Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/qY-OSEDfj866HpqbFKJi_4Iuov0.roa
File:                     qY-OSEDfj866HpqbFKJi_4Iuov0.roa (raw, json)
Hash identifier:          llC59qJuv/e6N3k3HYQ8Kfi2KtpmUcMoDdorbPv80wQ=
Subject key identifier:   A9:8F:8E:48:40:DF:8F:CE:BA:1E:9A:9B:14:A2:62:FF:82:2E:A2:FD
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       08C5
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/qY-OSEDfj866HpqbFKJi_4Iuov0.roa
Signing time:             Tue 31 Mar 2026 07:44:13 +0000
ROA not before:           Tue 31 Mar 2026 07:44:13 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        211.9.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2245 (0x8c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:44:13 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A98F8E4840DF8FCEBA1E9A9B14A262FF822EA2FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:b4:ca:b1:a4:06:75:43:9a:27:42:aa:8d:68:
                    84:aa:d7:be:f2:55:6a:60:03:5a:74:4d:eb:ca:4c:
                    d3:42:b0:bd:e4:f5:06:f4:cb:b3:84:24:a8:b7:85:
                    47:fc:0c:4f:f7:5b:23:79:38:f9:c4:c8:02:1c:a2:
                    95:05:40:9b:ad:3d:fa:d5:e0:d9:46:e1:71:7a:66:
                    50:3b:a8:c5:40:61:e8:0d:50:22:b3:4a:26:a9:d7:
                    06:d3:8b:e0:5b:e1:6a:c7:10:57:24:06:d6:48:5a:
                    a9:f2:e2:cb:f6:19:66:fe:fe:03:26:23:02:a9:44:
                    25:a9:3e:6c:bf:7a:74:44:8d:64:e0:2a:4a:2c:cd:
                    17:05:96:b9:bf:a9:f3:5a:d6:ee:8a:04:26:0b:2c:
                    a9:d0:2b:ab:20:57:9e:87:50:3c:e4:d8:3c:2a:f6:
                    61:0b:3e:49:cb:37:6f:17:33:ea:cb:2a:58:5e:4d:
                    5f:a9:b9:54:f9:77:c3:63:70:84:17:b0:2a:46:9f:
                    eb:b1:cd:9b:2c:f5:2d:e6:b7:d7:73:59:7e:e5:66:
                    42:53:71:8a:e4:75:12:60:95:45:9a:d2:16:98:e4:
                    36:43:39:f0:71:7f:ed:66:b5:58:ec:22:98:22:23:
                    1d:da:ac:6d:f9:b5:dd:8a:ed:63:55:36:25:dc:ca:
                    d2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:8F:8E:48:40:DF:8F:CE:BA:1E:9A:9B:14:A2:62:FF:82:2E:A2:FD
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/qY-OSEDfj866HpqbFKJi_4Iuov0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.9.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:e4:f0:b0:53:59:47:b2:f4:b6:e6:a5:8f:d3:ce:95:2a:c6:
         07:97:ac:bb:84:93:8a:6c:ce:dd:3e:87:ec:2b:d4:26:fb:0d:
         f7:14:45:7e:dc:79:58:b4:7b:b6:02:fc:69:e5:fc:93:cc:40:
         c0:f7:f1:64:55:e7:d1:83:86:ad:71:2a:fe:d9:a2:d0:72:b8:
         e7:95:2a:59:1f:7a:c0:96:9a:a4:92:b1:6b:68:d8:d1:08:e4:
         54:62:a8:0a:1c:e9:45:65:40:2c:9c:ba:63:f3:fe:63:a4:38:
         96:6d:02:95:02:b5:72:79:5c:b3:62:c2:56:29:48:d8:fa:aa:
         02:1a:e2:8a:a5:82:06:f1:6c:93:22:66:0f:91:52:7c:d5:1f:
         4b:8f:00:a1:62:a4:6a:56:15:a5:2a:16:66:9c:a4:a0:e4:34:
         93:0c:25:ad:dc:b0:a8:46:99:c6:4a:77:34:33:e0:24:16:83:
         4c:2d:e3:57:eb:11:45:69:07:a1:bf:25:8b:f4:58:7c:a5:d7:
         b2:69:ac:67:9e:a5:59:bb:41:aa:f7:50:14:d4:4c:e9:3e:7e:
         5f:ab:07:b4:a9:fc:79:19:6f:60:35:46:ca:6b:8e:64:2a:93:
         36:bd:74:60:5d:d9:f4:df:32:ce:3b:fb:21:79:8a:2b:a2:29:
         72:f1:23:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:57:42 2026 by rpki-client