Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/sCiSnCT0oNoVfrvO3KptnrNau0o.roa
File:                     sCiSnCT0oNoVfrvO3KptnrNau0o.roa (raw, json)
Hash identifier:          jSGv2/OZHLNRzzu7TEvsqWYrv0ph8yBRGSKDL94hv4k=
Subject key identifier:   B0:28:92:9C:24:F4:A0:DA:15:7E:BB:CE:DC:AA:6D:9E:B3:5A:BB:4A
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       084D
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/sCiSnCT0oNoVfrvO3KptnrNau0o.roa
Signing time:             Tue 31 Mar 2026 07:43:15 +0000
ROA not before:           Tue 31 Mar 2026 07:43:15 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        124.215.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2125 (0x84d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:43:15 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B028929C24F4A0DA157EBBCEDCAA6D9EB35ABB4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:da:d3:38:1a:b0:72:59:27:30:ff:64:4c:8a:
                    9c:79:9d:56:c4:b0:5b:5c:49:c5:58:28:f1:79:89:
                    90:aa:93:ce:2d:77:14:0e:a7:7d:2c:ad:5c:b3:d9:
                    87:67:f9:b5:f8:28:7e:0e:70:15:81:e9:6e:f9:41:
                    d5:49:ce:e9:76:fc:79:9e:3e:20:c5:f4:0f:c9:9e:
                    79:86:3a:7c:a8:f9:93:7f:11:95:63:38:0d:15:74:
                    1e:7c:55:57:1c:86:71:d5:0d:11:cd:53:d6:e4:42:
                    e0:f5:3e:fe:9c:75:67:74:48:30:75:71:94:58:db:
                    9b:b8:d8:88:48:c0:eb:1a:ad:4f:43:2a:60:92:85:
                    2b:c2:ad:1f:b7:9b:5c:e2:b2:64:69:c4:26:7a:79:
                    ae:45:02:57:91:20:74:3f:5e:00:1e:74:6e:cc:6a:
                    41:e6:02:19:5a:ce:88:06:d6:b3:e2:db:12:b7:c6:
                    6c:76:c0:65:18:3c:f1:8b:2d:4f:b7:39:41:8d:91:
                    f9:36:79:dd:a2:e0:f4:c2:55:6c:5a:20:62:5a:3f:
                    bf:24:37:a5:41:30:e0:1f:c1:a0:49:b4:74:ea:08:
                    85:ac:10:51:6a:a2:86:7c:c3:33:8d:48:1a:3e:1d:
                    90:6c:d7:32:07:37:ae:65:74:84:01:7c:e5:4f:40:
                    c0:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:28:92:9C:24:F4:A0:DA:15:7E:BB:CE:DC:AA:6D:9E:B3:5A:BB:4A
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/sCiSnCT0oNoVfrvO3KptnrNau0o.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.215.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         82:c0:60:5f:be:dd:0c:20:d1:bf:93:20:42:f8:f4:9f:98:55:
         b5:08:a9:23:19:1c:7d:32:b9:44:53:43:4e:b7:7d:b1:ff:bf:
         e8:7a:a0:1e:97:7e:78:46:bf:ff:a9:4c:4f:57:fe:a6:29:1f:
         90:a6:40:a0:49:6e:67:f8:66:14:41:cc:6f:6b:77:5d:55:d7:
         43:4b:31:f4:ce:34:c6:59:9f:a8:eb:ef:9f:e5:30:fb:1e:34:
         36:48:3b:cf:96:44:c1:fe:ab:a1:1b:11:e3:77:6e:8a:4f:e3:
         5d:59:4a:84:72:7c:75:bb:cd:e5:5d:4c:ff:34:cd:85:4a:a2:
         84:9f:ad:25:ad:de:99:b4:b1:c8:89:ad:f9:a6:85:22:5e:55:
         4c:a6:bc:2c:a4:bd:13:34:df:21:72:66:5e:ca:1b:da:df:e3:
         06:04:dc:68:5c:9a:2c:71:6e:68:e5:e6:2d:87:c7:17:cd:64:
         17:03:a3:6c:06:b1:0d:e3:d2:b3:32:3c:ad:ce:55:9b:f1:c9:
         02:00:c6:1f:65:c0:a5:ce:3c:e5:22:b3:3e:fa:6e:a3:3c:47:
         91:79:56:48:e6:05:f8:c3:50:62:c8:8d:98:57:2c:6b:de:ad:
         dd:6d:d8:ae:c0:a4:4a:98:08:fd:b9:d7:6a:4a:83:d8:ce:a7:
         82:f0:a9:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:02:43 2026 by rpki-client