Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2166/fMCpU3Xynd15ONk6IEP5yrKgdyk.roa
File:                     fMCpU3Xynd15ONk6IEP5yrKgdyk.roa (raw, json)
Hash identifier:          6eJ3exhkMu6O95oHydjvsZk6Veff6PxUNDOY3inh2GA=
Subject key identifier:   7C:C0:A9:53:75:F2:9D:DD:79:38:D9:3A:20:43:F9:CA:B2:A0:77:29
Certificate issuer:       /CN=14ECDE331DB3ED1459D9E478D730170F4C70E9B7
Certificate serial:       1E
Authority key identifier: 14:EC:DE:33:1D:B3:ED:14:59:D9:E4:78:D7:30:17:0F:4C:70:E9:B7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FOzeMx2z7RRZ2eR41zAXD0xw6bc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/fMCpU3Xynd15ONk6IEP5yrKgdyk.roa
Signing time:             Tue 31 Mar 2026 08:43:20 +0000
ROA not before:           Tue 31 Mar 2026 08:43:20 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2907
IP address blocks:        150.99.0.0/16 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/FOzeMx2z7RRZ2eR41zAXD0xw6bc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/FOzeMx2z7RRZ2eR41zAXD0xw6bc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FOzeMx2z7RRZ2eR41zAXD0xw6bc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14ECDE331DB3ED1459D9E478D730170F4C70E9B7
        Validity
            Not Before: Mar 31 08:43:20 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7CC0A95375F29DDD7938D93A2043F9CAB2A07729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c0:fe:fb:bb:cf:bf:37:6e:e8:4b:5e:86:5f:
                    b6:ad:e4:50:f3:4b:1d:5e:15:54:e2:05:62:84:56:
                    ee:b8:7a:3b:9b:53:e3:7a:d1:90:60:d5:50:c6:68:
                    8f:df:69:a7:50:b2:c4:3b:83:bf:71:a1:87:3f:1a:
                    de:98:1b:30:84:62:b8:16:42:ca:1a:30:fc:26:3c:
                    fb:cb:43:a1:cb:4d:bc:8e:e1:5f:3c:75:28:6e:06:
                    87:bb:c6:71:b2:bb:52:ee:3c:19:83:47:87:e9:2f:
                    d9:f9:06:fc:07:51:f5:66:cf:bf:e8:bd:77:d9:09:
                    0b:bc:22:b9:04:ba:32:74:bc:4f:33:f8:4c:65:13:
                    ca:e2:ab:a1:39:fe:22:8a:4a:e9:b1:5f:f3:69:81:
                    46:a3:9b:43:7d:d8:e6:b7:b1:f0:dc:62:62:8f:43:
                    1e:66:bd:74:8a:cf:ee:9e:06:51:b6:23:04:e5:f4:
                    e2:4d:78:28:29:22:d2:ee:52:5e:88:69:11:7a:c9:
                    27:e9:6a:a9:1c:b5:00:6b:8d:e5:42:03:e2:46:05:
                    dd:a7:6b:b2:8f:e5:c5:71:89:10:65:32:e1:56:58:
                    1a:44:42:0b:e3:17:64:91:bf:c9:4b:2d:12:9c:b1:
                    5f:ca:1c:50:f1:fb:4d:1d:3e:2c:74:0f:a1:ed:9e:
                    a2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:C0:A9:53:75:F2:9D:DD:79:38:D9:3A:20:43:F9:CA:B2:A0:77:29
            X509v3 Authority Key Identifier:
                keyid:14:EC:DE:33:1D:B3:ED:14:59:D9:E4:78:D7:30:17:0F:4C:70:E9:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/FOzeMx2z7RRZ2eR41zAXD0xw6bc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FOzeMx2z7RRZ2eR41zAXD0xw6bc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/fMCpU3Xynd15ONk6IEP5yrKgdyk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.99.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a6:b5:8b:97:78:69:ae:39:bb:25:0e:33:45:34:03:43:f4:3f:
         bb:ae:b4:87:da:cb:f0:f2:5b:93:92:d9:f2:37:94:0c:4e:74:
         bc:df:cf:db:3f:7f:d8:1f:37:ed:af:3c:98:73:aa:a2:ee:e1:
         e9:a8:98:84:97:a7:d2:18:07:7b:3c:1f:a2:90:5f:b7:ab:b5:
         d9:bf:e1:77:09:26:1d:55:f8:98:71:cf:b7:c2:af:af:59:03:
         0f:b0:9b:8d:d0:13:97:bf:26:10:22:61:96:ce:e0:9f:8c:f2:
         f0:56:9e:09:70:24:24:1e:c6:0a:3f:32:d2:4c:0c:b5:bf:c8:
         7f:b5:26:4e:67:de:a2:6f:5e:2b:99:0b:67:26:05:a8:ec:8a:
         89:6f:de:de:bd:30:7b:82:42:cd:cb:b7:9b:a7:0f:5a:48:69:
         d8:9d:09:34:8e:d5:71:08:3c:ab:64:a5:11:cb:1d:9d:35:6b:
         29:c1:a0:a4:6f:f1:7f:52:fc:59:71:8a:e2:91:d4:c8:52:f6:
         b7:79:9a:f3:bd:15:fe:89:5b:24:0b:50:c1:7d:25:76:90:37:
         8d:cd:20:59:5c:c8:92:69:7b:89:73:60:14:0c:41:ff:8f:d0:
         17:ab:eb:1d:4b:64:da:95:73:e4:7a:75:d4:e2:f7:df:d9:fd:
         22:7b:68:44
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgIBHjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNEVD
REUzMzFEQjNFRDE0NTlEOUU0NzhENzMwMTcwRjRDNzBFOUI3MB4XDTI2MDMzMTA4
NDMyMFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoN0NDMEE5NTM3NUYyOURE
RDc5MzhEOTNBMjA0M0Y5Q0FCMkEwNzcyOTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMPA/vu7z783buhLXoZftq3kUPNLHV4VVOIFYoRW7rh6O5tT43rR
kGDVUMZoj99pp1CyxDuDv3Ghhz8a3pgbMIRiuBZCyhow/CY8+8tDoctNvI7hXzx1
KG4Gh7vGcbK7Uu48GYNHh+kv2fkG/AdR9WbPv+i9d9kJC7wiuQS6MnS8TzP4TGUT
yuKroTn+IopK6bFf82mBRqObQ33Y5rex8NxiYo9DHma9dIrP7p4GUbYjBOX04k14
KCki0u5SXohpEXrJJ+lqqRy1AGuN5UID4kYF3adrso/lxXGJEGUy4VZYGkRCC+MX
ZJG/yUstEpyxX8ocUPH7TR0+LHQPoe2eoncCAwEAAaOCAdowggHWMB0GA1UdDgQW
BBR8wKlTdfKd3Xk42TogQ/nKsqB3KTAfBgNVHSMEGDAWgBQU7N4zHbPtFFnZ5HjX
MBcPTHDptzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjE2Ni9GT3plTXgyejdSUloyZVI0MXpBWEQweHc2YmMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GT3plTXgyejdSUloyZVI0MXpBWEQw
eHc2YmMuY2VyMA4GA1UdDwEB/wQEAwIHgDByBggrBgEFBQcBCwRmMGQwYgYIKwYB
BQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMjE2Ni9mTUNwVTNYeW5kMTVPTms2SUVQNXlyS2dkeWsucm9hMB4G
CCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAlmMwDQYJKoZIhvcNAQELBQADggEB
AKa1i5d4aa45uyUOM0U0A0P0P7uutIfay/DyW5OS2fI3lAxOdLzfz9s/f9gfN+2v
PJhzqqLu4emomISXp9IYB3s8H6KQX7ertdm/4XcJJh1V+Jhxz7fCr69ZAw+wm43Q
E5e/JhAiYZbO4J+M8vBWnglwJCQexgo/MtJMDLW/yH+1Jk5n3qJvXiuZC2cmBajs
iolv3t69MHuCQs3Lt5unD1pIadidCTSO1XEIPKtkpRHLHZ01aynBoKRv8X9S/Flx
iuKR1MhS9rd5mvO9Ff6JWyQLUMF9JXaQN43NIFlcyJJpe4lzYBQMQf+P0Ber6x1L
ZNqVc+R6ddTi99/Z/SJ7aEQ=
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:01:49 2026 by rpki-client