Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/kId7Y4lXohzpvdo3hp-udbQwVgM.roa
File:                     kId7Y4lXohzpvdo3hp-udbQwVgM.roa (raw, json)
Hash identifier:          CWEwsLZJ/fmkA0bQRVNs0OvxPz4YPDQwV/otDfytb2c=
Subject key identifier:   90:87:7B:63:89:57:A2:1C:E9:BD:DA:37:86:9F:AE:75:B4:30:56:03
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       090E
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/kId7Y4lXohzpvdo3hp-udbQwVgM.roa
Signing time:             Tue 31 Mar 2026 07:44:43 +0000
ROA not before:           Tue 31 Mar 2026 07:44:43 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        211.125.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2318 (0x90e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:44:43 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=90877B638957A21CE9BDDA37869FAE75B4305603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:30:80:7c:4c:d1:95:df:f9:fb:bd:da:bd:da:
                    6d:7e:33:01:4f:df:90:a4:a2:6f:30:54:22:cd:7f:
                    ca:ec:16:7c:1c:d2:2f:86:b4:7a:f2:ee:83:6b:f4:
                    f6:2d:d1:0c:e6:9a:d7:55:d5:50:83:b8:d1:c1:1c:
                    fc:7e:80:49:68:12:dc:e5:c3:02:1d:95:30:b5:58:
                    43:c3:40:3c:2c:65:06:d5:5a:eb:69:d0:33:bc:9b:
                    b9:14:76:1b:45:31:9c:24:53:cc:8c:63:a6:e2:cd:
                    5c:ca:b8:89:8f:4a:ff:ac:c5:06:27:84:1d:b2:ab:
                    26:8f:a9:89:bf:56:11:f2:b1:e0:7c:dc:59:f1:d3:
                    cf:2b:9c:bd:84:a6:dd:d0:52:69:c7:4d:7e:ce:17:
                    17:1a:d8:9b:65:65:94:ce:f4:06:aa:bf:34:59:20:
                    69:52:ec:34:ec:b9:b7:0f:37:7a:2e:22:76:5c:a9:
                    a4:2e:85:84:d5:03:f5:d6:33:9a:ec:84:7c:fa:de:
                    7b:89:ee:0e:76:7f:40:2a:75:7d:cb:d8:d5:9d:38:
                    8c:cf:db:f0:73:44:3d:45:45:b0:8b:cf:98:88:a7:
                    c9:9a:c2:a8:0b:71:d5:56:ed:6b:bd:46:75:66:c3:
                    42:a0:e7:1a:46:33:69:04:4a:fb:97:60:d9:2d:3e:
                    ff:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:87:7B:63:89:57:A2:1C:E9:BD:DA:37:86:9F:AE:75:B4:30:56:03
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/kId7Y4lXohzpvdo3hp-udbQwVgM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.125.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a8:a7:06:33:ca:d0:44:c9:fb:bf:80:11:f0:54:1d:b9:2b:9c:
         ed:20:c4:0e:6f:a5:2f:c8:8b:1e:fd:66:71:32:7a:dd:71:c8:
         c3:c2:e6:93:b8:b1:bb:f3:42:eb:68:4b:1d:fe:18:a8:31:43:
         c0:43:da:76:6f:b2:de:69:53:42:6e:82:c7:07:c4:23:15:d2:
         58:18:1e:0e:70:e2:03:4d:c0:95:51:50:7e:0b:29:61:f0:34:
         dd:c5:6c:17:80:27:bf:88:00:1d:80:46:4b:ed:9d:c6:79:58:
         2b:71:80:df:bb:d1:fe:54:98:2f:55:f9:15:14:e6:4a:7d:22:
         a9:8c:54:57:f0:29:e1:d9:eb:00:4d:38:42:98:ae:af:19:e7:
         46:42:c0:e9:04:f5:04:aa:51:08:6a:ee:9d:d2:34:0f:40:ff:
         76:87:d5:57:31:5c:8e:bf:e1:bf:f5:5d:77:90:62:1e:06:a4:
         c6:31:6a:74:87:c0:6f:9b:91:7c:68:4b:e5:f6:79:af:85:0a:
         5a:c8:6e:e7:60:03:c7:49:9c:93:db:5e:f1:5b:a7:ec:0e:2b:
         4c:d8:b9:66:d8:6f:5e:19:2e:f6:02:39:32:b1:28:74:89:9c:
         10:56:41:8a:fc:e7:15:ca:34:20:c4:1d:21:ee:2c:d4:e1:89:
         2a:5d:82:4c
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICCQ4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw
NzQ0NDNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDkwODc3QjYzODk1N0Ey
MUNFOUJEREEzNzg2OUZBRTc1QjQzMDU2MDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCjMIB8TNGV3/n7vdq92m1+MwFP35Ckom8wVCLNf8rsFnwc0i+G
tHry7oNr9PYt0QzmmtdV1VCDuNHBHPx+gEloEtzlwwIdlTC1WEPDQDwsZQbVWutp
0DO8m7kUdhtFMZwkU8yMY6bizVzKuImPSv+sxQYnhB2yqyaPqYm/VhHyseB83Fnx
088rnL2Ept3QUmnHTX7OFxca2JtlZZTO9AaqvzRZIGlS7DTsubcPN3ouInZcqaQu
hYTVA/XWM5rshHz63nuJ7g52f0AqdX3L2NWdOIzP2/BzRD1FRbCLz5iIp8mawqgL
cdVW7Wu9RnVmw0Kg5xpGM2kESvuXYNktPv/LAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUkId7Y4lXohzpvdo3hp+udbQwVgMwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTYxL2tJZDdZNGxYb2h6cHZkbzNocC11ZGJRd1ZnTS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXTfaAwDQYJKoZIhvcNAQELBQADggEB
AKinBjPK0ETJ+7+AEfBUHbkrnO0gxA5vpS/Iix79ZnEyet1xyMPC5pO4sbvzQuto
Sx3+GKgxQ8BD2nZvst5pU0JugscHxCMV0lgYHg5w4gNNwJVRUH4LKWHwNN3FbBeA
J7+IAB2ARkvtncZ5WCtxgN+70f5UmC9V+RUU5kp9IqmMVFfwKeHZ6wBNOEKYrq8Z
50ZCwOkE9QSqUQhq7p3SNA9A/3aH1VcxXI6/4b/1XXeQYh4GpMYxanSHwG+bkXxo
S+X2ea+FClrIbudgA8dJnJPbXvFbp+wOK0zYuWbYb14ZLvYCOTKxKHSJnBBWQYr8
5xXKNCDEHSHuLNThiSpdgkw=
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:04:03 2026 by rpki-client