Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/sAb0fD2M6PvEHw8ZcCp_76c4yeM.roa
File:                     sAb0fD2M6PvEHw8ZcCp_76c4yeM.roa (raw, json)
Hash identifier:          63CLyvrv55WHINje6JUUrvVEllhPDScmKn7qucFVbAY=
Subject key identifier:   B0:06:F4:7C:3D:8C:E8:FB:C4:1F:0F:19:70:2A:7F:EF:A7:38:C9:E3
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0787
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/sAb0fD2M6PvEHw8ZcCp_76c4yeM.roa
Signing time:             Tue 31 Mar 2026 07:41:36 +0000
ROA not before:           Tue 31 Mar 2026 07:41:36 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        106.188.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1927 (0x787)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:41:36 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B006F47C3D8CE8FBC41F0F19702A7FEFA738C9E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:4b:a9:cf:28:63:78:4b:8f:70:69:ad:bb:84:
                    75:04:59:59:49:dd:f7:fc:4a:18:8f:bc:b4:0c:ec:
                    03:d9:b8:36:e1:4b:a6:6a:d0:36:e1:48:39:a7:5c:
                    ea:de:a7:4a:ea:5e:53:5a:34:6d:91:b1:b0:5c:bc:
                    21:b2:d4:de:e4:e7:b6:4a:26:e1:3b:f3:d4:92:fc:
                    4e:e5:e2:80:7a:5c:75:e1:50:6f:94:37:c7:c4:42:
                    21:db:f1:10:18:5a:ab:ab:0a:11:7f:72:4f:80:ba:
                    e0:02:9f:ef:7e:82:2b:aa:4e:f5:47:28:a7:a3:d4:
                    ee:25:32:89:9e:36:0a:ba:f5:58:72:4d:9f:bd:e6:
                    9d:3c:4c:08:ae:86:17:c2:f8:5d:a0:6a:7a:b5:88:
                    96:b3:3f:94:bb:54:0e:83:d8:b6:19:5d:1d:83:14:
                    e4:3f:5f:23:39:06:98:9f:69:a0:95:80:cd:23:b6:
                    b5:1b:d7:3d:cf:ac:c6:49:66:15:85:db:0d:61:ce:
                    c2:45:ec:d5:f3:39:1a:cf:ff:b3:21:99:a9:a9:7a:
                    bd:e3:27:44:5b:eb:c6:9f:62:73:4b:34:f2:ec:77:
                    ff:28:e1:e0:a5:ff:83:07:94:66:2d:13:c0:2c:a7:
                    05:5a:5f:ae:e4:99:a6:56:1a:fe:3b:56:2f:aa:8b:
                    e4:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:06:F4:7C:3D:8C:E8:FB:C4:1F:0F:19:70:2A:7F:EF:A7:38:C9:E3
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/sAb0fD2M6PvEHw8ZcCp_76c4yeM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.188.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         25:54:45:bb:f4:b4:a5:03:ae:3c:b1:72:dc:f7:eb:58:0e:3f:
         57:48:a8:fb:64:a9:24:e0:ac:fe:74:ff:76:ed:df:7a:02:38:
         dc:0b:1b:50:3f:46:2d:02:59:79:cd:89:11:79:d2:5a:68:f1:
         f4:db:41:ce:a6:81:84:61:30:d4:99:0b:23:3d:ea:f5:ef:8e:
         c9:67:29:7b:80:0d:69:e9:49:98:a8:32:ca:ee:ee:b3:f5:d5:
         ec:ec:25:b7:a3:ca:02:8a:fa:81:c0:bf:1f:ad:31:7d:f6:34:
         5b:b7:38:17:27:fa:33:91:b7:aa:c2:fb:d6:87:23:8e:a4:6b:
         18:cb:41:fb:d6:9c:61:9d:6b:83:cd:1a:46:f3:09:00:fd:7c:
         3b:e6:c6:6d:bc:7c:68:cb:44:1b:e9:24:20:dc:aa:8b:cf:c5:
         2d:37:da:f6:2f:bc:5f:26:97:6a:f1:fa:89:24:6a:bf:44:0f:
         33:86:95:49:b2:78:ea:4a:ae:3f:ee:71:09:68:5d:36:53:72:
         4f:9c:bc:72:eb:f4:61:1d:83:6f:4e:bb:c5:6f:84:eb:37:ee:
         1d:8a:b2:9d:4e:a8:33:01:75:c1:04:f6:b5:79:93:79:c6:13:
         05:02:27:7d:72:01:a4:72:e6:09:3d:55:58:e1:91:4c:65:47:
         31:a3:99:40
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgICB4cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNjAzMzEw
NzQxMzZaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEIwMDZGNDdDM0Q4Q0U4
RkJDNDFGMEYxOTcwMkE3RkVGQTczOEM5RTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD4S6nPKGN4S49waa27hHUEWVlJ3ff8ShiPvLQM7APZuDbhS6Zq
0DbhSDmnXOrep0rqXlNaNG2RsbBcvCGy1N7k57ZKJuE789SS/E7l4oB6XHXhUG+U
N8fEQiHb8RAYWqurChF/ck+AuuACn+9+giuqTvVHKKej1O4lMomeNgq69VhyTZ+9
5p08TAiuhhfC+F2ganq1iJazP5S7VA6D2LYZXR2DFOQ/XyM5BpifaaCVgM0jtrUb
1z3PrMZJZhWF2w1hzsJF7NXzORrP/7Mhmamper3jJ0Rb68afYnNLNPLsd/8o4eCl
/4MHlGYtE8AspwVaX67kmaZWGv47Vi+qi+ShAgMBAAGjggHYMIIB1DAdBgNVHQ4E
FgQUsAb0fD2M6PvEHw8ZcCp/76c4yeMwHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTYxL3NBYjBmRDJNNlB2RUh3OFpjQ3BfNzZjNHllTS5yb2EwHgYI
KwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwBqvDANBgkqhkiG9w0BAQsFAAOCAQEA
JVRFu/S0pQOuPLFy3PfrWA4/V0io+2SpJOCs/nT/du3fegI43AsbUD9GLQJZec2J
EXnSWmjx9NtBzqaBhGEw1JkLIz3q9e+OyWcpe4ANaelJmKgyyu7us/XV7Owlt6PK
Aor6gcC/H60xffY0W7c4Fyf6M5G3qsL71ocjjqRrGMtB+9acYZ1rg80aRvMJAP18
O+bGbbx8aMtEG+kkINyqi8/FLTfa9i+8XyaXavH6iSRqv0QPM4aVSbJ46kquP+5x
CWhdNlNyT5y8cuv0YR2Db067xW+E6zfuHYqynU6oMwF1wQT2tXmTecYTBQInfXIB
pHLmCT1VWOGRTGVHMaOZQA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:13:29 2026 by rpki-client