Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20250/Hwp12BnVa8T9EGtoKcfBISvmwys.roa
File:                     Hwp12BnVa8T9EGtoKcfBISvmwys.roa (raw, json)
Hash identifier:          p1IObtWpcX0K5b7f/1RAekirGBh13TGtNxhqa4S8aHA=
Subject key identifier:   1F:0A:75:D8:19:D5:6B:C4:FD:10:6B:68:29:C7:C1:21:2B:E6:C3:2B
Certificate issuer:       /CN=89FF1AE864ABF9F12614E3076404F556D56FFA82
Certificate serial:       21
Authority key identifier: 89:FF:1A:E8:64:AB:F9:F1:26:14:E3:07:64:04:F5:56:D5:6F:FA:82
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/if8a6GSr-fEmFOMHZAT1VtVv-oI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20250/Hwp12BnVa8T9EGtoKcfBISvmwys.roa
Signing time:             Tue 31 Mar 2026 08:38:13 +0000
ROA not before:           Tue 31 Mar 2026 08:38:13 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     59106
IP address blocks:        210.171.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20250/if8a6GSr-fEmFOMHZAT1VtVv-oI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20250/if8a6GSr-fEmFOMHZAT1VtVv-oI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/if8a6GSr-fEmFOMHZAT1VtVv-oI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33 (0x21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89FF1AE864ABF9F12614E3076404F556D56FFA82
        Validity
            Not Before: Mar 31 08:38:13 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=1F0A75D819D56BC4FD106B6829C7C1212BE6C32B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:02:98:6a:d7:e7:a4:f9:4c:c6:08:08:08:cb:
                    b9:77:2d:3f:5f:e7:63:c3:3b:c0:3e:92:8b:c4:3a:
                    90:ab:09:45:8e:b1:38:52:7c:30:32:12:32:13:8f:
                    3a:d0:db:73:a2:5e:47:03:41:0a:ee:01:4c:d3:6c:
                    33:5b:b8:4e:12:99:8d:0d:bc:05:b4:67:5f:6d:45:
                    3d:eb:2f:69:7c:a0:ab:e4:8b:80:e0:77:67:03:71:
                    36:32:48:4a:75:05:f8:6f:10:05:2b:99:fe:0e:fc:
                    b3:29:4a:44:7a:3a:b8:bc:89:97:97:73:dd:71:36:
                    be:2f:1b:71:ae:b3:f7:22:5e:ab:03:d0:40:9c:a2:
                    86:31:c2:d2:87:fe:47:ca:e2:e9:52:6d:18:72:32:
                    c1:bb:9a:d3:64:d2:d7:36:09:60:5a:c2:7c:a5:a6:
                    5f:30:9e:f9:db:2d:d8:ac:c3:6d:56:8d:fb:61:28:
                    de:ef:62:90:63:34:9d:a9:9a:fb:46:6a:c5:84:c3:
                    6c:9b:85:5c:80:99:fa:d8:a2:88:4e:93:d8:97:94:
                    4b:24:ba:84:9a:93:03:4e:fa:de:b1:c0:f8:25:1f:
                    a4:e6:b8:8b:3b:d7:48:4f:12:3c:f8:26:a0:ed:d5:
                    17:75:d6:24:02:63:bc:78:04:14:29:81:c3:ba:de:
                    72:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:0A:75:D8:19:D5:6B:C4:FD:10:6B:68:29:C7:C1:21:2B:E6:C3:2B
            X509v3 Authority Key Identifier:
                keyid:89:FF:1A:E8:64:AB:F9:F1:26:14:E3:07:64:04:F5:56:D5:6F:FA:82

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20250/if8a6GSr-fEmFOMHZAT1VtVv-oI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/if8a6GSr-fEmFOMHZAT1VtVv-oI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20250/Hwp12BnVa8T9EGtoKcfBISvmwys.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.171.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4e:44:1f:32:15:6e:b1:dd:a3:90:fe:e9:96:82:93:11:eb:a3:
         3b:8e:36:82:bc:cc:d8:f1:a3:77:a8:a1:72:6c:78:72:e4:af:
         8b:b2:6f:a7:fa:a8:4a:4f:57:7d:c2:7a:a6:c0:f8:44:ea:4f:
         79:1e:11:71:b7:21:05:0c:45:d3:4f:d4:17:91:ef:69:4f:0a:
         85:14:20:10:15:67:2b:94:78:7a:12:54:68:b6:8a:da:4d:a7:
         29:e6:e8:0b:d5:35:9e:9a:7f:a9:38:56:b1:64:b2:89:31:f4:
         3e:37:6c:f6:2b:b4:15:85:44:ea:e1:79:42:94:26:69:2d:80:
         64:98:ec:9d:44:17:80:15:20:e2:55:a7:51:61:1a:ca:72:ea:
         82:42:56:5f:f3:cc:d4:e9:0a:1a:88:65:7e:be:ab:08:b1:83:
         de:c2:99:5d:44:60:ce:e5:aa:b7:7e:da:41:2f:e0:59:20:5d:
         d5:6d:07:0b:81:65:79:e6:84:5e:70:75:fb:43:ee:78:34:8f:
         01:3c:9b:b9:ae:c1:75:2b:2c:e4:f0:59:0e:af:ec:36:7f:b6:
         14:13:f5:90:30:57:74:f4:5e:a4:c6:38:8c:dd:01:b8:a2:0f:
         e6:f3:42:5f:d3:41:d0:66:64:11:82:c6:2f:51:67:1e:b2:b0:
         33:f9:8e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:29:16 2026 by rpki-client