Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/kf_AslUHDbG99SDkRnhZYA6dfK8.roa
File:                     kf_AslUHDbG99SDkRnhZYA6dfK8.roa (raw, json)
Hash identifier:          wy/56DEzgyJnTlY0lfiEm4fFNJWntZ+uNy2cicms8EY=
Subject key identifier:   91:FF:C0:B2:55:07:0D:B1:BD:F5:20:E4:46:78:59:60:0E:9D:7C:AF
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       08A2
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/kf_AslUHDbG99SDkRnhZYA6dfK8.roa
Signing time:             Tue 31 Mar 2026 07:43:56 +0000
ROA not before:           Tue 31 Mar 2026 07:43:56 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        210.233.122.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2210 (0x8a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:43:56 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=91FFC0B255070DB1BDF520E4467859600E9D7CAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:91:88:0a:73:9a:b3:1e:30:e8:6d:7c:98:d8:
                    11:42:d9:a1:b3:de:1b:77:86:65:17:69:28:96:eb:
                    1e:a5:c4:85:3e:62:8b:3c:42:b3:59:ef:3c:dd:8b:
                    40:f6:5f:64:af:25:2c:c2:ce:7f:05:ce:57:aa:ca:
                    71:f6:6b:a7:d1:29:a9:d8:b1:32:c7:a1:cd:56:1b:
                    54:79:bb:7a:e3:ec:bc:7b:4c:1d:5b:a9:bc:8b:57:
                    c2:6f:a4:aa:2d:d2:ec:30:7a:4d:d9:3d:15:3c:f6:
                    7c:d9:c0:26:ff:d0:93:c3:4a:f3:bf:56:f2:64:fc:
                    5d:4a:59:d4:ba:55:fa:3e:34:06:e9:d2:3f:9a:14:
                    d9:68:fa:0b:e4:ee:a7:4d:97:22:0f:80:5a:b9:8a:
                    19:7f:c9:99:ab:49:75:22:d1:1c:fd:b6:65:4f:64:
                    e0:32:71:14:f3:51:f2:81:7f:a7:4d:8b:9b:f0:55:
                    d3:a5:d1:fd:4c:41:9b:40:62:23:f7:e2:bc:f3:27:
                    97:6d:ed:a4:58:8a:b2:f8:34:79:96:a8:b3:8f:37:
                    c9:8d:8c:7e:2f:d5:7d:ca:52:46:6e:39:a4:0c:86:
                    6e:ca:fc:8d:10:33:5e:51:24:84:4f:6f:1c:a9:f7:
                    43:09:9f:6f:cb:be:cd:7c:89:c5:21:a6:c1:20:3f:
                    b1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:FF:C0:B2:55:07:0D:B1:BD:F5:20:E4:46:78:59:60:0E:9D:7C:AF
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/kf_AslUHDbG99SDkRnhZYA6dfK8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.233.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:25:79:f6:46:a4:62:b3:cb:cb:bc:dd:43:fc:bd:3d:1a:94:
         97:b6:77:20:92:e1:90:b5:4e:3b:d0:78:cc:29:73:da:b2:40:
         5a:95:c5:f1:67:6d:ae:6b:2b:5b:97:3e:3a:01:78:1f:0b:73:
         bc:f1:b3:4c:4d:21:58:82:83:15:91:ab:2b:9a:24:e2:34:0e:
         8e:c4:2e:fc:11:c8:9d:31:45:ed:3d:f3:30:8a:f4:13:da:9a:
         59:70:54:3a:3a:83:41:5c:da:48:1a:ae:58:36:57:04:ef:1e:
         2f:1d:26:8c:24:47:6e:bb:aa:30:72:e0:3a:f1:26:c7:35:68:
         95:1d:eb:53:05:fd:4f:19:89:ce:aa:f1:b5:ce:4a:45:2c:8f:
         9f:c6:39:87:76:86:71:18:e5:15:f1:87:69:40:36:3f:78:bc:
         c0:74:b7:1f:e3:ff:d0:82:d9:ef:aa:ed:45:66:fe:df:dd:64:
         d1:e1:d7:3c:cc:68:a5:c2:90:d7:3d:ca:0c:65:4f:ee:a7:47:
         5b:e0:8b:f5:13:80:2c:45:c2:2b:92:9d:9f:99:84:69:84:9e:
         94:00:5d:90:f1:7a:8d:94:15:f2:9a:8b:39:55:3e:d2:dc:6a:
         15:41:15:ad:34:ab:33:c6:12:27:23:1f:a7:fb:47:35:7c:af:
         56:b4:53:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:13:20 2026 by rpki-client