Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/qkA4hNElBllxX2PqDAN77TXf1zM.roa
File:                     qkA4hNElBllxX2PqDAN77TXf1zM.roa (raw, json)
Hash identifier:          Wx0osKZO7a7yHZUaD+Vn7q7aAlhZ7rvxiWs0Pdm4BbM=
Subject key identifier:   AA:40:38:84:D1:25:06:59:71:5F:63:EA:0C:03:7B:ED:35:DF:D7:33
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       08DA
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/qkA4hNElBllxX2PqDAN77TXf1zM.roa
Signing time:             Tue 31 Mar 2026 07:44:22 +0000
ROA not before:           Tue 31 Mar 2026 07:44:22 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        210.188.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2266 (0x8da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:44:22 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=AA403884D1250659715F63EA0C037BED35DFD733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:c8:a6:59:76:f7:ee:1b:ab:8b:3f:66:ec:15:
                    22:80:64:db:6d:cf:ff:4a:ea:fd:f8:92:33:f5:c2:
                    6c:27:50:62:10:99:1d:69:f4:c0:d3:22:ef:66:72:
                    cb:51:65:de:65:fa:93:8e:d9:04:aa:c8:2d:79:24:
                    6f:f6:72:0e:20:3d:a7:88:c9:fd:08:86:6b:43:13:
                    84:84:a2:8e:0d:68:87:5e:69:b4:ae:b6:ee:93:69:
                    3b:12:11:a3:25:26:33:cc:33:c0:39:c1:8b:c1:82:
                    8e:2f:6f:25:61:09:9d:c0:3a:1b:ba:cc:bc:00:95:
                    16:27:63:e2:f0:bf:9e:de:3b:a8:2f:6d:0d:68:95:
                    92:1b:bb:48:39:5b:c4:44:ba:91:af:16:95:47:0b:
                    42:78:03:35:97:27:68:a6:e6:76:7b:94:80:2f:1c:
                    a9:2b:27:3d:ab:6d:26:58:12:41:6e:3d:20:2d:02:
                    a3:ac:f2:81:85:6c:43:a5:a1:b3:e8:4a:1c:2f:9d:
                    bc:48:ce:87:bb:e9:7a:10:ff:c1:59:96:cf:38:8c:
                    ab:cd:92:ba:80:e2:83:f9:7f:de:50:62:1d:ca:46:
                    e9:71:6d:4e:f3:fb:3a:49:55:47:58:2d:7c:56:65:
                    de:2f:82:e5:22:43:93:1c:51:0f:43:62:59:be:ff:
                    cc:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:40:38:84:D1:25:06:59:71:5F:63:EA:0C:03:7B:ED:35:DF:D7:33
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/qkA4hNElBllxX2PqDAN77TXf1zM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.188.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:9c:6d:d0:03:e6:10:45:6e:cc:ba:e5:f9:ea:35:23:0c:f3:
         3c:28:5b:97:e8:14:1c:ca:e8:17:35:e5:dd:35:42:ab:0d:c5:
         68:58:71:49:d5:db:66:d6:bc:19:58:bc:c4:c9:6d:d2:10:bb:
         ea:3c:96:78:7b:fa:7e:1c:4b:f3:ca:3f:a5:af:35:e0:fc:12:
         95:e6:8b:e7:4a:92:41:87:0b:bb:88:5f:1c:75:41:0e:80:15:
         78:fd:eb:e0:cd:67:2b:6f:71:5c:e2:10:c8:59:10:e4:22:6c:
         9a:89:1f:5e:0e:62:ea:cf:4d:94:b3:c6:18:a4:00:b9:e4:c3:
         66:87:bb:f7:26:ee:22:8e:2f:56:af:3b:54:b4:62:66:94:bf:
         06:88:69:91:32:1a:96:93:b8:48:8f:aa:30:64:a4:b4:c2:cc:
         06:69:35:63:46:39:44:d6:2c:e4:fa:0d:10:6b:e3:83:9c:08:
         9a:b2:07:d6:45:de:63:e9:8d:39:c5:d0:8c:bc:5d:6f:3d:98:
         59:c8:43:b4:7f:55:2b:ec:93:5b:f1:bd:c3:ba:91:24:c7:89:
         47:eb:40:c1:ea:a9:05:7d:b1:11:83:03:75:e6:7e:65:dd:fe:
         85:43:ab:2e:b6:38:41:18:09:2c:11:ce:ce:c3:33:9e:e1:f7:
         69:2e:ba:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:46:05 2026 by rpki-client