Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/5750/l9E1FQkYwigPmo67UPbAADTvaTo.roa
File:                     l9E1FQkYwigPmo67UPbAADTvaTo.roa (raw, json)
Hash identifier:          bMwId/PSzzMmhgnFnsB4IUch24BwKY07/Oigc8DM8DU=
Subject key identifier:   97:D1:35:15:09:18:C2:28:0F:9A:8E:BB:50:F6:C0:00:34:EF:69:3A
Certificate issuer:       /CN=DC7ACE41B68FB5C26ECA14355EF2D74BE3EBCFC5
Certificate serial:       08
Authority key identifier: DC:7A:CE:41:B6:8F:B5:C2:6E:CA:14:35:5E:F2:D7:4B:E3:EB:CF:C5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3HrOQbaPtcJuyhQ1XvLXS-Prz8U.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5750/l9E1FQkYwigPmo67UPbAADTvaTo.roa
Signing time:             Tue 31 Mar 2026 08:47:44 +0000
ROA not before:           Tue 31 Mar 2026 08:47:44 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     152874
IP address blocks:        138.252.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5750/3HrOQbaPtcJuyhQ1XvLXS-Prz8U.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5750/3HrOQbaPtcJuyhQ1XvLXS-Prz8U.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3HrOQbaPtcJuyhQ1XvLXS-Prz8U.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 14:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC7ACE41B68FB5C26ECA14355EF2D74BE3EBCFC5
        Validity
            Not Before: Mar 31 08:47:44 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=97D135150918C2280F9A8EBB50F6C00034EF693A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f5:d5:de:fc:a1:b4:76:db:27:8b:d7:1c:a5:
                    c6:45:50:b4:50:49:93:cc:08:0d:03:13:c2:8e:29:
                    19:73:aa:9d:f7:43:1d:4e:6e:8e:2e:70:3b:af:8e:
                    78:c3:1b:be:09:c2:e3:ca:4d:8c:01:e0:95:8a:35:
                    6d:ca:90:f4:e5:c2:fa:20:fb:f4:81:28:3d:96:46:
                    ef:d7:0b:17:25:87:4f:21:46:c2:75:c2:98:0f:63:
                    8b:ea:92:eb:40:f0:eb:81:ee:5e:1a:8a:6f:4d:25:
                    8e:37:8b:ec:b2:4f:d5:ca:5d:2d:f1:28:7f:78:12:
                    fb:19:11:c3:f0:28:73:dc:2f:e4:7f:df:82:80:9f:
                    7d:f0:3c:f0:f1:1d:c3:61:8a:98:87:31:bc:31:a7:
                    23:2e:44:b6:bb:a7:4d:8f:3e:f4:90:45:e3:c1:26:
                    58:1e:f2:82:22:04:c5:ba:a4:26:06:76:9b:9f:71:
                    13:de:0e:bf:e1:8f:be:49:e7:28:7a:28:70:16:81:
                    2c:d5:d0:ab:e9:d7:9d:48:52:90:d7:c9:fa:25:98:
                    ff:b1:13:75:b1:8a:c6:f1:4f:45:31:b2:d2:91:00:
                    96:d2:9b:61:74:f1:d4:ab:db:8d:d1:f1:be:ac:c4:
                    09:d1:85:bc:14:04:eb:72:cb:48:79:9d:0b:32:5a:
                    fc:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:D1:35:15:09:18:C2:28:0F:9A:8E:BB:50:F6:C0:00:34:EF:69:3A
            X509v3 Authority Key Identifier:
                keyid:DC:7A:CE:41:B6:8F:B5:C2:6E:CA:14:35:5E:F2:D7:4B:E3:EB:CF:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5750/3HrOQbaPtcJuyhQ1XvLXS-Prz8U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3HrOQbaPtcJuyhQ1XvLXS-Prz8U.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5750/l9E1FQkYwigPmo67UPbAADTvaTo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.252.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         da:9f:f1:4c:65:ed:09:93:cc:b0:66:17:fd:75:eb:c4:58:07:
         a7:f5:be:50:29:b3:8e:21:55:e5:19:1e:d3:dc:55:ad:44:36:
         40:39:82:60:d7:17:97:1c:5a:38:c9:ba:70:74:2a:eb:b3:42:
         1e:d7:36:b1:b3:b3:4b:62:9c:5f:ac:65:0c:37:cc:87:e3:4e:
         0a:47:fe:6d:76:30:3b:43:cf:5e:00:2e:a9:e9:3e:71:3d:88:
         06:ff:f6:b4:37:99:9d:c4:05:d6:96:f9:6f:72:67:20:5e:a8:
         19:5b:bd:ec:e6:58:a4:05:3b:5c:4e:08:1c:6d:d0:a1:bf:90:
         9a:fa:c5:71:fc:84:c7:83:11:42:37:ce:a4:f1:79:66:c5:1f:
         1e:bc:97:8d:0c:25:1f:a6:d2:17:96:24:96:d6:bb:1a:24:28:
         47:87:9d:8c:08:a8:1f:22:f7:3b:c8:46:73:99:70:fd:cb:17:
         5c:e1:d5:75:14:aa:19:8d:ae:1f:3e:28:60:c6:fa:3a:19:1a:
         a9:83:27:1c:dc:bc:fc:86:56:1b:1a:7f:35:e7:fa:e3:ff:a7:
         9d:9f:96:c7:f7:57:d0:8e:d7:c3:69:71:1f:b0:8a:df:d8:40:
         6b:0f:7d:95:34:e6:04:f0:06:04:7d:e8:91:3d:7c:a1:14:cb:
         c0:cd:0e:e7
-----BEGIN CERTIFICATE-----
MIIEvjCCA6agAwIBAgIBCDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEQzdB
Q0U0MUI2OEZCNUMyNkVDQTE0MzU1RUYyRDc0QkUzRUJDRkM1MB4XDTI2MDMzMTA4
NDc0NFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoOTdEMTM1MTUwOTE4QzIy
ODBGOUE4RUJCNTBGNkMwMDAzNEVGNjkzQTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALz11d78obR22yeL1xylxkVQtFBJk8wIDQMTwo4pGXOqnfdDHU5u
ji5wO6+OeMMbvgnC48pNjAHglYo1bcqQ9OXC+iD79IEoPZZG79cLFyWHTyFGwnXC
mA9ji+qS60Dw64HuXhqKb00ljjeL7LJP1cpdLfEof3gS+xkRw/Aoc9wv5H/fgoCf
ffA88PEdw2GKmIcxvDGnIy5EtrunTY8+9JBF48EmWB7ygiIExbqkJgZ2m59xE94O
v+GPvknnKHoocBaBLNXQq+nXnUhSkNfJ+iWY/7ETdbGKxvFPRTGy0pEAltKbYXTx
1KvbjdHxvqzECdGFvBQE63LLSHmdCzJa/AUCAwEAAaOCAdswggHXMB0GA1UdDgQW
BBSX0TUVCRjCKA+ajrtQ9sAANO9pOjAfBgNVHSMEGDAWgBTces5Bto+1wm7KFDVe
8tdL4+vPxTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTc1MC8zSHJPUWJhUHRjSnV5aFExWHZMWFMtUHJ6OFUuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8zSHJPUWJhUHRjSnV5aFExWHZMWFMt
UHJ6OFUuY2VyMA4GA1UdDwEB/wQEAwIHgDByBggrBgEFBQcBCwRmMGQwYgYIKwYB
BQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvNTc1MC9sOUUxRlFrWXdpZ1BtbzY3VVBiQUFEVHZhVG8ucm9hMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAivwZMA0GCSqGSIb3DQEBCwUAA4IB
AQDan/FMZe0Jk8ywZhf9devEWAen9b5QKbOOIVXlGR7T3FWtRDZAOYJg1xeXHFo4
ybpwdCrrs0Ie1zaxs7NLYpxfrGUMN8yH404KR/5tdjA7Q89eAC6p6T5xPYgG//a0
N5mdxAXWlvlvcmcgXqgZW73s5likBTtcTggcbdChv5Ca+sVx/ITHgxFCN86k8Xlm
xR8evJeNDCUfptIXliSW1rsaJChHh52MCKgfIvc7yEZzmXD9yxdc4dV1FKoZja4f
Pihgxvo6GRqpgycc3Lz8hlYbGn815/rj/6edn5bH91fQjtfDaXEfsIrf2EBrD32V
NOYE8AYEfeiRPXyhFMvAzQ7n
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:22:20 2026 by rpki-client