Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1175/2c2WvinL8OBJglQor2LcGeuD_Z4.roa
File:                     2c2WvinL8OBJglQor2LcGeuD_Z4.roa (raw, json)
Hash identifier:          KLamXQEQsSYvRlR+8JhBx/raa60PzRbXxLjYPtxhJNg=
Subject key identifier:   D9:CD:96:BE:29:CB:F0:E0:49:82:54:28:AF:62:DC:19:EB:83:FD:9E
Certificate issuer:       /CN=8A57051C84A2BF078749E7BB34BE19678E131119
Certificate serial:       5F
Authority key identifier: 8A:57:05:1C:84:A2:BF:07:87:49:E7:BB:34:BE:19:67:8E:13:11:19
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ilcFHISivweHSee7NL4ZZ44TERk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1175/2c2WvinL8OBJglQor2LcGeuD_Z4.roa
Signing time:             Tue 31 Mar 2026 07:47:04 +0000
ROA not before:           Tue 31 Mar 2026 07:47:04 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     16509
IP address blocks:        150.35.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1175/ilcFHISivweHSee7NL4ZZ44TERk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1175/ilcFHISivweHSee7NL4ZZ44TERk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ilcFHISivweHSee7NL4ZZ44TERk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95 (0x5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A57051C84A2BF078749E7BB34BE19678E131119
        Validity
            Not Before: Mar 31 07:47:04 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=D9CD96BE29CBF0E049825428AF62DC19EB83FD9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fc:1a:c4:67:8f:c0:77:00:7b:13:0e:06:25:
                    6c:57:b2:65:de:6c:8f:55:57:1d:0d:f3:43:ee:e4:
                    54:a9:26:62:bf:6e:a3:2b:4e:b0:05:dd:6b:e6:53:
                    d1:42:6d:f7:ff:37:76:e6:fb:98:9a:36:05:19:62:
                    a3:24:0f:0f:39:f0:98:72:71:37:a3:f9:11:f9:1a:
                    d4:ee:85:db:50:b7:d6:59:b1:ba:49:c7:34:6b:3e:
                    26:0f:ba:56:33:d3:33:43:38:e8:df:5c:61:e9:3e:
                    87:a8:dc:3d:4e:6c:3e:98:5f:0c:c8:e1:82:34:da:
                    d5:3f:4e:07:7a:d4:72:05:bc:54:c4:0e:cd:77:3c:
                    fe:2a:b0:f2:1b:c3:3f:56:a7:4b:04:7f:59:53:bc:
                    ce:ff:02:e4:6f:f6:55:ed:cf:ae:05:39:aa:dc:8d:
                    1a:1d:47:89:40:7b:93:82:de:63:f5:28:c0:c9:00:
                    ac:b7:60:5a:3a:b9:5b:1e:87:09:5e:55:74:55:a5:
                    af:d4:6e:46:65:5a:7b:58:18:06:d2:69:93:25:cf:
                    25:0d:44:a7:4f:98:9a:b1:97:a6:ec:89:81:2e:1b:
                    be:d8:c9:55:b8:cc:50:87:0e:37:03:52:65:e0:a4:
                    6f:9f:e4:6c:5a:21:9a:ac:c0:d1:69:66:e2:b4:40:
                    4e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:CD:96:BE:29:CB:F0:E0:49:82:54:28:AF:62:DC:19:EB:83:FD:9E
            X509v3 Authority Key Identifier:
                keyid:8A:57:05:1C:84:A2:BF:07:87:49:E7:BB:34:BE:19:67:8E:13:11:19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1175/ilcFHISivweHSee7NL4ZZ44TERk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ilcFHISivweHSee7NL4ZZ44TERk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1175/2c2WvinL8OBJglQor2LcGeuD_Z4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.35.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:23:db:9e:c7:92:73:f3:ca:88:5f:66:1b:a0:fe:83:f7:9e:
         66:c7:29:b9:cf:bd:25:a1:a8:3f:50:9f:9e:fb:97:d1:7c:8a:
         55:83:2b:ff:cf:a0:01:36:8b:d6:57:6e:8c:30:d2:22:1a:ff:
         e8:62:cc:84:16:0a:df:3f:48:10:fe:fa:03:eb:8a:0f:32:b7:
         91:b0:91:4f:5c:9f:4d:bf:68:84:44:7e:af:09:fe:5a:c3:c7:
         ec:62:85:84:e6:0f:51:7f:71:ce:36:6b:77:c9:7d:d3:75:6d:
         cb:0e:a2:5b:d2:8e:e6:c0:de:73:1c:9e:9a:e3:e1:2a:ff:1d:
         30:c6:79:27:dc:b9:87:86:8f:3b:3e:71:98:41:79:7b:ef:a1:
         2c:ac:d6:66:43:7e:3d:c0:1d:d5:31:9c:36:17:0a:db:ca:47:
         b9:c3:42:c7:86:68:e1:68:ac:6c:cb:b5:33:6d:10:5c:b9:3e:
         bd:fd:a4:03:3e:31:cf:e9:e6:7e:64:b7:c2:87:33:7f:41:3c:
         61:e0:63:c9:1f:5a:cd:d7:3c:5e:2b:fe:36:7d:b3:21:67:b1:
         c0:4a:12:c3:64:5a:3b:bc:92:12:78:5a:b7:9e:b2:31:26:ef:
         ae:26:0f:85:86:e8:69:bc:ae:4f:19:0c:fc:12:4c:70:8a:63:
         73:75:36:4d
-----BEGIN CERTIFICATE-----
MIIEvjCCA6agAwIBAgIBXzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4QTU3
MDUxQzg0QTJCRjA3ODc0OUU3QkIzNEJFMTk2NzhFMTMxMTE5MB4XDTI2MDMzMTA3
NDcwNFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoRDlDRDk2QkUyOUNCRjBF
MDQ5ODI1NDI4QUY2MkRDMTlFQjgzRkQ5RTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKf8GsRnj8B3AHsTDgYlbFeyZd5sj1VXHQ3zQ+7kVKkmYr9uoytO
sAXda+ZT0UJt9/83dub7mJo2BRlioyQPDznwmHJxN6P5Efka1O6F21C31lmxuknH
NGs+Jg+6VjPTM0M46N9cYek+h6jcPU5sPphfDMjhgjTa1T9OB3rUcgW8VMQOzXc8
/iqw8hvDP1anSwR/WVO8zv8C5G/2Ve3PrgU5qtyNGh1HiUB7k4LeY/UowMkArLdg
Wjq5Wx6HCV5VdFWlr9RuRmVae1gYBtJpkyXPJQ1Ep0+YmrGXpuyJgS4bvtjJVbjM
UIcONwNSZeCkb5/kbFohmqzA0Wlm4rRATr0CAwEAAaOCAdswggHXMB0GA1UdDgQW
BBTZzZa+Kcvw4EmCVCivYtwZ64P9njAfBgNVHSMEGDAWgBSKVwUchKK/B4dJ57s0
vhlnjhMRGTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTE3NS9pbGNGSElTaXZ3ZUhTZWU3Tkw0Wlo0NFRFUmsuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9pbGNGSElTaXZ3ZUhTZWU3Tkw0Wlo0
NFRFUmsuY2VyMA4GA1UdDwEB/wQEAwIHgDByBggrBgEFBQcBCwRmMGQwYgYIKwYB
BQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTE3NS8yYzJXdmluTDhPQkpnbFFvcjJMY0dldURfWjQucm9hMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAliPwMA0GCSqGSIb3DQEBCwUAA4IB
AQBTI9uex5Jz88qIX2YboP6D955mxym5z70loag/UJ+e+5fRfIpVgyv/z6ABNovW
V26MMNIiGv/oYsyEFgrfP0gQ/voD64oPMreRsJFPXJ9Nv2iERH6vCf5aw8fsYoWE
5g9Rf3HONmt3yX3TdW3LDqJb0o7mwN5zHJ6a4+Eq/x0wxnkn3LmHho87PnGYQXl7
76EsrNZmQ349wB3VMZw2Fwrbyke5w0LHhmjhaKxsy7UzbRBcuT69/aQDPjHP6eZ+
ZLfChzN/QTxh4GPJH1rN1zxeK/42fbMhZ7HAShLDZFo7vJISeFq3nrIxJu+uJg+F
huhpvK5PGQz8EkxwimNzdTZN
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:42:54 2026 by rpki-client