Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/wKL3mh0sbm2yNgkF7nQYon3YhGU.roa
File:                     wKL3mh0sbm2yNgkF7nQYon3YhGU.roa (raw, json)
Hash identifier:          QNbca9pEKIaQoZsjE6VLhgugl7y679fkT0/7D/3n34Y=
Subject key identifier:   C0:A2:F7:9A:1D:2C:6E:6D:B2:36:09:05:EE:74:18:A2:7D:D8:84:65
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       079B
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/wKL3mh0sbm2yNgkF7nQYon3YhGU.roa
Signing time:             Tue 31 Mar 2026 07:41:44 +0000
ROA not before:           Tue 31 Mar 2026 07:41:44 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        210.142.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1947 (0x79b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:41:44 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C0A2F79A1D2C6E6DB2360905EE7418A27DD88465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:02:ed:ee:ae:d4:8b:68:42:f5:e5:45:6e:06:
                    6b:9a:c8:2e:bc:20:ea:fb:11:b5:31:33:d9:34:99:
                    7e:e8:a3:1e:78:03:a2:1f:7c:ef:ed:66:f4:22:6a:
                    1c:93:32:c9:16:20:8a:cf:5a:be:8b:6a:d8:64:f9:
                    b4:32:ab:f7:48:78:53:f7:d1:4d:ee:64:db:d4:a1:
                    fe:89:a2:39:bd:51:5d:e5:17:3d:11:3b:75:79:c4:
                    1a:44:6f:f5:83:a9:25:1d:a9:e7:05:04:02:0a:7c:
                    1b:5a:e2:37:c8:d5:53:7a:4f:68:73:58:bc:1f:10:
                    84:cf:6e:e0:5a:7e:61:f1:57:fd:c4:6f:66:70:0e:
                    8f:73:0f:d7:eb:69:6f:e0:f7:52:c6:75:31:1c:d3:
                    0d:15:ae:ca:a8:f3:02:cf:82:24:03:e4:46:1c:fe:
                    ce:dc:d6:29:91:ea:e1:3f:65:3e:c7:5f:9f:87:fd:
                    9a:a2:77:e9:e8:9a:b8:3f:c2:8e:23:1b:7f:b5:a8:
                    1f:07:01:7a:87:55:07:c4:8f:ea:b4:6c:73:90:62:
                    26:40:3d:17:b5:60:22:07:e5:8d:f7:28:f8:c2:43:
                    05:04:2c:3c:0b:63:37:a7:be:59:7d:3e:e4:2a:f1:
                    2a:a8:eb:a5:70:e4:0d:94:37:5c:36:ff:9d:5b:e8:
                    18:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A2:F7:9A:1D:2C:6E:6D:B2:36:09:05:EE:74:18:A2:7D:D8:84:65
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/wKL3mh0sbm2yNgkF7nQYon3YhGU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.142.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         24:2a:c8:f3:48:2d:a4:53:60:10:ad:0e:38:98:43:6c:97:dc:
         5f:78:95:f9:62:a4:ee:87:f7:1e:a1:86:83:97:48:1a:9f:af:
         a8:29:8f:72:36:27:13:4c:c6:1b:95:7d:5f:d9:2e:47:16:f7:
         3e:16:83:95:8e:b5:2e:0e:9f:35:6e:b9:97:25:48:68:14:35:
         1b:6f:b2:2b:15:d7:71:f2:4a:cb:ce:c2:cc:6f:4c:9b:1a:55:
         0f:2f:4c:d3:e5:96:5b:19:c2:2d:0d:3f:7f:e7:e2:17:0d:40:
         76:13:42:dc:4d:f9:8b:59:fa:dd:92:63:7c:c0:cc:c1:22:8c:
         3e:f9:71:25:f4:39:b5:bc:1b:02:1c:50:0b:65:e5:e3:3b:7b:
         ad:8f:fa:ad:ff:24:3c:2a:56:00:57:c3:66:c8:8f:3e:9a:ac:
         31:5e:28:cf:57:68:aa:3f:e5:43:55:c7:90:51:1c:2e:dd:6b:
         af:78:8f:c9:f8:17:36:57:24:d2:a1:c5:4b:c6:98:e0:02:8c:
         51:92:ae:0f:71:6e:74:89:a5:26:10:3e:fe:d5:e2:d6:d3:79:
         42:fe:66:21:01:75:36:ec:3c:24:d5:56:bd:e7:10:1e:3c:e8:
         d8:eb:e9:40:1c:74:c3:1b:e9:d4:cc:82:8b:5b:7b:8c:89:0a:
         30:1d:5e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:42 2026 by rpki-client