c0:b1:9b:c2:dc:
                    30:27:f9:2a:a3:36:c3:cd:61:0a:f3:4d:f5:83:cc:
                    a4:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:0B:C4:91:35:C3:46:13:49:D8:62:EE:D3:48:F4:B8:DE:E8:9B:67
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/dwvEkTXDRhNJ2GLu00j0uN7om2c.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.165.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6f:3a:89:61:c1:26:34:fc:d2:97:14:25:09:be:b0:27:d0:5d:
         c1:a4:7d:9d:38:33:54:49:0c:df:34:39:b6:df:a9:38:38:f2:
         88:8e:68:f9:c3:c9:1e:f5:62:6c:b7:bb:36:49:7b:30:c4:c8:
         f3:16:7d:d5:ea:5b:4e:c4:0c:14:82:0c:35:d6:0c:58:41:b0:
         b1:32:21:e7:b9:e6:f5:5a:f5:e9:9c:f8:6b:03:db:ba:34:8e:
         0c:ac:b2:e5:f3:56:76:3b:2d:57:0e:a1:b1:a7:45:c5:dd:2d:
         ba:57:68:97:38:19:cb:ff:b5:a4:f9:dc:4b:b4:a6:2a:05:7a:
         70:b6:89:6b:fb:99:99:a5:e5:65:00:98:ef:9c:c4:b4:82:6e:
         1f:2b:9d:29:c9:82:b0:b6:d3:36:1d:5c:38:64:ed:29:d2:7f:
         26:42:b1:74:9e:34:5c:e8:50:47:c1:4b:37:95:d5:be:04:d7:
         a6:c2:30:af:82:1f:1e:2f:b9:98:8b:c0:68:49:81:b9:67:f9:
         95:1b:eb:93:59:6f:51:b8:a2:b2:a4:2c:5e:3d:3c:a9:ce:40:
         98:0e:99:74:b2:2f:53:2e:94:fa:7f:01:4b:42:62:c2:bf:f9:
         4d:89:04:f9:23:ef:14:a3:b6:2a:49:6f:e9:9c:73:4e:7a:b6:
         c8:29:b4:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:48:31 2026 by rpki-client