Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/sOsrooZX_t8nFW_L8Zw1aI39O7E.roa
File:                     sOsrooZX_t8nFW_L8Zw1aI39O7E.roa (raw, json)
Hash identifier:          cK1PJCsPkLhnu6VZAXThQNgHADD4fl4Uqo20Nl/3BVQ=
Subject key identifier:   B0:EB:2B:A2:86:57:FE:DF:27:15:6F:CB:F1:9C:35:68:8D:FD:3B:B1
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       086E
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/sOsrooZX_t8nFW_L8Zw1aI39O7E.roa
Signing time:             Tue 31 Mar 2026 07:43:32 +0000
ROA not before:           Tue 31 Mar 2026 07:43:32 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        211.7.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2158 (0x86e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:43:32 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B0EB2BA28657FEDF27156FCBF19C35688DFD3BB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:4f:a2:ce:e0:64:40:d2:5c:27:9b:8f:a0:03:
                    b5:1e:69:be:94:5d:f8:ea:ed:63:48:7e:99:58:38:
                    20:ff:c6:1a:c6:7d:dc:b3:ee:19:fb:a3:14:c2:2c:
                    51:4c:b9:af:7d:55:fd:6e:a8:e5:d8:57:b6:98:62:
                    d0:70:24:8c:16:2d:a5:68:24:ff:25:b0:41:24:f7:
                    6e:d9:e6:f5:a7:67:39:cc:9c:af:d8:2e:93:96:1f:
                    9a:24:a9:52:a4:67:52:fd:e1:b2:f6:7d:ca:83:1d:
                    51:39:71:26:66:b2:af:1f:61:1b:d8:d5:c4:5a:f3:
                    b8:99:5d:72:a4:0b:bf:a7:8a:4e:8a:2c:cc:f6:4c:
                    e9:13:96:a3:b9:bc:b8:4f:84:62:04:45:03:74:b8:
                    a8:e2:32:07:49:50:bc:58:71:95:94:8f:ce:59:75:
                    ef:13:a4:d1:2e:5d:f6:c8:47:dd:42:c2:7f:ec:5f:
                    5c:58:09:2a:11:5d:e6:7d:a0:f4:26:53:53:c6:f5:
                    b5:50:29:fe:1e:bf:06:45:79:77:34:4b:14:2a:e4:
                    79:d8:43:a3:50:df:37:b4:0e:03:6c:71:63:b5:37:
                    d9:81:4b:ee:ec:6c:14:dc:76:6f:28:ec:4b:91:31:
                    54:14:58:73:68:32:51:b0:ba:8d:eb:cf:05:ee:d1:
                    2e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:EB:2B:A2:86:57:FE:DF:27:15:6F:CB:F1:9C:35:68:8D:FD:3B:B1
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/sOsrooZX_t8nFW_L8Zw1aI39O7E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.7.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:7c:8f:53:10:7f:2c:84:26:53:81:87:16:19:a7:b4:f2:5f:
         2e:04:83:84:69:6e:11:c1:22:37:54:af:db:d0:ba:64:b3:96:
         c2:c3:4d:04:e5:78:1f:b2:3a:0f:aa:e8:0d:a4:d7:a3:cb:13:
         52:89:a8:83:bc:fa:0a:f7:68:48:af:94:76:b8:bc:ad:d3:22:
         17:6a:b1:c8:41:b3:2b:6c:a4:9a:24:43:80:62:82:44:8d:97:
         7f:fa:de:3d:9d:18:52:c9:dc:e9:bc:77:74:87:9f:cd:fb:13:
         38:a8:64:7e:68:8a:1f:20:43:b7:e9:fa:46:54:40:25:6b:57:
         68:79:36:fc:21:ab:68:b7:c0:5c:99:41:75:63:3a:ac:b6:30:
         48:d4:32:b6:ac:5e:b5:86:90:a5:2b:99:1a:3f:10:21:46:16:
         57:39:38:02:af:12:3f:5e:fe:59:17:20:42:55:3d:e1:27:83:
         f0:e5:53:ac:d0:93:9c:48:a3:d3:17:7d:be:a8:02:2c:86:91:
         f4:f4:40:8c:54:3e:5c:3d:45:fb:54:60:64:ac:9d:54:a6:da:
         10:3c:53:d4:ce:bd:42:e7:61:bd:a6:ae:6f:e4:03:75:44:59:
         5b:19:5d:86:be:27:7c:c0:54:23:89:a0:c3:1d:fa:0f:69:0a:
         8d:e1:a7:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:14:51 2026 by rpki-client