Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/rK_TkaWkqo6I4FKSODsER941sXI.roa
File:                     rK_TkaWkqo6I4FKSODsER941sXI.roa (raw, json)
Hash identifier:          0TupiTK/pz33bBRCxbmXbEbuoeSY+7iEDiUGMoIG/Lk=
Subject key identifier:   AC:AF:D3:91:A5:A4:AA:8E:88:E0:52:92:38:3B:04:47:DE:35:B1:72
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0898
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/rK_TkaWkqo6I4FKSODsER941sXI.roa
Signing time:             Tue 31 Mar 2026 07:43:52 +0000
ROA not before:           Tue 31 Mar 2026 07:43:52 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        211.10.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2200 (0x898)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:43:52 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=ACAFD391A5A4AA8E88E05292383B0447DE35B172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:07:3b:4b:74:45:dc:7a:9b:12:48:2d:5b:19:
                    0f:98:9c:cd:41:9c:c9:59:1c:c4:e2:01:67:62:5b:
                    39:de:6b:2d:f6:ab:94:88:00:4b:bb:08:5b:1c:66:
                    60:64:62:4b:52:68:57:d4:6a:34:8e:e7:28:ae:c3:
                    3f:b6:7e:2d:2a:19:3f:75:0b:89:d3:d6:42:92:bf:
                    27:04:5f:d9:4d:ef:8b:1d:d3:53:c3:79:c6:b2:d3:
                    97:f7:a9:78:90:5a:33:ec:1c:c5:71:b7:d7:5b:7f:
                    a5:99:3f:ac:2f:2f:3c:0a:72:20:78:16:f2:1f:14:
                    19:84:4b:24:92:36:de:5a:6c:3b:b0:14:0c:5b:d0:
                    5f:c3:81:fb:88:1c:cb:61:6f:41:25:f7:79:2e:06:
                    17:19:41:5c:b6:d6:82:e0:9d:7f:dc:3d:5f:15:53:
                    91:f6:02:cd:1a:80:5e:0f:83:1f:29:0b:8f:e3:6e:
                    7c:57:48:30:b4:17:33:d5:40:95:83:9b:5e:4c:94:
                    ec:36:1a:e5:a2:e4:57:06:27:97:e2:2d:89:40:94:
                    af:90:2b:29:53:94:46:74:38:d1:71:ac:da:41:f7:
                    f7:01:e5:ec:7c:00:69:d1:ac:c0:b4:d8:f4:03:f3:
                    0f:e4:04:0e:a9:1d:53:ab:6f:b1:59:c8:51:48:22:
                    b4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:AF:D3:91:A5:A4:AA:8E:88:E0:52:92:38:3B:04:47:DE:35:B1:72
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/rK_TkaWkqo6I4FKSODsER941sXI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.10.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:2a:81:38:eb:db:c2:cc:49:66:ca:9c:e9:c9:52:38:2f:02:
         69:70:01:05:43:70:ae:b7:5e:73:34:89:48:96:6c:04:12:ef:
         87:54:ad:cb:ba:26:43:d9:d3:47:22:2a:76:39:cc:88:5e:8c:
         f8:ab:f1:15:8a:8e:26:9f:80:26:fc:b4:62:4d:7a:ce:88:c6:
         f6:c3:d0:ea:b2:8e:40:67:2c:2d:76:c0:df:09:91:b3:d0:77:
         7f:5f:78:db:45:6e:ba:45:2a:b7:04:a7:00:db:1f:73:3b:04:
         21:85:8c:2e:ce:72:5e:d5:97:2c:3f:fc:e4:c4:cb:e1:2c:4b:
         93:a0:fc:b8:1f:9d:f6:dd:15:3c:94:7d:14:b6:06:10:02:39:
         77:8b:82:34:f7:2c:43:2d:61:1e:12:eb:59:b8:22:88:5e:42:
         7e:be:3c:e0:ec:09:83:61:4e:03:cc:9c:ca:95:a1:0c:4d:b9:
         8e:f4:6f:dc:8b:be:57:97:c4:04:03:3c:5b:14:b6:ce:17:54:
         0b:3b:61:74:4c:b7:10:a0:5c:c8:79:23:6e:4a:d7:b8:46:07:
         08:ea:fc:88:8a:31:e8:27:24:17:ec:a5:58:5a:0e:ce:9e:01:
         ea:ce:de:9d:66:70:29:d6:bb:26:ab:25:bd:69:9c:6f:30:19:
         8a:d1:3a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:02:57 2026 by rpki-client