Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/ro0snw5f8JpxItA8_4p3BmSDXi4.roa
File:                     ro0snw5f8JpxItA8_4p3BmSDXi4.roa (raw, json)
Hash identifier:          uvbDWHi9pS044JdZiL6tkRJOMEwAWDI2ufu3HafHc78=
Subject key identifier:   AE:8D:2C:9F:0E:5F:F0:9A:71:22:D0:3C:FF:8A:77:06:64:83:5E:2E
Certificate issuer:       /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial:       BA
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/ro0snw5f8JpxItA8_4p3BmSDXi4.roa
Signing time:             Tue 31 Mar 2026 08:17:43 +0000
ROA not before:           Tue 31 Mar 2026 08:17:43 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2514
IP address blocks:        210.150.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 186 (0xba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
        Validity
            Not Before: Mar 31 08:17:43 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=AE8D2C9F0E5FF09A7122D03CFF8A770664835E2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c0:bb:1a:1d:4a:32:26:ca:1a:33:ca:a2:2f:
                    41:00:cf:31:e5:19:93:43:5f:6e:ce:00:8d:71:9a:
                    e5:21:e8:e2:9d:81:d2:40:db:18:70:b6:15:cb:c5:
                    c7:17:1f:4f:46:86:50:ab:78:22:08:80:62:68:95:
                    df:5a:9b:9c:a0:ea:ef:4d:33:e6:ec:74:bf:5c:a9:
                    c6:04:40:59:47:35:d8:9b:3f:ab:22:52:02:a2:17:
                    db:9c:33:a7:63:a1:98:bf:79:da:3b:1b:40:3b:17:
                    f3:55:44:b6:56:47:18:77:9a:44:88:07:8e:e5:55:
                    71:1d:c8:ba:df:94:76:2b:f6:93:58:0b:79:81:90:
                    9d:9a:bc:c9:fe:56:be:c5:48:34:44:2f:4c:6a:5f:
                    bc:a1:9b:e1:4e:31:9c:2c:e7:60:01:93:6c:8a:cc:
                    4a:89:6f:2c:e3:a0:1a:5d:af:0d:62:98:f5:02:53:
                    eb:8c:7b:c6:1b:0b:7d:42:5f:e4:26:b1:d6:61:60:
                    77:8c:0a:f0:a2:74:8f:07:28:db:ff:e1:b0:a1:f5:
                    3d:d1:9c:4d:57:fb:47:4f:0a:f3:77:05:8e:d9:50:
                    4d:81:ed:b4:67:33:e4:1a:68:67:43:c2:13:49:c7:
                    f9:f2:df:57:0a:4e:b7:c5:a7:32:e1:8b:ba:bf:dd:
                    fe:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:8D:2C:9F:0E:5F:F0:9A:71:22:D0:3C:FF:8A:77:06:64:83:5E:2E
            X509v3 Authority Key Identifier:
                keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/ro0snw5f8JpxItA8_4p3BmSDXi4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.150.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5e:59:c8:c4:ec:e2:fc:b3:ad:21:70:ad:66:50:02:dc:84:7e:
         d6:77:d7:1a:17:30:c0:87:00:05:ad:cc:cd:34:85:85:df:39:
         dd:3f:35:c3:31:54:b1:d2:11:a7:8f:65:5d:ba:88:62:86:39:
         02:85:e0:0d:c8:92:a8:34:c1:ac:2a:ef:04:8c:1c:75:c8:a8:
         54:1a:43:d9:81:88:3b:1e:ee:a0:a3:04:c7:da:c6:c7:ef:89:
         03:76:19:b9:8e:ac:15:65:54:b0:0c:53:d6:98:8b:57:e6:98:
         55:e0:74:f9:c5:b2:68:a3:63:d5:7a:ee:e9:e7:f5:63:33:31:
         da:dc:60:ed:5f:9f:f4:9a:3c:01:a9:c7:97:c1:e3:fb:4d:06:
         77:a6:a9:66:61:a9:f9:2d:b3:f2:71:25:0c:58:20:92:09:3f:
         f0:f9:67:32:64:b2:2b:6a:76:d4:c1:5b:ee:8e:e4:4b:f3:91:
         5e:8e:29:e4:a0:4f:95:f2:d0:56:de:37:ec:b8:04:2d:5d:47:
         41:d2:b4:6a:fa:33:54:b5:30:80:8f:e4:b5:20:e4:34:10:47:
         3b:3b:4d:6e:51:96:8d:c9:73:ec:1f:03:5a:83:74:26:dc:c9:
         07:4f:d4:2c:5d:5e:c7:d8:73:0c:b7:ec:c0:9e:fe:81:fe:b9:
         5f:fc:3a:1b
-----BEGIN CERTIFICATE-----
MIIEujCCA6KgAwIBAgICALowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDZG
QTY2MjE5NEZDRjFFQjk4M0FCNDRDQzkxMzAwNDE4MDc3MEQxODAeFw0yNjAzMzEw
ODE3NDNaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEFFOEQyQzlGMEU1RkYw
OUE3MTIyRDAzQ0ZGOEE3NzA2NjQ4MzVFMkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDpwLsaHUoyJsoaM8qiL0EAzzHlGZNDX27OAI1xmuUh6OKdgdJA
2xhwthXLxccXH09GhlCreCIIgGJold9am5yg6u9NM+bsdL9cqcYEQFlHNdibP6si
UgKiF9ucM6djoZi/edo7G0A7F/NVRLZWRxh3mkSIB47lVXEdyLrflHYr9pNYC3mB
kJ2avMn+Vr7FSDREL0xqX7yhm+FOMZws52ABk2yKzEqJbyzjoBpdrw1imPUCU+uM
e8YbC31CX+QmsdZhYHeMCvCidI8HKNv/4bCh9T3RnE1X+0dPCvN3BY7ZUE2B7bRn
M+QaaGdDwhNJx/ny31cKTrfFpzLhi7q/3f7PAgMBAAGjggHWMIIB0jAdBgNVHQ4E
FgQUro0snw5f8JpxItA8/4p3BmSDXi4wHwYDVR0jBBgwFoAUBvpmIZT88euYOrRM
yRMAQYB3DRgwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzI5L0J2cG1JWlQ4OGV1WU9yUk15Uk1BUVlCM0RSZy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0J2cG1JWlQ4OGV1WU9yUk15Uk1BUVlC
M0RSZy5jZXIwDgYDVR0PAQH/BAQDAgeAMHAGCCsGAQUFBwELBGQwYjBgBggrBgEF
BQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC8yOS9ybzBzbnc1ZjhKcHhJdEE4XzRwM0JtU0RYaTQucm9hMB4GCCsG
AQUFBwEHAQH/BA8wDTALBAIAATAFAwMA0pYwDQYJKoZIhvcNAQELBQADggEBAF5Z
yMTs4vyzrSFwrWZQAtyEftZ31xoXMMCHAAWtzM00hYXfOd0/NcMxVLHSEaePZV26
iGKGOQKF4A3Ikqg0wawq7wSMHHXIqFQaQ9mBiDse7qCjBMfaxsfviQN2GbmOrBVl
VLAMU9aYi1fmmFXgdPnFsmijY9V67unn9WMzMdrcYO1fn/SaPAGpx5fB4/tNBnem
qWZhqfkts/JxJQxYIJIJP/D5ZzJksitqdtTBW+6O5EvzkV6OKeSgT5Xy0FbeN+y4
BC1dR0HStGr6M1S1MICP5LUg5DQQRzs7TW5Rlo3Jc+wfA1qDdCbcyQdP1CxdXsfY
cwy37MCe/oH+uV/8Ohs=
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:11:23 2026 by rpki-client