Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/sMFyinUQTCJqfOU9yYdZjqrt28k.roa
File:                     sMFyinUQTCJqfOU9yYdZjqrt28k.roa (raw, json)
Hash identifier:          W+nsRRSgNpSS+/P3YcBAwAAsyFbhuv9gKEeHTgLOTCI=
Subject key identifier:   B0:C1:72:8A:75:10:4C:22:6A:7C:E5:3D:C9:87:59:8E:AA:ED:DB:C9
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       0780
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/sMFyinUQTCJqfOU9yYdZjqrt28k.roa
Signing time:             Tue 31 Mar 2026 07:41:33 +0000
ROA not before:           Tue 31 Mar 2026 07:41:33 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        124.213.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1920 (0x780)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:41:33 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B0C1728A75104C226A7CE53DC987598EAAEDDBC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b2:f7:5e:79:4c:8d:43:85:19:08:76:f4:9a:
                    ee:d3:ae:17:67:be:e7:02:c9:84:1c:f4:69:3d:24:
                    24:54:59:00:eb:53:6d:11:d7:b6:12:03:a0:c6:5e:
                    33:85:3d:b1:ff:01:e3:5e:4d:15:1a:42:62:50:d7:
                    a7:dd:98:47:75:18:60:e3:94:4b:0b:bb:64:d1:ed:
                    e1:79:2f:a0:f0:62:5e:e8:4b:39:a9:60:c6:6d:02:
                    bf:1b:a3:0c:35:a2:ab:2e:59:c9:ce:de:93:f8:df:
                    70:13:bb:9e:8a:e2:7e:c3:02:da:cd:b2:23:90:01:
                    18:97:84:e1:ff:1f:c0:25:c9:4e:7a:18:76:2d:cb:
                    7e:de:8b:68:d4:6c:ea:40:7f:af:2c:c2:fb:c3:d8:
                    b7:ec:1e:6d:9a:66:48:c8:47:72:79:5f:fd:e7:a4:
                    63:e8:b2:59:4f:f4:32:c9:e0:e2:86:8a:b9:eb:c3:
                    aa:98:36:a1:45:a8:c6:26:e6:a6:d0:31:a9:4a:f0:
                    9a:d4:72:f4:01:dd:93:a9:14:0b:54:eb:5f:0b:e0:
                    dc:7b:9c:90:75:76:fb:13:64:d2:ca:52:33:4a:a2:
                    d1:c3:29:18:e5:56:19:5c:43:5d:db:b3:8d:83:07:
                    67:5a:5a:52:e7:41:36:5d:dd:e3:ec:df:25:c3:54:
                    69:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:C1:72:8A:75:10:4C:22:6A:7C:E5:3D:C9:87:59:8E:AA:ED:DB:C9
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/sMFyinUQTCJqfOU9yYdZjqrt28k.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.213.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         68:bf:09:e8:5f:44:6f:26:a6:0b:16:85:75:19:b7:e7:75:86:
         30:78:21:d7:6e:a4:51:07:1f:87:ba:0f:29:b2:f1:2f:a3:79:
         07:11:de:1b:dd:7c:5b:65:89:46:a7:82:2b:0e:b8:0a:cb:78:
         39:b0:c0:d2:3a:32:df:95:80:f4:9a:7a:06:fc:d4:9b:01:3a:
         c3:64:13:59:8f:3a:5c:96:a2:88:b1:c6:f2:1c:49:7d:90:24:
         ae:30:58:12:47:de:1d:fe:74:e2:51:e3:d7:2b:0d:f1:a2:77:
         0f:83:f4:a9:28:57:c2:3c:c4:49:fb:3b:2d:54:5d:a4:89:df:
         32:a3:40:f3:5f:a0:9c:54:2a:c4:ba:51:f9:df:15:82:9c:59:
         1c:a2:c1:ab:de:6d:56:93:a3:89:1c:5d:ab:e4:64:5e:85:34:
         c2:81:da:27:66:f1:f2:79:fd:f6:55:48:5d:7a:55:e9:0e:83:
         d2:cc:e4:4d:34:54:96:59:ed:26:6e:67:3a:26:87:2e:f1:e1:
         79:ca:7e:2f:49:b8:d9:14:1c:5c:20:cc:49:6f:8d:3a:aa:4f:
         d7:30:db:35:eb:90:b4:d1:2a:2b:18:43:e8:c5:58:5a:bc:e5:
         89:53:0e:03:bd:e8:de:b7:f7:6f:ec:0f:f2:e1:c7:8f:c7:ea:
         38:ef:ab:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:13:19 2026 by rpki-client