Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/484/hl1mmy_PumK-mV_1ZsvdLXCFp-I.roa
File:                     hl1mmy_PumK-mV_1ZsvdLXCFp-I.roa (raw, json)
Hash identifier:          8iDFNYqer0e8Fnxb6pAAqNBA9fZ7PKa4yCwCcSkwCI0=
Subject key identifier:   86:5D:66:9B:2F:CF:BA:62:BE:99:5F:F5:66:CB:DD:2D:70:85:A7:E2
Certificate issuer:       /CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A
Certificate serial:       46
Authority key identifier: C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/hl1mmy_PumK-mV_1ZsvdLXCFp-I.roa
Signing time:             Tue 31 Mar 2026 08:43:36 +0000
ROA not before:           Tue 31 Mar 2026 08:43:36 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9354
IP address blocks:        202.157.238.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 13:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A
        Validity
            Not Before: Mar 31 08:43:36 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=865D669B2FCFBA62BE995FF566CBDD2D7085A7E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:fc:fd:df:55:5d:8b:8a:89:7d:48:80:04:61:
                    31:92:15:fd:2e:b1:f2:c6:90:94:dd:a0:f7:99:73:
                    09:b9:4d:a7:d0:54:08:80:a4:d7:e8:2c:a4:d4:3a:
                    da:63:2c:c9:ca:ef:4e:a7:5c:b2:90:c7:59:a0:8e:
                    a8:e3:b6:6c:71:0f:d0:4a:15:02:57:23:ca:74:1c:
                    69:07:42:5f:92:ca:3b:ce:09:2c:2b:32:4c:0a:37:
                    a0:1f:e5:e8:9c:2e:ef:82:63:2c:71:2a:9a:5d:de:
                    91:ab:be:47:0f:73:be:60:c4:13:42:11:4f:f4:79:
                    be:29:1c:77:30:c4:83:fc:d6:25:ba:41:56:ac:10:
                    27:bf:c9:a8:12:c3:b9:79:be:33:81:22:55:1d:b0:
                    34:5e:3e:7e:4c:47:78:0b:b1:4e:ba:55:26:a1:ca:
                    77:7f:9e:b6:55:d4:35:cb:54:41:f2:bf:40:84:d3:
                    d2:09:67:ee:a1:cb:bd:cf:c5:ee:0a:bb:fe:e3:b0:
                    53:32:b0:45:25:e5:6d:81:1c:3e:c5:29:a8:b3:d2:
                    2a:2c:dd:48:5c:c7:f0:c0:24:3f:2e:c1:58:26:9a:
                    10:f2:7c:aa:d7:c3:ef:39:9a:11:f2:7e:7f:09:c5:
                    22:ab:b3:a1:17:32:69:18:13:01:eb:83:17:42:8e:
                    e4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:5D:66:9B:2F:CF:BA:62:BE:99:5F:F5:66:CB:DD:2D:70:85:A7:E2
            X509v3 Authority Key Identifier:
                keyid:C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/hl1mmy_PumK-mV_1ZsvdLXCFp-I.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.157.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2f:dd:93:83:5b:ef:87:ff:f3:7e:e9:eb:2c:31:23:f0:28:d3:
         82:77:b1:9d:16:f0:97:1f:91:9f:a3:26:35:01:80:fc:82:bc:
         1a:8b:a0:cd:c0:a2:8b:4a:f0:b7:5e:7a:26:83:5e:a8:68:9a:
         b0:b1:44:58:a2:7b:a4:39:78:02:bd:60:0c:12:69:a5:f2:00:
         15:ac:1c:36:e2:5d:04:63:68:f9:11:37:34:1d:2a:69:09:66:
         cc:9a:17:28:fa:72:47:dd:bf:6f:99:dc:f8:84:b3:19:a7:74:
         ff:9a:3a:ad:b1:d6:5b:f0:a9:e0:e8:2f:52:78:38:b8:7b:ae:
         87:93:f8:54:93:63:20:05:9b:22:2d:9b:70:80:cc:6c:26:e7:
         49:8e:b2:70:d6:65:ae:f9:aa:20:72:de:33:0c:69:75:9f:8f:
         cf:09:6c:e2:21:db:21:cf:08:3a:0e:0c:ca:c7:53:6a:3b:c9:
         44:67:32:32:39:f6:5d:5e:e4:5e:6c:e7:cd:4b:1d:e4:f0:e7:
         5d:f2:b4:94:19:25:5b:bd:f0:3a:2a:06:7b:1c:9f:68:8f:c5:
         6b:31:8b:4f:53:0d:cb:8b:c2:35:9f:01:7a:2c:90:2e:17:32:
         d0:2f:b8:11:3e:11:81:dc:4f:a0:c0:41:20:82:8f:f4:8c:29:
         14:39:b9:dd
-----BEGIN CERTIFICATE-----
MIIEvDCCA6SgAwIBAgIBRjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDMDk4
NkMwRjJEQjJENEZFNzA3NjcyQzIyNzkzN0JFQUE5RjVENzhBMB4XDTI2MDMzMTA4
NDMzNloXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoODY1RDY2OUIyRkNGQkE2
MkJFOTk1RkY1NjZDQkREMkQ3MDg1QTdFMjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOn8/d9VXYuKiX1IgARhMZIV/S6x8saQlN2g95lzCblNp9BUCICk
1+gspNQ62mMsycrvTqdcspDHWaCOqOO2bHEP0EoVAlcjynQcaQdCX5LKO84JLCsy
TAo3oB/l6Jwu74JjLHEqml3ekau+Rw9zvmDEE0IRT/R5vikcdzDEg/zWJbpBVqwQ
J7/JqBLDuXm+M4EiVR2wNF4+fkxHeAuxTrpVJqHKd3+etlXUNctUQfK/QITT0gln
7qHLvc/F7gq7/uOwUzKwRSXlbYEcPsUpqLPSKizdSFzH8MAkPy7BWCaaEPJ8qtfD
7zmaEfJ+fwnFIquzoRcyaRgTAeuDF0KO5KUCAwEAAaOCAdkwggHVMB0GA1UdDgQW
BBSGXWabL8+6Yr6ZX/Vmy90tcIWn4jAfBgNVHSMEGDAWgBTAmGwPLbLU/nB2csIn
k3vqqfXXijAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDg0L3dKaHNEeTJ5MVA1d2RuTENKNU43NnFuMTE0by5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3dKaHNEeTJ5MVA1d2RuTENKNU43NnFu
MTE0by5jZXIwDgYDVR0PAQH/BAQDAgeAMHEGCCsGAQUFBwELBGUwYzBhBggrBgEF
BQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5MUE3
MzgxMDAwMC80ODQvaGwxbW15X1B1bUstbVZfMVpzdmRMWENGcC1JLnJvYTAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcqd7jANBgkqhkiG9w0BAQsFAAOCAQEA
L92Tg1vvh//zfunrLDEj8CjTgnexnRbwlx+Rn6MmNQGA/IK8GougzcCii0rwt156
JoNeqGiasLFEWKJ7pDl4Ar1gDBJppfIAFawcNuJdBGNo+RE3NB0qaQlmzJoXKPpy
R92/b5nc+ISzGad0/5o6rbHWW/Cp4OgvUng4uHuuh5P4VJNjIAWbIi2bcIDMbCbn
SY6ycNZlrvmqIHLeMwxpdZ+Pzwls4iHbIc8IOg4MysdTajvJRGcyMjn2XV7kXmzn
zUsd5PDnXfK0lBklW73wOioGexyfaI/FazGLT1MNy4vCNZ8BeiyQLhcy0C+4ET4R
gdxPoMBBIIKP9IwpFDm53Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:07:50 2026 by rpki-client