Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/hJLV_BfXAP5k1p6TziXx5Kaf3TE.roa
File:                     hJLV_BfXAP5k1p6TziXx5Kaf3TE.roa (raw, json)
Hash identifier:          aVQfMFATRd+px/dXcUBgwSxU9r6xnN3UCMnAgWvkQp4=
Subject key identifier:   84:92:D5:FC:17:D7:00:FE:64:D6:9E:93:CE:25:F1:E4:A6:9F:DD:31
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       07AD
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/hJLV_BfXAP5k1p6TziXx5Kaf3TE.roa
Signing time:             Tue 31 Mar 2026 07:41:52 +0000
ROA not before:           Tue 31 Mar 2026 07:41:52 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        106.187.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1965 (0x7ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:41:52 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=8492D5FC17D700FE64D69E93CE25F1E4A69FDD31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:03:c1:fd:91:2a:94:4d:7d:ea:de:d3:53:3a:
                    9e:ab:bd:ab:d2:e2:5f:24:89:2a:e8:9b:44:77:e0:
                    e2:c1:b4:f3:eb:46:8d:16:07:8d:29:0f:5f:e6:10:
                    c5:3c:69:36:a9:36:6c:f2:69:b1:aa:9e:b3:b1:81:
                    02:e2:04:c7:43:d7:43:78:5e:18:6a:ec:f9:57:86:
                    e5:4f:0f:63:f9:36:2a:02:fb:22:95:bb:44:a0:c1:
                    9c:ba:2d:d3:47:7e:e8:22:8c:17:07:f4:84:f5:ab:
                    6e:ff:4f:b8:0a:41:0d:f5:b5:f5:ec:93:0d:a9:85:
                    7c:d1:6a:c3:0c:00:10:6f:7e:4b:40:07:6f:c0:01:
                    6c:c1:fe:17:e4:e2:32:08:34:0b:ed:2f:b9:73:ea:
                    81:41:1a:a9:6e:0d:f5:11:45:bc:90:7b:15:ad:21:
                    0e:48:9e:71:ba:dd:98:a2:b0:08:81:83:0a:b6:91:
                    ea:c9:b5:0c:2d:db:8b:bc:40:ad:fe:cd:7c:40:4a:
                    c8:ec:ba:b2:82:21:c7:0c:9e:5c:07:17:47:99:7b:
                    56:d2:a0:f3:6e:13:1c:4d:72:18:50:e3:2c:81:c4:
                    64:fa:1d:64:3a:e6:db:fb:08:29:06:c2:bf:50:43:
                    a3:eb:d3:22:77:a8:ac:33:a5:20:02:11:04:d0:7a:
                    fc:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:92:D5:FC:17:D7:00:FE:64:D6:9E:93:CE:25:F1:E4:A6:9F:DD:31
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/hJLV_BfXAP5k1p6TziXx5Kaf3TE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.187.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         49:5c:9a:dd:2a:24:45:e1:58:55:e0:2c:c6:f9:d4:c7:26:6a:
         d7:33:b0:02:e7:6d:2c:4b:bf:75:16:56:85:ce:68:80:17:62:
         ca:3e:f6:b9:83:dc:cc:a5:a4:24:b7:83:2f:94:f9:bc:1d:6b:
         25:c9:84:18:3d:74:56:80:f0:f1:48:99:c4:ae:a8:e6:37:3a:
         fa:7e:30:38:36:c4:d2:7d:aa:46:92:49:03:7b:69:61:ce:33:
         21:fc:db:74:84:58:c0:ff:45:c5:1c:6a:4e:9a:49:1e:a6:f9:
         56:e1:37:2d:c8:0f:38:9b:be:4c:b5:19:07:bf:a1:e9:41:11:
         09:06:f8:74:9c:a4:ae:71:50:67:de:2e:77:9e:b9:fd:60:72:
         92:68:82:fd:9d:8c:4f:ae:5b:f7:95:57:d0:0a:82:f6:a4:ea:
         4b:ba:4a:b2:61:db:fb:c4:47:2d:f5:ff:b7:95:61:99:42:8e:
         c8:32:06:54:9e:72:6b:9d:1e:e9:0c:d7:ff:d5:cd:a4:c3:19:
         7f:1d:1e:e9:a7:5e:8d:dc:fe:fa:42:ab:c5:4c:5a:36:27:37:
         09:5b:30:ba:fd:2d:81:d0:bd:90:fe:6b:86:c9:b3:3c:f0:7b:
         d6:50:cb:9a:9f:d7:96:fb:43:2b:90:b3:65:29:5f:e3:34:e5:
         e5:90:b5:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:47 2026 by rpki-client