Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/gR7uJksnNRFbTNoKuJ3bd0YjpGI.roa
File:                     gR7uJksnNRFbTNoKuJ3bd0YjpGI.roa (raw, json)
Hash identifier:          0IjDRd4zG8ebmPxpSG9RUrtVo7ZU26IeIHC51sABu04=
Subject key identifier:   81:1E:EE:26:4B:27:35:11:5B:4C:DA:0A:B8:9D:DB:77:46:23:A4:62
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0822
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/gR7uJksnNRFbTNoKuJ3bd0YjpGI.roa
Signing time:             Tue 31 Mar 2026 07:42:52 +0000
ROA not before:           Tue 31 Mar 2026 07:42:52 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        106.176.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2082 (0x822)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:42:52 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=811EEE264B2735115B4CDA0AB89DDB774623A462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b5:93:67:a5:f5:20:ca:4a:9b:7e:f6:23:d4:
                    81:f2:28:89:5d:cc:08:42:21:55:07:8a:b6:e6:19:
                    11:67:16:b2:5c:f9:86:41:2c:2d:f1:aa:b9:13:1a:
                    e6:b9:d1:19:ac:f4:0a:1d:c3:7c:c8:b8:03:3a:c1:
                    c6:6a:a7:d9:34:9d:df:3d:65:9a:c6:20:09:2c:25:
                    64:b1:bf:36:c1:9e:6f:48:20:70:13:b0:a1:f5:47:
                    54:61:69:55:a1:93:0c:6c:82:92:fc:8d:f1:72:ce:
                    0c:87:0e:8f:a3:61:20:08:77:1a:02:04:3b:6d:46:
                    45:9d:b2:be:ee:7d:df:a8:5b:2f:77:55:8a:da:95:
                    83:e3:6d:2b:54:00:d5:d2:d9:f5:32:43:33:00:89:
                    23:60:fb:69:00:35:f6:5a:a2:29:89:15:fb:d9:64:
                    20:7d:34:9c:f8:e2:66:c5:17:ae:61:77:42:6a:b0:
                    69:64:c2:8a:3e:53:79:db:b5:46:6b:f7:2b:29:90:
                    50:f4:76:b6:36:17:00:e1:0f:9f:97:c2:db:38:e0:
                    db:70:a1:f1:04:b3:1a:e7:ad:1d:59:14:92:34:dc:
                    8f:0a:a0:98:9d:1c:c0:47:10:e4:2e:7c:ee:e9:4a:
                    14:6f:3a:ad:13:1c:10:50:fd:6d:3e:bf:92:ff:bd:
                    9e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:1E:EE:26:4B:27:35:11:5B:4C:DA:0A:B8:9D:DB:77:46:23:A4:62
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/gR7uJksnNRFbTNoKuJ3bd0YjpGI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.176.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a8:59:aa:84:d5:33:e9:92:56:b0:07:ea:76:ad:32:9c:0f:ec:
         4c:22:ad:ce:02:fc:64:b3:be:be:28:c8:2d:6e:f8:5c:9f:95:
         49:b1:a2:f5:ab:5c:32:c6:e9:a6:57:71:34:d5:64:88:f1:a4:
         72:73:34:20:a5:5c:1e:af:79:21:42:32:65:b1:91:34:da:9e:
         9f:8e:98:1e:9a:c2:a6:cb:56:f4:58:cf:ab:83:48:bb:6e:34:
         ca:ec:e2:0e:fb:8d:a2:f9:12:61:5d:09:88:d7:01:9e:3d:57:
         60:d8:fd:cb:34:a2:9c:a2:7e:a7:28:09:78:f6:12:61:b1:fa:
         a1:2c:78:ee:61:df:df:cf:1b:c0:95:48:7a:1e:d4:ab:05:42:
         ef:0d:00:89:c6:39:48:4a:d5:7f:e7:93:23:cc:a1:b8:e2:9c:
         e7:24:66:c2:a8:28:59:9d:62:f4:8e:05:2b:d6:6c:6d:6d:d0:
         83:96:c2:28:ee:30:2b:13:9e:b0:61:44:78:d3:e4:52:07:87:
         3a:65:b9:27:b2:d6:1f:d0:82:86:4c:02:2b:74:87:41:70:2f:
         8a:74:b7:7a:8e:9b:29:c7:f1:a6:5b:93:11:bc:f9:16:e7:3a:
         38:40:a1:63:3b:1f:8e:05:d1:e4:64:1d:c0:52:5b:f6:da:c4:
         6a:a8:41:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:43 2026 by rpki-client