Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/qXDFNol6ETy_rIqEACTpxKttgfo.roa
File:                     qXDFNol6ETy_rIqEACTpxKttgfo.roa (raw, json)
Hash identifier:          PXcq1LvyuQ/pNyVBaGB8bfzlgKoL0q8nfw4ManoqF8k=
Subject key identifier:   A9:70:C5:36:89:7A:11:3C:BF:AC:8A:84:00:24:E9:C4:AB:6D:81:FA
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0906
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/qXDFNol6ETy_rIqEACTpxKttgfo.roa
Signing time:             Tue 31 Mar 2026 07:44:40 +0000
ROA not before:           Tue 31 Mar 2026 07:44:40 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        210.143.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2310 (0x906)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:44:40 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A970C536897A113CBFAC8A840024E9C4AB6D81FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ec:9a:b8:6b:85:88:43:97:d5:d3:2c:4d:0b:
                    2d:25:36:e0:86:4b:24:07:eb:5c:e2:e5:1f:15:38:
                    3f:24:dc:e7:42:13:91:de:00:5d:89:2b:e3:56:39:
                    7e:46:51:85:b5:44:34:c9:81:1b:db:27:3d:15:eb:
                    87:0f:2c:25:a1:3b:a9:37:3d:ac:59:0e:08:9d:29:
                    af:dd:f8:d1:93:41:99:05:3e:08:70:b1:49:13:99:
                    04:9d:58:b4:92:c3:d1:2c:00:cb:09:26:56:64:61:
                    2f:94:92:74:10:ff:a4:85:7d:11:32:c4:92:e2:56:
                    7a:47:be:dc:c3:46:03:ac:41:d1:7d:1f:d0:c7:de:
                    ec:dc:fd:2c:5a:c9:d5:34:51:a2:f9:a4:8e:82:0d:
                    c4:7d:44:41:1c:48:a1:be:24:65:14:ae:80:87:58:
                    bf:a6:0e:4f:71:0c:81:6c:13:9a:36:77:26:9e:78:
                    84:0f:e1:3c:68:c4:60:0b:94:ab:7e:9e:1a:d4:cd:
                    c4:1c:56:d7:5e:7e:03:48:4c:65:4c:04:bb:33:c5:
                    d9:c2:76:0c:82:7f:45:44:11:0c:02:ef:95:53:ed:
                    9c:73:b7:79:9f:39:a3:2c:6b:73:cd:6d:58:9c:0a:
                    25:6d:ea:78:79:ca:4d:f5:9c:77:11:ee:0a:73:4f:
                    a2:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:70:C5:36:89:7A:11:3C:BF:AC:8A:84:00:24:E9:C4:AB:6D:81:FA
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/qXDFNol6ETy_rIqEACTpxKttgfo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.143.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         63:18:d8:04:81:18:73:4b:d3:dd:b6:c3:79:c4:7a:58:54:59:
         ab:84:d6:c1:52:9f:70:81:ce:54:2b:2b:f5:bc:52:9f:47:16:
         76:95:e3:25:34:cc:7f:c1:b3:2d:1c:3f:71:ab:01:67:c1:ef:
         9c:5a:42:59:d4:72:73:9a:6f:a9:42:55:32:08:c3:fb:0c:33:
         a5:f4:cc:6d:2d:8d:fe:28:22:85:1e:dd:a8:08:9f:a0:e2:d9:
         02:6e:33:45:ff:77:cc:7d:97:45:33:c6:c1:c7:9b:f4:73:86:
         88:eb:17:a4:c5:88:07:53:53:a2:1c:04:4f:7d:11:91:43:ac:
         8f:c0:99:0b:2f:93:66:74:89:70:52:1a:ca:05:20:cc:f1:77:
         ee:93:a1:b1:16:a9:1c:fa:63:5f:da:de:1a:e6:7f:cf:4f:31:
         a1:6b:cd:a9:52:db:2e:be:2b:73:48:9c:7f:35:8d:af:f1:f0:
         11:bf:2e:e9:a9:73:76:38:b0:1e:f0:a8:93:02:fa:89:63:41:
         12:f1:70:a8:97:fa:38:2f:16:b1:2a:d6:f7:48:8c:b5:36:83:
         8b:b5:f5:27:65:04:d9:49:ad:47:57:c6:ff:c0:9b:6b:81:6c:
         4e:35:09:8f:da:8a:7f:01:2e:99:b2:9b:20:e5:b2:86:f0:da:
         51:7d:58:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:48 2026 by rpki-client