Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10173/HrpBhuIuU-kIvOkj1j1uephx3kg.roa
File:                     HrpBhuIuU-kIvOkj1j1uephx3kg.roa (raw, json)
Hash identifier:          wQVygISWIFXw/J+dd0hIjfGVyPcD+Fy4vN8CFvPLd4w=
Subject key identifier:   1E:BA:41:86:E2:2E:53:E9:08:BC:E9:23:D6:3D:6E:7A:98:71:DE:48
Certificate issuer:       /CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
Certificate serial:       E9
Authority key identifier: 10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/HrpBhuIuU-kIvOkj1j1uephx3kg.roa
Signing time:             Tue 31 Mar 2026 07:31:32 +0000
ROA not before:           Tue 31 Mar 2026 07:31:32 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18126
IP address blocks:        210.173.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 233 (0xe9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
        Validity
            Not Before: Mar 31 07:31:32 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=1EBA4186E22E53E908BCE923D63D6E7A9871DE48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a4:a7:2c:8d:48:89:b4:77:ae:c2:97:f6:8a:
                    8f:12:4c:11:0d:b7:77:56:fa:03:56:fd:50:9e:05:
                    06:64:0c:93:30:b7:7e:05:48:b0:b5:e9:81:bd:1a:
                    96:bc:ca:63:73:28:3f:9b:3e:29:87:b0:58:ae:c7:
                    94:25:7b:45:ce:fb:5e:3b:7c:93:61:83:0f:e6:40:
                    c5:96:4f:33:1e:71:9d:c1:a9:0b:43:6b:eb:24:66:
                    e6:05:0d:2d:83:8f:9d:ba:e3:4c:b9:74:df:06:76:
                    e7:1c:0f:9d:c7:af:73:35:fc:53:e7:41:56:32:a1:
                    fd:c1:3f:67:49:63:7a:8a:3a:78:97:d6:d4:71:22:
                    4c:dc:d8:56:90:a7:54:25:1d:a2:0c:e3:e0:47:05:
                    60:34:ed:4f:9e:60:c9:e6:63:f8:9c:b3:76:08:0a:
                    b6:34:d1:69:77:9d:65:82:ac:32:d3:69:36:14:c0:
                    e6:43:9a:9d:9e:87:5a:ed:f2:68:f6:ea:7f:45:26:
                    86:3c:a4:95:38:75:50:55:09:c7:41:33:38:5b:6e:
                    42:23:0c:44:97:b9:c7:9c:a9:e8:24:f6:16:aa:b5:
                    5e:ae:dc:4e:65:f4:f1:5a:b4:94:f8:4f:f7:cf:73:
                    c8:4f:69:99:ce:da:9a:f4:1b:a0:a7:7a:fc:89:6f:
                    8e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:BA:41:86:E2:2E:53:E9:08:BC:E9:23:D6:3D:6E:7A:98:71:DE:48
            X509v3 Authority Key Identifier:
                keyid:10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/HrpBhuIuU-kIvOkj1j1uephx3kg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.173.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         03:3c:93:31:59:ee:16:c2:fe:6b:9c:8a:1c:94:b1:ed:40:c5:
         3a:2b:1d:28:ac:ee:a6:81:8d:db:79:d6:45:7c:87:df:4a:7e:
         ac:12:39:52:54:e9:31:67:c8:18:5e:f5:1b:f1:08:d3:e8:6d:
         61:b2:d6:4a:6e:96:3c:5d:e3:01:8d:16:ae:d9:02:cf:6d:3f:
         49:58:4c:af:2b:15:9c:c5:7e:a8:92:29:cc:84:56:28:7c:69:
         43:b3:ab:f5:44:26:f5:05:22:ad:2c:ff:01:b2:76:e9:7c:14:
         0a:1a:62:56:83:24:80:89:9a:c4:63:17:7a:65:f2:6a:3b:a2:
         d5:5f:07:3e:16:79:a8:6d:e3:9a:20:34:52:74:fd:6c:0d:e5:
         89:af:1a:c3:39:da:44:05:28:0b:d4:ab:16:a3:b0:a8:a3:10:
         50:e2:3c:15:ef:08:02:3f:f9:93:60:5f:1c:49:48:5a:39:1a:
         07:a9:f1:f4:a5:35:19:0c:26:67:75:8f:96:b9:3e:ca:82:26:
         0c:91:80:29:75:26:19:a8:93:f1:cd:f9:24:56:bc:35:2f:4f:
         24:80:ac:f5:4a:1d:ae:a4:52:87:9a:5f:c8:7e:88:90:cd:af:
         86:87:31:04:35:e8:17:9d:47:0f:bf:37:70:83:23:d4:09:d2:
         64:9b:07:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:01:48 2026 by rpki-client