Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/fCP8TSGNsB-hDMvc2JTOnHtx_mw.roa
File:                     fCP8TSGNsB-hDMvc2JTOnHtx_mw.roa (raw, json)
Hash identifier:          9kjffPg2gNUJCa44G7rArEfXeocNzrjACwIETsi5TSY=
Subject key identifier:   7C:23:FC:4D:21:8D:B0:1F:A1:0C:CB:DC:D8:94:CE:9C:7B:71:FE:6C
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0781
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/fCP8TSGNsB-hDMvc2JTOnHtx_mw.roa
Signing time:             Tue 31 Mar 2026 07:41:33 +0000
ROA not before:           Tue 31 Mar 2026 07:41:33 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        106.184.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1921 (0x781)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:41:33 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7C23FC4D218DB01FA10CCBDCD894CE9C7B71FE6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9c:50:31:fa:6f:53:a0:06:a8:ea:81:33:06:
                    50:b0:17:1b:d1:7d:01:eb:0d:ee:8d:2f:82:19:83:
                    48:db:e0:3d:cd:16:11:7e:87:78:de:db:38:99:6e:
                    1a:0d:ab:b4:77:06:e1:04:f4:a6:f3:9f:b7:4b:25:
                    40:73:9c:cb:a8:0d:50:f2:50:bd:8b:01:c1:56:71:
                    e5:ef:34:a5:a9:d8:45:d0:0e:14:72:ec:78:ae:58:
                    ca:b7:de:b0:4e:70:c1:4c:6d:e1:e3:f7:27:f5:d6:
                    1a:75:12:61:da:02:c6:a8:0c:77:d4:50:15:54:c7:
                    5b:78:0f:a7:03:4a:e1:6b:8a:f4:38:29:ef:1f:2a:
                    29:eb:a1:e9:5d:5b:81:1d:a6:1d:f3:ed:95:4b:c7:
                    bc:ed:0b:df:f1:44:6e:38:c5:62:ca:b3:16:6a:b2:
                    45:65:be:b1:a6:d1:87:05:6f:c7:0a:38:13:f9:51:
                    8c:5f:c8:5e:81:21:bf:7d:e9:de:8d:55:79:50:81:
                    9d:af:50:11:0c:01:06:d2:2a:81:e9:83:68:29:59:
                    83:74:c1:d2:4e:2e:6a:6d:d0:78:16:62:b7:27:41:
                    8f:83:7d:58:bf:36:0b:e8:f2:85:e2:1e:91:25:13:
                    5f:44:b4:bf:9a:ee:fc:7f:13:bb:6a:11:df:f9:32:
                    22:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:23:FC:4D:21:8D:B0:1F:A1:0C:CB:DC:D8:94:CE:9C:7B:71:FE:6C
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/fCP8TSGNsB-hDMvc2JTOnHtx_mw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.184.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         5a:a6:d3:5c:9f:7c:b8:1a:dc:14:68:e5:bb:30:6a:aa:c0:47:
         ef:0e:2f:b0:9b:5f:0e:68:95:36:7b:a8:a1:90:06:00:9d:ab:
         fe:af:16:42:72:84:59:41:a7:c7:f7:da:b0:19:2f:52:51:a3:
         a4:e1:dd:b5:a5:af:67:11:33:a6:5e:e1:7f:b0:04:d5:25:54:
         fd:56:1e:f7:15:82:a8:e7:2a:f8:dd:a6:7d:ce:36:08:12:21:
         18:0a:fe:31:7e:b3:87:ca:4e:a7:a2:bd:d6:2c:37:3d:8f:81:
         7e:ed:f8:b7:5f:b5:f7:a6:97:b9:e0:9b:86:e2:72:ef:8a:4b:
         cb:e0:4a:c2:7a:e6:8f:3e:f3:a8:43:0c:34:4e:16:0c:0b:92:
         fa:54:e1:10:15:b1:1a:e7:7e:80:2a:65:53:fa:0a:86:c2:b5:
         1c:ac:33:ef:88:ac:fd:f8:81:ca:23:74:a1:88:9f:9b:5c:0b:
         e4:69:58:b0:61:db:13:86:10:90:45:8e:11:ad:b6:40:4e:46:
         fb:b9:ef:46:49:74:4e:0d:35:c5:45:b1:04:f8:8b:d6:96:7e:
         ec:5b:21:2f:85:dd:68:8e:35:38:7c:da:5e:38:e2:89:f8:48:
         0d:dd:39:c1:cd:d3:7e:3b:e8:ef:94:4c:c0:1c:95:fb:fc:d6:
         ea:a9:a1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:12:31 2026 by rpki-client