Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/xduD7uFrpmlb78gMTP6DharQRHM.roa
File:                     xduD7uFrpmlb78gMTP6DharQRHM.roa (raw, json)
Hash identifier:          z/EltA7tUHixFT5fnJVaL/cgEsc/sk6rlAPxRmdVxMw=
Subject key identifier:   C5:DB:83:EE:E1:6B:A6:69:5B:EF:C8:0C:4C:FE:83:85:AA:D0:44:73
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       08F3
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/xduD7uFrpmlb78gMTP6DharQRHM.roa
Signing time:             Tue 31 Mar 2026 07:44:33 +0000
ROA not before:           Tue 31 Mar 2026 07:44:33 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2516
IP address blocks:        202.164.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2291 (0x8f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Mar 31 07:44:33 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=C5DB83EEE16BA6695BEFC80C4CFE8385AAD04473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:36:b0:b0:05:a0:ae:9b:4a:31:92:b7:09:0d:
                    a4:7b:6d:b7:8c:37:66:c4:02:02:79:d8:8c:8b:99:
                    56:e0:e3:ba:25:41:ca:8b:12:2a:16:68:05:25:41:
                    5e:52:6e:55:67:35:4a:3f:c9:0e:d8:2e:a8:84:77:
                    8c:b2:ef:06:75:07:27:8e:62:23:ce:05:6b:02:18:
                    83:d2:73:9d:80:f0:c7:cd:95:51:00:20:b5:8c:bd:
                    e3:f6:73:15:4d:26:1b:02:b8:31:4d:b3:96:94:52:
                    e0:10:e3:d6:06:63:a0:f5:c3:6a:bd:56:1d:ce:04:
                    34:a2:11:04:a9:96:e4:5e:49:75:93:8d:48:1b:f9:
                    e3:34:06:08:a3:3f:3b:26:bb:da:54:9e:7a:a9:6c:
                    dd:0e:7e:98:ed:d2:fd:cd:15:d6:26:70:14:97:e6:
                    84:9a:66:ce:cc:4f:fb:17:7f:87:54:83:0e:03:c7:
                    38:b2:06:50:bb:8f:46:1f:42:d8:85:ed:00:34:1d:
                    0e:c2:55:bd:6d:27:88:48:94:4e:72:06:17:12:72:
                    83:4d:4e:8f:6d:24:af:9b:bb:9a:ed:63:9e:ff:35:
                    0c:2a:02:5c:8c:09:71:7b:f2:ea:01:33:47:72:38:
                    b8:83:56:86:ed:5d:fe:94:14:bb:7c:0c:b1:66:10:
                    7b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:DB:83:EE:E1:6B:A6:69:5B:EF:C8:0C:4C:FE:83:85:AA:D0:44:73
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/xduD7uFrpmlb78gMTP6DharQRHM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.164.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         54:5c:e2:b2:31:a9:0b:86:fa:59:93:ff:2c:c8:f5:33:55:2e:
         f2:32:0f:25:bb:b9:f4:64:b7:20:79:33:8c:17:98:81:43:fd:
         34:ae:85:d1:d6:20:09:14:8e:ea:8b:49:ad:a4:0e:92:83:8d:
         57:ed:56:f4:c9:74:e7:0d:7c:0e:02:ea:c2:c7:5c:33:a4:f8:
         56:48:9b:8a:21:26:1f:8c:ee:dc:49:6a:d9:f3:c6:40:b5:03:
         41:4b:d9:dd:4d:63:ff:90:4c:47:e3:fe:52:77:47:7e:28:b1:
         55:0e:82:91:c3:fc:7c:8e:7c:3e:1a:de:d1:3e:55:54:27:56:
         9d:bb:02:2e:d7:ac:3e:68:94:ff:32:13:71:d8:32:93:f6:b9:
         1f:a9:f6:6b:15:18:a7:62:15:19:04:7d:a5:5a:18:2c:bf:83:
         e2:7a:4d:c0:83:a2:90:d2:de:80:a0:42:d1:88:9e:ae:bf:55:
         08:c3:95:ab:1e:08:03:f0:4a:cd:06:15:cf:09:89:1d:87:c7:
         2c:aa:e6:40:5f:35:31:76:55:a5:08:7b:8e:ab:bc:87:a3:1f:
         03:75:80:8a:f2:17:48:54:4e:2a:58:e1:24:75:5a:6c:ce:3b:
         91:5b:a7:50:38:b4:8c:17:23:57:71:3a:6a:e4:46:96:7b:8d:
         f0:66:af:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:12:31 2026 by rpki-client