Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/8PHUT29ITTDaBj810xZVEe1XH0A.roa
File:                     8PHUT29ITTDaBj810xZVEe1XH0A.roa (raw, json)
Hash identifier:          OOXNsFYWJ6rAGustWYyH3eQWv/USMTKWJ0yYKAdieK8=
Subject key identifier:   F0:F1:D4:4F:6F:48:4D:30:DA:06:3F:35:D3:16:55:11:ED:57:1F:40
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       01F7
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/8PHUT29ITTDaBj810xZVEe1XH0A.roa
Signing time:             Tue 31 Mar 2026 07:40:03 +0000
ROA not before:           Tue 31 Mar 2026 07:40:03 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2527
IP address blocks:        150.249.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503 (0x1f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Mar 31 07:40:03 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F0F1D44F6F484D30DA063F35D3165511ED571F40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:7c:d9:03:60:5f:cc:32:66:cc:19:c9:c1:ae:
                    0d:17:68:19:a8:53:9a:07:4e:04:77:6d:e1:87:39:
                    b8:4a:84:2e:31:a8:61:c4:7c:72:f3:59:22:bc:d2:
                    c0:39:2a:16:53:44:fb:44:d3:f5:93:6c:53:ff:22:
                    08:ca:e8:e7:55:c0:67:14:5a:47:9f:5d:2a:41:ef:
                    04:4b:95:8f:c0:2e:31:db:ab:2c:a2:9d:36:a0:a2:
                    d5:60:03:93:71:b2:85:5c:75:4d:eb:d9:75:2d:4d:
                    2e:b0:b9:23:75:33:77:13:78:1a:97:83:ab:01:66:
                    fd:e0:2d:ef:2e:a7:93:d6:67:a9:2f:fe:7b:8e:08:
                    41:8e:1b:21:a7:69:a6:af:6e:5f:4f:8d:cc:0a:56:
                    7a:36:de:22:c5:d9:dc:d2:6d:88:4d:36:5d:28:aa:
                    b5:35:a6:3a:a2:88:15:28:9a:e6:fe:c7:f4:ab:b6:
                    1c:0a:36:61:86:e1:c0:8b:4a:0d:74:a8:58:b7:25:
                    6d:44:d8:81:8f:3c:fd:e2:55:f2:3e:d9:60:6b:83:
                    f4:4c:0b:65:a5:9b:1f:29:97:0a:6a:f5:0f:1d:1d:
                    e9:16:ad:cd:40:fc:cb:d4:f6:ec:88:66:a7:3f:9c:
                    d0:fe:92:2e:05:d8:db:1f:2e:13:e6:46:a5:47:29:
                    ca:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F1:D4:4F:6F:48:4D:30:DA:06:3F:35:D3:16:55:11:ED:57:1F:40
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/8PHUT29ITTDaBj810xZVEe1XH0A.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.249.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         55:4a:f5:e6:b3:84:1c:1e:c8:7a:ee:fc:43:90:ff:43:3d:f6:
         69:19:46:57:ae:1f:35:64:d1:57:08:c0:ec:6e:8e:c4:b9:95:
         75:9c:ba:e9:ba:60:1a:77:58:a7:11:52:7f:86:cf:fb:ef:20:
         d9:4a:65:76:33:fe:2d:9b:a3:5f:ae:12:2d:d4:5a:25:d3:2d:
         46:c1:b4:1b:15:2b:c5:e6:2f:08:77:b4:6f:b4:54:62:f6:ac:
         02:aa:a6:35:e1:03:96:2d:2c:51:37:21:4e:e6:80:85:cb:d0:
         fa:44:67:bf:fe:6c:f3:2b:1e:83:af:45:16:26:4e:d7:4a:a7:
         f0:f2:fe:81:8e:61:c4:3c:e1:d6:f0:fc:a7:4a:70:f7:79:2e:
         8b:83:51:77:02:6d:3e:7e:1f:cc:3d:e7:40:26:05:ec:89:a4:
         86:54:6a:80:50:9a:22:dd:96:8f:4f:1c:14:bb:47:e0:03:44:
         f4:72:35:7e:a6:bb:a9:63:2f:a1:e1:0d:1b:66:60:c8:fd:5b:
         9a:88:64:4c:fa:60:0d:b1:90:4c:86:8f:82:e0:d2:96:28:d3:
         b8:2a:75:f9:ab:56:3a:b9:da:f5:57:b3:7d:70:21:02:14:91:
         2b:e8:bb:dc:99:fa:69:0f:70:87:63:cc:ea:ce:40:1a:a3:92:
         93:67:12:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:37:46 2026 by rpki-client