Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/kCf38_7e05fDViaRWnZ1RKRcH7o.roa
File:                     kCf38_7e05fDViaRWnZ1RKRcH7o.roa (raw, json)
Hash identifier:          jwwmcG4BpKNqvNCApsN/lMwuYmv6Y2tsnuUFfHb+bP4=
Subject key identifier:   90:27:F7:F3:FE:DE:D3:97:C3:56:26:91:5A:76:75:44:A4:5C:1F:BA
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0912
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/kCf38_7e05fDViaRWnZ1RKRcH7o.roa
Signing time:             Tue 31 Mar 2026 07:44:45 +0000
ROA not before:           Tue 31 Mar 2026 07:44:45 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        210.254.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2322 (0x912)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:44:45 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=9027F7F3FEDED397C35626915A767544A45C1FBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2c:c6:c6:1a:b4:fa:ec:29:12:1f:11:08:30:
                    ce:aa:95:40:cf:13:5c:2d:95:dc:fe:57:ff:0b:ea:
                    97:26:2c:1b:65:24:39:6c:e4:76:bc:79:4b:66:50:
                    e1:45:12:04:ed:8d:7a:24:51:cc:3c:90:72:17:52:
                    bc:3d:3d:78:39:e0:39:15:23:ef:f3:8c:22:66:5c:
                    cc:75:82:67:22:94:ac:7d:5e:25:f3:a4:18:6e:fc:
                    d0:6f:6e:53:6b:c2:01:09:e7:3a:c3:66:34:f9:1d:
                    3a:ae:88:28:74:a0:aa:4d:bf:86:1d:32:4a:6a:b4:
                    ae:3c:1a:59:3a:a7:b7:d3:b8:de:58:b8:6c:09:f3:
                    89:7b:9a:47:62:2d:c4:72:a5:de:35:30:fd:84:02:
                    73:e3:a3:01:9d:bf:a8:45:e5:52:ed:00:00:8d:eb:
                    50:e7:68:4f:65:22:88:10:bb:b3:32:88:e5:43:95:
                    03:c3:93:52:6d:ca:4a:3e:e1:c7:9a:bf:6e:45:17:
                    a7:fc:30:59:7c:38:ce:d6:fd:f6:41:62:a5:3c:3a:
                    86:2a:b2:90:07:27:3c:0d:4b:ed:73:5a:43:b7:b6:
                    da:26:f3:e6:81:34:71:1c:c0:f8:b6:3c:e5:77:0b:
                    bf:d5:52:7b:3f:89:ca:fa:b7:d1:56:12:0b:fb:6a:
                    69:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:27:F7:F3:FE:DE:D3:97:C3:56:26:91:5A:76:75:44:A4:5C:1F:BA
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/kCf38_7e05fDViaRWnZ1RKRcH7o.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.254.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         30:6d:81:9b:ef:36:7d:c9:56:e3:ad:d9:0c:fb:37:83:cd:07:
         f6:04:8f:b7:51:6a:5e:59:ee:c8:8b:47:7e:a9:de:ab:75:c0:
         fb:88:71:f6:5e:e8:92:02:38:71:9d:1c:99:14:8b:67:da:07:
         79:4c:15:cb:35:a5:3d:23:b0:e6:31:49:d0:7f:a9:b8:c6:78:
         b5:ed:88:2f:a1:12:0f:e8:de:04:27:5e:78:39:ca:7b:5c:84:
         21:17:75:5a:87:99:e1:99:3e:b2:58:bb:9e:3b:cc:8e:15:ca:
         ee:e4:95:87:ce:7b:dd:ec:21:59:6c:b1:66:4a:db:69:b0:c2:
         2c:13:f7:fb:ee:18:7b:7b:89:79:8a:39:b4:66:f8:8d:a0:5c:
         92:40:e9:e4:2b:38:e6:cb:df:c0:9f:0c:ef:55:76:ee:55:0f:
         16:ff:42:44:ae:26:f0:f1:6f:93:a9:62:92:b5:5a:59:83:28:
         de:cd:11:4c:0f:5a:f3:df:4c:1d:20:1c:91:11:38:04:9a:aa:
         1f:7b:2d:39:4b:e7:39:c5:5c:17:56:db:25:a0:2a:03:41:36:
         90:8c:20:27:6b:c5:da:03:dd:5e:74:76:65:65:9d:66:a1:06:
         fd:27:52:aa:aa:d2:ef:55:93:c1:74:13:89:c3:17:c0:5f:45:
         55:f0:44:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:13:42 2026 by rpki-client