Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/oLKp4km3SO1it7y2hHf6LD1MKnA.roa
File:                     oLKp4km3SO1it7y2hHf6LD1MKnA.roa (raw, json)
Hash identifier:          eRXtgPHlYkkqHc1HqbEF3BujoakWrN6JPJ/0Fdgkzss=
Subject key identifier:   A0:B2:A9:E2:49:B7:48:ED:62:B7:BC:B6:84:77:FA:2C:3D:4C:2A:70
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0830
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/oLKp4km3SO1it7y2hHf6LD1MKnA.roa
Signing time:             Tue 31 Mar 2026 07:42:58 +0000
ROA not before:           Tue 31 Mar 2026 07:42:58 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        119.105.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2096 (0x830)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:42:58 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A0B2A9E249B748ED62B7BCB68477FA2C3D4C2A70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b0:f5:14:21:9e:c5:ef:73:a0:f3:25:0a:bf:
                    6f:e0:20:6e:4d:89:29:51:93:f7:e6:5a:d9:9f:0c:
                    80:16:dd:19:42:ba:83:3e:c2:9e:bd:bc:b4:94:08:
                    d6:b0:73:a6:a6:8e:ad:fa:ab:6b:58:7e:a7:fa:c7:
                    ec:2f:1e:ad:ee:11:96:52:6c:83:df:df:2a:69:5e:
                    f0:46:10:1e:92:d8:24:c8:40:18:96:3d:05:ef:8c:
                    04:62:c4:7b:2a:83:a3:a8:66:11:00:5c:65:1a:da:
                    da:08:f6:40:ea:e9:90:f2:5a:34:12:7c:c3:a5:68:
                    35:76:e9:69:a6:fa:de:e8:da:3c:a2:e0:fd:a4:81:
                    90:b3:b9:7b:17:7d:be:5d:08:ea:92:ac:5a:9d:cd:
                    63:2a:9e:a6:64:f2:87:d9:2e:17:92:c1:74:37:95:
                    58:20:35:ae:69:38:e6:57:69:03:62:cd:0a:50:61:
                    4b:39:d8:2d:0a:5d:25:b0:c5:ef:22:4f:20:cc:8a:
                    8e:d1:ef:3f:7f:8d:ef:09:76:c9:bb:0d:b5:64:3e:
                    ba:e3:d0:ad:00:34:57:49:51:25:c2:87:b9:83:f2:
                    b6:5c:31:71:55:f9:be:4b:c9:8c:2c:bc:fb:f9:d1:
                    77:d6:69:33:df:a9:37:b7:72:0c:08:bd:4d:16:80:
                    9a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:B2:A9:E2:49:B7:48:ED:62:B7:BC:B6:84:77:FA:2C:3D:4C:2A:70
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/oLKp4km3SO1it7y2hHf6LD1MKnA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.105.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         46:2a:77:23:48:d9:2b:a2:55:ec:cc:c8:67:0d:78:15:08:8a:
         f1:a0:f4:ce:14:8e:d7:56:05:f7:51:1f:1e:81:25:fd:12:d5:
         c8:13:39:e1:03:85:d6:2a:04:91:9c:50:8e:a7:ea:c2:e9:3f:
         5c:19:58:3d:b2:be:87:73:4a:a0:55:1e:1d:7a:35:ca:f9:75:
         fa:2e:fc:dc:0b:13:5f:79:e4:78:61:6c:c5:3b:fa:6e:75:71:
         01:08:80:84:f7:11:94:1e:7a:fd:d6:fa:2a:63:16:66:c1:09:
         98:95:2f:5d:1e:63:13:99:f5:57:58:39:7c:6f:c8:26:fc:25:
         d7:01:0f:6b:66:75:5f:ba:cd:39:9f:1a:59:d1:89:af:de:2e:
         a4:63:bd:a4:10:04:13:cf:72:62:04:0d:4a:bb:d6:c6:74:f9:
         c7:39:9b:73:1e:b5:ce:bb:bb:bd:fb:00:4b:1d:72:49:95:22:
         d9:96:44:d3:82:15:74:4c:2c:75:a7:de:36:2d:fc:a4:f5:61:
         ec:8e:8f:b6:4a:37:4d:4d:14:34:e6:1d:7c:bf:1a:c9:01:a3:
         6f:11:f1:74:98:82:e1:d3:66:0b:54:1b:b2:ab:dc:af:6b:9c:
         1c:78:3a:82:fc:42:fd:7f:5a:30:36:85:91:a3:09:6e:3d:5b:
         f1:24:df:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:13:34 2026 by rpki-client