Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/qGkyUOWchD0FurlSkq-VgNH4ytk.roa
File:                     qGkyUOWchD0FurlSkq-VgNH4ytk.roa (raw, json)
Hash identifier:          0iaoJDQYfdFveVnhgS1DV89c4qq2S8SDUtgmq4HGOig=
Subject key identifier:   A8:69:32:50:E5:9C:84:3D:05:BA:B9:52:92:AF:95:80:D1:F8:CA:D9
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       07C8
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/qGkyUOWchD0FurlSkq-VgNH4ytk.roa
Signing time:             Tue 31 Mar 2026 07:42:07 +0000
ROA not before:           Tue 31 Mar 2026 07:42:07 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        118.159.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1992 (0x7c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:42:07 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A8693250E59C843D05BAB95292AF9580D1F8CAD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:85:98:8e:84:0f:63:27:bb:c8:ee:66:99:b8:
                    1e:23:79:0e:c7:32:da:a5:4f:27:61:b0:40:eb:86:
                    47:c0:c7:4b:7b:4f:32:99:d3:53:c3:e7:49:d7:26:
                    fa:56:53:cf:ab:46:87:61:13:e3:88:ff:a8:6d:43:
                    06:98:44:6b:72:84:9d:fc:d9:07:79:ae:d4:56:19:
                    3c:2d:fb:13:be:d5:2d:e8:7a:dc:4a:01:7f:f3:94:
                    08:ad:d9:36:9a:fe:9a:7d:70:99:a6:a7:fc:49:8e:
                    7d:e4:fa:f8:f5:38:86:12:85:38:03:cc:0b:a6:62:
                    77:0b:68:c8:45:9b:82:1b:9c:5b:79:1c:a0:e5:83:
                    50:bf:c4:52:99:8c:ac:c1:51:5a:79:cb:67:f8:14:
                    68:27:18:b3:da:f9:b5:a0:65:7d:3e:fc:59:a0:46:
                    66:4a:ed:df:78:a5:09:97:dc:20:88:df:e8:1e:3c:
                    24:98:8d:57:51:88:3f:59:84:3d:01:1f:7c:57:6c:
                    92:5c:5e:f1:99:77:9e:79:ca:fa:e0:1d:c0:c0:d1:
                    38:6e:2a:87:ba:55:98:9c:e0:a1:4c:6b:bb:e5:5c:
                    aa:53:e4:33:39:6f:13:33:cc:12:76:2b:78:18:96:
                    74:a6:81:4c:58:fc:cc:bf:9a:96:bd:7a:e1:55:0d:
                    eb:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:69:32:50:E5:9C:84:3D:05:BA:B9:52:92:AF:95:80:D1:F8:CA:D9
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/qGkyUOWchD0FurlSkq-VgNH4ytk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.159.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         74:17:41:df:e1:39:9d:bc:75:e3:1a:23:2b:67:4e:50:a2:ed:
         1c:5f:3b:52:e4:06:27:88:e1:7d:76:57:2b:f5:6a:c0:17:a2:
         29:7c:f5:d5:60:46:3e:6d:8a:c9:e6:99:d5:7e:5d:2b:43:cd:
         9c:02:38:e0:94:52:b1:91:3a:2d:08:9e:91:e6:f5:28:ed:53:
         0d:f9:cc:37:05:ac:ac:4d:81:2a:48:95:0e:12:cf:dd:ae:87:
         8f:af:82:ec:d9:f2:63:22:e4:2b:2a:3e:ad:74:fc:1c:a9:b9:
         ab:db:d8:f8:64:81:3c:2a:19:40:93:38:ed:b4:9e:38:f3:4d:
         76:f2:86:27:18:81:fb:cd:de:57:ae:39:ee:2e:84:94:98:82:
         28:70:6d:08:ad:fc:bd:d7:f9:7e:af:18:a2:8b:ec:83:95:a3:
         6e:1e:a1:06:5f:a1:ea:a4:4a:0f:1d:aa:3b:9e:92:3a:49:5b:
         14:0a:10:b1:d2:21:e8:ec:51:0e:46:52:07:21:e8:40:a6:91:
         5e:67:e9:91:03:5d:b9:14:2c:11:79:06:59:a6:b5:1f:f0:ee:
         f3:f3:68:eb:96:3d:65:54:7d:79:fa:c9:2b:0f:0d:01:7d:7d:
         04:66:c8:19:f0:53:86:c8:11:cd:23:2d:0d:13:f3:78:e9:f8:
         00:c9:32:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:13:21 2026 by rpki-client