Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/o5g2SDNRVB7n4jJv6JZo52m9qRc.roa
File:                     o5g2SDNRVB7n4jJv6JZo52m9qRc.roa (raw, json)
Hash identifier:          H97+V86mrmOLO/AbqpZPqSIcRQGNMs7pQBWRB0Afd98=
Subject key identifier:   A3:98:36:48:33:51:54:1E:E7:E2:32:6F:E8:96:68:E7:69:BD:A9:17
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       08EE
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/o5g2SDNRVB7n4jJv6JZo52m9qRc.roa
Signing time:             Tue 31 Mar 2026 07:44:31 +0000
ROA not before:           Tue 31 Mar 2026 07:44:31 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        210.250.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2286 (0x8ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:44:31 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A39836483351541EE7E2326FE89668E769BDA917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:77:84:be:55:df:92:4f:a0:64:9b:16:b2:6a:
                    19:e4:69:b2:f6:b9:2d:9a:d0:07:38:42:2c:cc:c5:
                    59:19:ef:62:ed:ed:f4:1d:49:86:a2:28:0d:23:08:
                    42:98:57:1c:6c:84:0d:5f:4e:8f:53:93:43:3e:c8:
                    9c:2a:8c:4e:98:f2:76:ef:00:09:09:02:24:0e:5d:
                    99:64:c5:f2:ac:0d:7c:d3:87:ba:91:a1:c1:72:05:
                    12:ca:9c:94:77:a2:8a:97:3a:da:d5:af:57:7b:62:
                    56:88:30:0f:48:3c:4f:c3:0d:fd:a3:e9:0d:6c:42:
                    ef:52:3d:7a:aa:8a:6a:f7:7b:77:8e:41:13:64:5e:
                    43:6c:c1:de:ab:8d:c7:85:cd:e2:72:7a:94:e0:30:
                    1a:fe:78:52:d5:e4:c3:7e:31:be:02:9e:75:24:24:
                    a6:28:ad:52:05:5e:d2:1e:b7:06:3a:17:5f:dc:8c:
                    74:0c:f8:66:aa:32:59:93:ba:56:f9:0c:e4:c2:28:
                    9e:89:84:bb:34:21:6b:63:86:c7:81:02:8b:58:56:
                    be:f9:43:b4:bd:f8:ac:3d:c4:de:a7:c2:45:30:e6:
                    c2:d9:c8:0c:61:bc:b8:96:cf:a0:f8:6d:9f:15:da:
                    15:94:8e:09:ff:81:54:5f:d3:23:3b:ec:d4:88:ca:
                    b5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:98:36:48:33:51:54:1E:E7:E2:32:6F:E8:96:68:E7:69:BD:A9:17
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/o5g2SDNRVB7n4jJv6JZo52m9qRc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.250.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:15:93:bf:3d:13:37:8a:e0:ce:05:4b:97:bb:ae:59:87:71:
         e6:20:f3:b3:b3:fc:8b:db:cc:a0:79:50:1f:bf:93:c4:88:45:
         c3:50:41:71:93:84:93:96:f7:2e:77:73:3b:ae:c3:d6:0a:7f:
         a6:6f:0d:fb:b6:22:2a:bc:ea:38:66:7a:53:4d:84:e9:94:6d:
         ca:44:6f:1e:e1:3e:8a:a7:0b:68:97:68:f9:be:1b:37:25:b8:
         e9:6b:46:22:13:ca:1d:0f:da:4b:80:a3:e3:d7:2b:fa:8f:fd:
         83:ae:17:cf:89:e1:73:b6:8b:88:4c:37:03:23:d2:5a:6f:f9:
         1a:5e:72:b9:87:78:27:1d:ed:58:db:d2:ee:25:a2:32:e0:fa:
         05:78:b9:38:1b:56:0c:53:63:d1:93:f1:1c:c2:8d:d8:1c:f0:
         b0:4d:b2:d0:b4:c1:f3:c7:ef:18:81:51:e2:bb:2b:59:8f:a4:
         e8:88:2e:18:18:88:24:43:e8:36:d6:6e:24:7b:38:49:5a:c9:
         2a:99:f3:d0:f1:59:47:6e:bd:56:0f:44:bf:2f:d0:c5:22:74:
         c9:b9:59:21:e7:33:f6:1c:f9:a0:85:bc:a1:50:13:e5:e8:78:
         cd:35:6e:53:73:8d:a1:5d:fd:a0:01:3c:f1:32:2a:1c:9d:c8:
         9f:8b:28:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:27:35 2026 by rpki-client