Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/PyPvwQLXOgic9OgpmEiMTry15a4.roa
File:                     PyPvwQLXOgic9OgpmEiMTry15a4.roa (raw, json)
Hash identifier:          pmD3RsRlZr2BiSZlPuHVgDLYM8Uckwf2VFBBGxOHdUs=
Subject key identifier:   3F:23:EF:C1:02:D7:3A:08:9C:F4:E8:29:98:48:8C:4E:BC:B5:E5:AE
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       0217
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/PyPvwQLXOgic9OgpmEiMTry15a4.roa
Signing time:             Tue 31 Mar 2026 07:35:42 +0000
ROA not before:           Tue 31 Mar 2026 07:35:42 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2497
IP address blocks:        150.31.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 11:22:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 535 (0x217)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Mar 31 07:35:42 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=3F23EFC102D73A089CF4E82998488C4EBCB5E5AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:e0:e2:67:ad:60:9a:67:c2:db:60:18:41:c2:
                    f2:d0:30:20:f6:10:ce:f9:4a:c2:e7:a7:0e:ff:d1:
                    f4:ea:0c:90:fd:f1:89:fd:93:95:e1:70:fe:8f:17:
                    69:b8:0e:2a:b1:36:5c:0a:2c:de:13:ca:3b:e6:fc:
                    de:9d:a7:38:69:d3:ed:07:ae:d5:f7:a7:64:62:a3:
                    4e:34:5d:3d:f6:cd:52:dd:21:38:f6:52:b8:a4:40:
                    51:a0:81:b5:c2:88:8e:ea:14:cd:78:02:79:2d:25:
                    dc:62:c8:46:d8:d6:6e:31:53:bd:f0:93:1a:55:01:
                    49:36:78:46:54:b9:2c:f1:50:4c:75:f2:ee:38:29:
                    4d:84:5e:b2:f3:98:dd:fc:fc:f4:6b:df:41:a2:c4:
                    79:c1:f9:42:0d:dd:a7:39:09:7f:8a:b2:92:2d:2b:
                    73:f0:ac:3d:d9:90:45:d3:6c:40:23:a5:aa:31:ce:
                    b5:8a:ab:bb:cc:00:52:23:ef:1e:ef:6a:bd:25:0a:
                    bc:32:7f:48:46:c3:0b:6f:d4:4e:d9:46:18:57:17:
                    1d:8d:07:8c:0b:90:ec:1f:c4:89:19:04:68:a6:19:
                    7a:98:dd:aa:e6:b2:85:6c:76:7d:3b:7b:cf:86:18:
                    ca:62:fc:e1:03:58:42:b1:77:d5:4b:b0:c3:7f:b1:
                    09:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:23:EF:C1:02:D7:3A:08:9C:F4:E8:29:98:48:8C:4E:BC:B5:E5:AE
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/PyPvwQLXOgic9OgpmEiMTry15a4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.31.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         38:5b:47:9f:c1:e4:09:3c:dd:12:c4:a8:81:83:49:eb:92:29:
         b7:df:96:b2:f8:35:f3:57:8b:4d:84:81:d6:d3:a1:21:8a:cc:
         31:a4:ec:ac:86:06:07:b0:70:b5:75:b2:d3:9a:23:c3:52:9d:
         18:ed:89:93:50:b6:63:45:42:c7:49:88:f9:1a:7d:bb:2a:47:
         63:fc:e6:59:ee:a3:f7:95:ed:7c:88:41:50:f8:b0:28:05:91:
         9a:8d:f6:a2:dc:9e:c0:e4:45:f0:d4:9c:5d:aa:d6:19:9b:36:
         29:eb:b4:8a:6b:bb:01:5f:a0:a3:5b:0a:df:12:7b:dd:18:95:
         d0:4e:1a:2b:8e:4e:25:d5:5a:00:9d:3f:b9:88:ce:f3:10:c9:
         bb:ed:92:cd:38:f2:35:64:1a:b3:f1:93:dd:f3:75:56:31:9c:
         92:d5:d4:5f:d0:ab:a2:5c:c3:3a:46:52:d5:d0:8b:4f:3a:71:
         f4:6b:3a:e0:bb:60:4f:af:bc:e7:99:16:d2:9c:23:41:3e:9d:
         39:0b:be:42:b4:18:e8:5a:24:0d:69:de:f3:b4:df:4b:32:d0:
         d5:c0:5c:d2:cd:6e:f1:ab:6a:0f:83:cb:18:f8:50:13:03:36:
         2a:29:86:ea:58:63:4e:d5:63:4c:c1:17:14:76:bb:47:55:c2:
         4a:55:ba:e9
-----BEGIN CERTIFICATE-----
MIIEuDCCA6CgAwIBAgICAhcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4
M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yNjAzMzEw
NzM1NDJaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDNGMjNFRkMxMDJENzNB
MDg5Q0Y0RTgyOTk4NDg4QzRFQkNCNUU1QUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDu4OJnrWCaZ8LbYBhBwvLQMCD2EM75SsLnpw7/0fTqDJD98Yn9
k5XhcP6PF2m4DiqxNlwKLN4Tyjvm/N6dpzhp0+0HrtX3p2Rio040XT32zVLdITj2
UrikQFGggbXCiI7qFM14AnktJdxiyEbY1m4xU73wkxpVAUk2eEZUuSzxUEx18u44
KU2EXrLzmN38/PRr30GixHnB+UIN3ac5CX+KspItK3PwrD3ZkEXTbEAjpaoxzrWK
q7vMAFIj7x7var0lCrwyf0hGwwtv1E7ZRhhXFx2NB4wLkOwfxIkZBGimGXqY3arm
soVsdn07e8+GGMpi/OEDWEKxd9VLsMN/sQmPAgMBAAGjggHUMIIB0DAdBgNVHQ4E
FgQUPyPvwQLXOgic9OgpmEiMTry15a4wHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui
XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM
RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUF
BzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzYvUHlQdndRTFhPZ2ljOU9ncG1FaU1UcnkxNWE0LnJvYTAeBggrBgEF
BQcBBwEB/wQPMA0wCwQCAAEwBQMDAJYfMA0GCSqGSIb3DQEBCwUAA4IBAQA4W0ef
weQJPN0SxKiBg0nrkim335ay+DXzV4tNhIHW06EhiswxpOyshgYHsHC1dbLTmiPD
Up0Y7YmTULZjRULHSYj5Gn27Kkdj/OZZ7qP3le18iEFQ+LAoBZGajfai3J7A5EXw
1JxdqtYZmzYp67SKa7sBX6CjWwrfEnvdGJXQThorjk4l1VoAnT+5iM7zEMm77ZLN
OPI1ZBqz8ZPd83VWMZyS1dRf0KuiXMM6RlLV0ItPOnH0azrgu2BPr7znmRbSnCNB
Pp05C75CtBjoWiQNad7ztN9LMtDVwFzSzW7xq2oPg8sY+FATAzYqKYbqWGNO1WNM
wRcUdrtHVcJKVbrp
-----END CERTIFICATE-----
Generated at Tue Apr 7 13:25:05 2026 by rpki-client