Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/nsC97J-auM91C9_Xnz_JN0Rd65M.roa
File:                     nsC97J-auM91C9_Xnz_JN0Rd65M.roa (raw, json)
Hash identifier:          OBiDB6oYi5Gp1rDU953FN39RNCcyIKBSLk2jz/t9eI0=
Subject key identifier:   9E:C0:BD:EC:9F:9A:B8:CF:75:0B:DF:D7:9F:3F:C9:37:44:5D:EB:93
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0920
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/nsC97J-auM91C9_Xnz_JN0Rd65M.roa
Signing time:             Tue 31 Mar 2026 07:44:51 +0000
ROA not before:           Tue 31 Mar 2026 07:44:51 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131933
IP address blocks:        14.14.144.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2336 (0x920)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:44:51 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=9EC0BDEC9F9AB8CF750BDFD79F3FC937445DEB93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:cb:77:ba:eb:14:d8:f8:53:9b:ad:a1:d3:11:
                    48:75:63:2b:a7:37:6b:9f:98:91:6d:f4:0f:69:1d:
                    a7:c8:9d:4b:22:82:bd:b0:05:e9:74:81:d3:27:7e:
                    c8:6e:17:14:a3:d9:8e:88:d4:cc:96:30:6a:6d:20:
                    31:13:6e:c7:d6:59:c5:a9:e4:48:d0:68:74:6c:50:
                    e8:30:35:cf:fe:06:82:08:6c:4d:88:46:f0:7b:4e:
                    2e:e8:de:f2:be:fd:62:ca:19:dc:07:e6:55:df:d1:
                    2d:8a:ae:18:27:9e:d2:80:d0:c7:da:07:be:b5:e6:
                    54:25:1a:00:99:2a:5e:a6:c8:e9:2d:6e:ae:96:1c:
                    6a:20:a4:48:4a:7d:5d:f2:73:5f:03:c1:29:9b:fd:
                    65:96:ca:fb:a5:2a:a1:95:f1:c5:48:37:d3:5a:c4:
                    d4:34:9e:30:22:e6:47:93:d2:f6:05:d4:bc:71:82:
                    a6:69:95:02:e0:59:fd:74:40:05:5c:f2:97:68:a2:
                    b5:83:f6:91:e4:14:ff:81:47:32:fe:d2:3d:cd:69:
                    13:e4:73:fb:ac:03:e5:3b:89:a5:10:99:25:fd:5e:
                    90:10:ef:82:ee:93:f4:26:e6:4b:85:95:20:4f:b5:
                    dd:92:14:5a:06:c0:ec:ad:45:b3:ab:96:b1:38:25:
                    76:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:C0:BD:EC:9F:9A:B8:CF:75:0B:DF:D7:9F:3F:C9:37:44:5D:EB:93
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/nsC97J-auM91C9_Xnz_JN0Rd65M.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.14.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5d:0b:e7:e8:27:da:a5:26:20:32:29:81:85:1f:a4:62:d9:80:
         4b:55:d5:f5:59:70:d3:5a:04:e7:4c:11:92:bc:5f:09:5b:19:
         3c:31:1e:fd:78:c0:17:60:9d:22:2e:8c:01:6c:02:e7:f8:ed:
         93:55:79:9b:10:b7:43:2f:12:b8:1e:2c:a1:d0:b0:fd:29:70:
         6a:0a:37:4e:84:67:49:1e:f0:4d:0f:5f:24:74:f6:4d:ca:cc:
         8d:18:31:30:48:f6:b4:8f:c0:a9:fb:53:2a:5d:ad:eb:52:fa:
         19:3c:79:eb:de:bd:91:c9:86:52:5a:45:80:c2:51:bd:a1:bc:
         0e:0e:61:fe:22:9b:a7:39:50:f9:1a:b5:1c:44:3e:8b:80:cf:
         b7:f2:62:3d:b2:cc:2f:4f:fb:21:3d:13:5b:24:9f:ee:7b:dc:
         5a:2f:eb:58:36:ee:d8:7b:b0:b7:a2:bd:8b:79:01:bc:f1:9c:
         24:b4:2e:0c:c0:65:24:4f:46:f8:b8:1a:69:f7:8c:f5:4d:55:
         f1:22:66:87:39:d9:9a:18:28:be:45:41:81:eb:95:4b:4f:94:
         20:2d:ee:93:c7:a1:ca:82:86:3b:45:92:5a:20:fe:8e:7c:ee:
         c3:08:09:01:0c:9e:40:ba:21:ea:14:c3:32:77:db:eb:1a:64:
         bc:ed:4d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:36:56 2026 by rpki-client