Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/240/HtHaY4RbHWkt_1yr25_HH13lceg.roa
File:                     HtHaY4RbHWkt_1yr25_HH13lceg.roa (raw, json)
Hash identifier:          dHWHs2C7uFw+gkdx1b/mTdK1PQDdR8jjdBUU9p//dAA=
Subject key identifier:   1E:D1:DA:63:84:5B:1D:69:2D:FF:5C:AB:DB:9F:C7:1F:5D:E5:71:E8
Certificate issuer:       /CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
Certificate serial:       5D
Authority key identifier: B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/HtHaY4RbHWkt_1yr25_HH13lceg.roa
Signing time:             Tue 31 Mar 2026 08:34:07 +0000
ROA not before:           Tue 31 Mar 2026 08:34:07 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9597
IP address blocks:        27.34.160.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
        Validity
            Not Before: Mar 31 08:34:07 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=1ED1DA63845B1D692DFF5CABDB9FC71F5DE571E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:28:91:39:33:26:32:d3:16:3b:72:f0:94:4b:
                    8b:c4:8c:54:f1:d2:9a:42:b4:18:37:eb:9c:69:ce:
                    a0:d9:02:dd:8f:89:c9:64:d3:3a:ce:36:b0:02:3c:
                    e4:6b:e1:9b:09:0b:3a:b1:7b:b5:cd:0b:32:d7:c1:
                    0f:ba:9b:ee:6a:c9:e3:21:88:a1:77:6b:31:c7:e5:
                    1e:15:29:0a:ca:6a:3f:57:52:26:09:fb:89:d4:2e:
                    df:b5:12:5a:25:39:e0:29:2d:9a:7f:22:2b:cf:87:
                    07:76:ad:7d:62:7a:b8:5c:7c:1b:21:eb:5f:31:ea:
                    e9:82:40:30:7b:a5:b5:b2:b4:a4:0c:a6:35:e6:48:
                    c9:2c:1b:78:cb:53:34:e2:54:e7:0d:23:36:ea:0f:
                    0c:6b:f2:53:25:09:99:0c:b0:d7:7f:10:18:e1:42:
                    7c:01:d6:95:b9:39:6a:d2:fa:fe:53:48:9e:8b:ad:
                    c9:5e:a5:49:58:08:7f:2a:bb:1a:43:62:ee:be:c3:
                    f0:df:b7:4f:d8:7e:ce:d2:53:92:13:7b:77:5a:29:
                    0e:ca:7b:0a:7b:87:87:fb:cc:d8:db:49:10:63:68:
                    64:68:be:bd:5f:aa:40:11:2f:7e:ef:71:49:98:68:
                    3c:62:7a:36:bd:d4:d5:59:f0:b0:78:14:2d:6d:51:
                    04:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:D1:DA:63:84:5B:1D:69:2D:FF:5C:AB:DB:9F:C7:1F:5D:E5:71:E8
            X509v3 Authority Key Identifier:
                keyid:B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/HtHaY4RbHWkt_1yr25_HH13lceg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.34.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3a:05:a5:93:aa:23:92:88:6f:9c:30:b5:d3:6c:71:9b:2d:b3:
         ce:0b:65:a8:37:4b:5c:fa:c0:14:4b:db:a2:54:31:c0:3f:df:
         a4:32:30:a7:12:18:18:53:2c:97:5c:c3:a2:df:8d:db:d6:f0:
         bc:4a:d5:43:62:5d:0e:3d:a1:f7:36:61:e9:f6:57:b0:ac:de:
         da:93:e7:ef:c1:71:26:73:ec:06:e9:8b:6e:3d:88:11:87:86:
         6f:aa:29:4f:ad:8d:e3:b7:7d:8f:df:0f:0e:8a:e2:af:01:d4:
         2a:36:82:16:79:55:bd:05:97:5d:d7:ac:4f:20:a0:02:68:ca:
         10:7a:d3:75:f5:30:d9:7f:f3:a8:63:d3:9d:8c:39:11:67:a9:
         21:4e:48:14:c6:02:97:6a:ef:1a:d8:5f:16:9a:84:4a:db:2e:
         3b:e2:ac:6e:84:45:ee:1b:f5:24:15:2c:5b:e2:9a:ba:74:bb:
         a9:6e:25:68:c9:bf:2a:ea:06:a1:a7:1e:2b:ee:26:9f:8b:dc:
         73:0e:87:c8:3a:19:4e:6b:26:7f:82:dc:08:96:9c:66:fb:b4:
         5f:c0:ee:c2:91:bb:91:26:6a:bb:8d:59:84:f5:c1:88:7d:83:
         3f:fa:31:d5:f5:b5:0a:71:20:9e:81:ad:16:33:64:db:f5:3d:
         1a:e4:c3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:35:00 2026 by rpki-client