Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/k1l4cFdlZACesaI3tZhP7d0BHno.roa
File:                     k1l4cFdlZACesaI3tZhP7d0BHno.roa (raw, json)
Hash identifier:          SWxd6l3xVPJ9z25GZvWYp5glTovvvXGECEJeoKupLY8=
Subject key identifier:   93:59:78:70:57:65:64:00:9E:B1:A2:37:B5:98:4F:ED:DD:01:1E:7A
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0807
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/k1l4cFdlZACesaI3tZhP7d0BHno.roa
Signing time:             Tue 31 Mar 2026 07:42:38 +0000
ROA not before:           Tue 31 Mar 2026 07:42:38 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        121.110.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2055 (0x807)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:42:38 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=93597870576564009EB1A237B5984FEDDD011E7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9e:31:a2:f1:10:50:89:72:30:02:8a:07:14:
                    e4:ed:f7:0d:a8:52:0f:67:e3:7d:03:b9:fe:6a:8e:
                    48:02:38:a0:da:33:91:7c:e0:1a:de:24:bf:d5:a1:
                    bd:13:4c:0e:47:5a:43:02:65:f4:0d:6b:71:c5:93:
                    bd:ae:c5:af:3d:c6:b3:a4:04:a0:42:a0:d7:78:71:
                    c5:8d:dc:24:9c:c1:de:aa:e0:3c:5e:07:dc:16:f7:
                    7b:e1:f3:6e:b0:e9:2f:15:d5:85:33:46:12:23:1a:
                    1b:e3:db:5b:22:9f:f9:22:8c:1d:f9:a3:53:f8:2a:
                    97:6d:f7:77:0d:81:c9:1e:e1:2d:f0:7b:0c:93:ac:
                    aa:19:96:6f:30:55:0b:1d:31:6f:d6:1a:05:56:dc:
                    76:93:13:24:16:ff:b6:40:6d:7f:43:89:e8:5e:b8:
                    36:08:4f:cb:a1:52:7c:41:aa:79:51:77:38:30:65:
                    69:08:77:c2:fc:6e:7e:88:d6:12:19:b0:8d:74:84:
                    44:c5:ea:2b:38:b6:d6:36:71:59:a6:03:b1:6d:a5:
                    2e:66:97:3a:d2:d8:b6:1b:52:2a:46:91:41:ca:8e:
                    13:29:55:eb:f8:10:bf:ec:b1:9a:26:3f:81:14:da:
                    02:1b:98:7b:70:85:92:3b:c3:0e:bd:82:bc:56:31:
                    de:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:59:78:70:57:65:64:00:9E:B1:A2:37:B5:98:4F:ED:DD:01:1E:7A
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/k1l4cFdlZACesaI3tZhP7d0BHno.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.110.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1d:2d:f0:3b:1f:ed:f8:42:05:d7:e9:47:aa:0e:ad:b3:61:68:
         e3:4b:1b:ec:ea:2d:09:88:db:1a:6c:15:6f:0f:8b:70:50:39:
         8f:dd:1a:7a:c6:ad:41:b2:ec:34:c2:f9:3e:12:41:48:f4:25:
         6d:1e:73:83:1f:f3:7c:16:e7:1a:cb:5b:e0:ec:17:99:29:8e:
         8b:4e:cb:b5:38:b1:42:bd:1b:c2:d1:d3:5b:8c:41:1b:b9:b5:
         68:3f:42:4a:70:27:db:ac:25:97:a4:9d:0f:f3:68:8c:e0:dc:
         5c:11:18:1e:ce:b2:52:9b:89:af:39:ab:54:7d:33:91:d5:7b:
         b4:31:43:74:30:53:01:31:39:7a:ed:19:3c:84:b5:30:5e:74:
         68:d0:0d:c2:62:7f:0e:e0:86:22:7e:12:13:0a:99:9f:0b:c2:
         75:8d:a7:6b:b1:5c:29:50:ee:a5:00:8c:8f:be:8a:93:df:4f:
         bb:67:fc:ce:a0:b6:2f:3a:57:f9:b3:8c:9c:5b:2d:70:a8:6b:
         c7:24:49:ba:bb:bc:ec:fb:7f:fd:ac:d4:aa:95:a7:5b:a4:fe:
         05:b4:a8:0e:fd:4a:bc:ed:24:05:1a:3b:7a:91:e0:61:be:9e:
         ad:70:18:2a:30:1d:0d:b5:c5:62:51:2f:94:5f:ae:14:88:de:
         60:6a:6a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:50:15 2026 by rpki-client