Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1175/D1k3ts1uNo6F7MLR9igpgGGkXpE.roa
File:                     D1k3ts1uNo6F7MLR9igpgGGkXpE.roa (raw, json)
Hash identifier:          1irhL4dt/PifIqnlPLkT+bFwIpxsybyJHj8wx6DLCQk=
Subject key identifier:   0F:59:37:B6:CD:6E:36:8E:85:EC:C2:D1:F6:28:29:80:61:A4:5E:91
Certificate issuer:       /CN=8A57051C84A2BF078749E7BB34BE19678E131119
Certificate serial:       60
Authority key identifier: 8A:57:05:1C:84:A2:BF:07:87:49:E7:BB:34:BE:19:67:8E:13:11:19
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ilcFHISivweHSee7NL4ZZ44TERk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1175/D1k3ts1uNo6F7MLR9igpgGGkXpE.roa
Signing time:             Tue 31 Mar 2026 07:47:06 +0000
ROA not before:           Tue 31 Mar 2026 07:47:06 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     14418
IP address blocks:        150.35.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1175/ilcFHISivweHSee7NL4ZZ44TERk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1175/ilcFHISivweHSee7NL4ZZ44TERk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ilcFHISivweHSee7NL4ZZ44TERk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A57051C84A2BF078749E7BB34BE19678E131119
        Validity
            Not Before: Mar 31 07:47:06 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=0F5937B6CD6E368E85ECC2D1F628298061A45E91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:45:ff:15:6d:15:26:27:2b:1d:c8:f1:64:11:
                    6c:c2:ca:39:45:22:7f:98:69:97:51:89:3c:61:12:
                    d8:33:ea:ae:d5:65:3a:05:70:4e:78:1a:7c:50:28:
                    0b:d6:62:43:6c:a3:d3:9a:02:ec:db:36:2c:cf:40:
                    ae:ca:b5:2d:9c:47:1c:dd:e6:6a:57:a6:bc:39:a3:
                    d1:96:7e:23:f9:50:4b:ff:fb:10:b7:81:cd:d6:05:
                    3e:83:e4:e0:48:3e:3b:e4:ef:34:81:86:28:65:d8:
                    e8:cb:23:f7:ff:ff:d3:62:a5:46:c1:98:6c:d3:51:
                    ea:d3:f4:19:23:73:ac:64:1c:79:1a:8e:5e:db:a7:
                    74:36:34:a2:03:b8:19:f4:97:fd:d2:a0:2f:05:d3:
                    cb:39:7d:1c:31:e3:9e:27:fd:48:58:ef:3d:e1:a0:
                    58:98:cc:42:97:85:c0:9b:a2:a1:38:6d:ef:c3:e9:
                    b5:e1:1e:f7:b8:06:cc:a0:09:12:97:86:d3:a8:2b:
                    2d:0a:7d:da:6b:cd:44:74:ce:94:34:50:5e:eb:61:
                    b0:d7:2f:0a:67:32:ba:c3:55:56:7c:2c:9c:30:63:
                    68:39:a7:e2:4d:a8:6c:d7:a6:7d:2e:1f:46:e3:d5:
                    54:8e:c0:90:d6:76:1a:02:8d:61:d2:78:e9:d0:4a:
                    ed:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:59:37:B6:CD:6E:36:8E:85:EC:C2:D1:F6:28:29:80:61:A4:5E:91
            X509v3 Authority Key Identifier:
                keyid:8A:57:05:1C:84:A2:BF:07:87:49:E7:BB:34:BE:19:67:8E:13:11:19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1175/ilcFHISivweHSee7NL4ZZ44TERk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ilcFHISivweHSee7NL4ZZ44TERk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1175/D1k3ts1uNo6F7MLR9igpgGGkXpE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.35.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:76:57:36:65:74:46:30:cc:4f:17:0f:03:ab:1a:dd:34:9d:
         14:f6:42:17:a0:42:1d:35:c9:e8:ce:94:13:0d:fb:a3:29:f7:
         f6:8b:26:91:84:73:82:65:87:c0:e2:97:7d:f3:63:d0:3d:92:
         74:97:aa:9b:45:ae:dc:86:32:19:0a:76:d1:c3:0e:b4:35:cc:
         f2:81:d5:bc:9c:f2:f2:06:90:4d:75:a7:d9:9d:d1:30:55:ca:
         66:8a:36:ca:64:68:31:c0:d4:58:2d:ca:37:5b:13:1e:e7:4f:
         9d:ad:8a:43:db:8a:b7:f5:04:9a:e6:c0:38:c7:db:74:98:97:
         85:55:46:ab:ee:33:04:c5:80:5c:b5:59:5b:6a:ed:0b:33:18:
         49:88:cd:a7:91:80:9e:dc:e7:d2:d4:03:47:c3:9b:cc:c8:f2:
         2f:01:fc:f9:0f:21:7a:bd:8a:c7:db:94:df:ab:e0:08:ec:6b:
         7d:9a:8f:84:ec:82:e7:cb:d1:13:1a:a4:6d:45:da:4a:d6:d0:
         80:94:c8:da:e2:2e:fe:11:31:73:64:8d:c0:8b:8c:92:93:d0:
         f2:a2:cf:d4:ea:fa:99:47:5f:5c:21:71:f9:18:e8:f0:82:44:
         27:b6:c0:d2:14:1a:0e:09:ed:eb:ee:6f:81:45:fc:40:ec:54:
         d6:ee:89:58
-----BEGIN CERTIFICATE-----
MIIEvjCCA6agAwIBAgIBYDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4QTU3
MDUxQzg0QTJCRjA3ODc0OUU3QkIzNEJFMTk2NzhFMTMxMTE5MB4XDTI2MDMzMTA3
NDcwNloXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMEY1OTM3QjZDRDZFMzY4
RTg1RUNDMkQxRjYyODI5ODA2MUE0NUU5MTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKtF/xVtFSYnKx3I8WQRbMLKOUUif5hpl1GJPGES2DPqrtVlOgVw
TngafFAoC9ZiQ2yj05oC7Ns2LM9Arsq1LZxHHN3malemvDmj0ZZ+I/lQS//7ELeB
zdYFPoPk4Eg+O+TvNIGGKGXY6Msj9///02KlRsGYbNNR6tP0GSNzrGQceRqOXtun
dDY0ogO4GfSX/dKgLwXTyzl9HDHjnif9SFjvPeGgWJjMQpeFwJuioTht78PpteEe
97gGzKAJEpeG06grLQp92mvNRHTOlDRQXuthsNcvCmcyusNVVnwsnDBjaDmn4k2o
bNemfS4fRuPVVI7AkNZ2GgKNYdJ46dBK7QUCAwEAAaOCAdswggHXMB0GA1UdDgQW
BBQPWTe2zW42joXswtH2KCmAYaRekTAfBgNVHSMEGDAWgBSKVwUchKK/B4dJ57s0
vhlnjhMRGTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTE3NS9pbGNGSElTaXZ3ZUhTZWU3Tkw0Wlo0NFRFUmsuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9pbGNGSElTaXZ3ZUhTZWU3Tkw0Wlo0
NFRFUmsuY2VyMA4GA1UdDwEB/wQEAwIHgDByBggrBgEFBQcBCwRmMGQwYgYIKwYB
BQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMTE3NS9EMWszdHMxdU5vNkY3TUxSOWlncGdHR2tYcEUucm9hMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAliPwMA0GCSqGSIb3DQEBCwUAA4IB
AQCodlc2ZXRGMMxPFw8DqxrdNJ0U9kIXoEIdNcnozpQTDfujKff2iyaRhHOCZYfA
4pd982PQPZJ0l6qbRa7chjIZCnbRww60NczygdW8nPLyBpBNdafZndEwVcpmijbK
ZGgxwNRYLco3WxMe50+drYpD24q39QSa5sA4x9t0mJeFVUar7jMExYBctVlbau0L
MxhJiM2nkYCe3OfS1ANHw5vMyPIvAfz5DyF6vYrH25Tfq+AI7Gt9mo+E7ILny9ET
GqRtRdpK1tCAlMja4i7+ETFzZI3Ai4ySk9Dyos/U6vqZR19cIXH5GOjwgkQntsDS
FBoOCe3r7m+BRfxA7FTW7olY
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:54 2026 by rpki-client