Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30030/HxHQHHr4YhFlpu6x7ulYwrRKzm8.roa
File:                     HxHQHHr4YhFlpu6x7ulYwrRKzm8.roa (raw, json)
Hash identifier:          EfzJ21jPqIn4r0dz8d8BsEmWvawY5G1soV14QSsyRxc=
Subject key identifier:   1F:11:D0:1C:7A:F8:62:11:65:A6:EE:B1:EE:E9:58:C2:B4:4A:CE:6F
Certificate issuer:       /CN=E3D7C90E9CC2CA8CDB1D74C058B122B9AE3EFFD6
Certificate serial:       61
Authority key identifier: E3:D7:C9:0E:9C:C2:CA:8C:DB:1D:74:C0:58:B1:22:B9:AE:3E:FF:D6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/49fJDpzCyozbHXTAWLEiua4-_9Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30030/HxHQHHr4YhFlpu6x7ulYwrRKzm8.roa
Signing time:             Tue 31 Mar 2026 07:39:25 +0000
ROA not before:           Tue 31 Mar 2026 07:39:25 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2527
IP address blocks:        2001:3b8::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30030/49fJDpzCyozbHXTAWLEiua4-_9Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30030/49fJDpzCyozbHXTAWLEiua4-_9Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/49fJDpzCyozbHXTAWLEiua4-_9Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97 (0x61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3D7C90E9CC2CA8CDB1D74C058B122B9AE3EFFD6
        Validity
            Not Before: Mar 31 07:39:25 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=1F11D01C7AF8621165A6EEB1EEE958C2B44ACE6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:29:02:b9:b3:5c:99:4c:7b:b5:37:bf:b9:38:
                    46:f4:c1:c4:38:f0:c5:2a:47:73:9f:ed:02:b9:e6:
                    80:49:b2:a2:ac:d4:75:af:6d:fa:ce:a8:40:ce:51:
                    33:67:09:67:8f:47:4b:ff:4c:28:ad:2f:f6:05:92:
                    d7:fd:c7:da:77:b9:4e:3b:79:bd:37:9a:16:3f:28:
                    ec:72:ef:7f:c7:a3:bd:d1:65:c9:b9:20:aa:7d:52:
                    c1:3b:90:2d:02:93:b1:b1:d6:4d:07:e9:f7:ba:83:
                    aa:f6:2b:35:46:7a:cb:11:e6:d4:72:93:15:93:cf:
                    23:3b:4a:d4:db:94:fd:54:30:7e:71:e8:9a:71:9d:
                    8d:8c:c5:dd:f3:52:14:30:32:8d:1a:81:1c:2d:0f:
                    1a:74:68:a9:ba:f4:67:23:5e:80:8a:0a:7f:f3:b7:
                    6c:22:ae:8a:aa:e2:fd:73:50:2b:72:48:18:e2:1c:
                    de:88:1b:3e:f7:7d:09:28:73:71:88:3d:5b:76:bb:
                    3b:fd:24:f9:9c:34:d1:c6:a0:b9:b6:bd:c6:e3:15:
                    73:b9:5e:2a:96:7d:40:82:a7:5a:cb:41:75:e7:ab:
                    64:c3:34:63:ac:ab:99:76:e5:ba:37:00:fe:ee:67:
                    ef:a5:71:9b:d7:90:73:04:19:52:9a:e5:6e:c8:a9:
                    8b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:11:D0:1C:7A:F8:62:11:65:A6:EE:B1:EE:E9:58:C2:B4:4A:CE:6F
            X509v3 Authority Key Identifier:
                keyid:E3:D7:C9:0E:9C:C2:CA:8C:DB:1D:74:C0:58:B1:22:B9:AE:3E:FF:D6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30030/49fJDpzCyozbHXTAWLEiua4-_9Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/49fJDpzCyozbHXTAWLEiua4-_9Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30030/HxHQHHr4YhFlpu6x7ulYwrRKzm8.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:3b8::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:12:29:fa:10:dc:ea:76:5a:9d:53:d4:87:fe:35:ba:20:78:
         ce:03:a1:ae:76:45:63:69:55:a2:aa:a6:4d:51:20:82:24:e2:
         b6:70:c4:78:21:38:e2:49:3f:8d:6e:6c:f6:23:d7:96:85:0a:
         30:c7:c7:f4:37:59:a8:a4:e1:bb:b3:80:c2:90:06:4b:c3:bb:
         94:cb:97:9a:aa:55:4d:79:bf:95:f0:ee:b2:67:74:5e:46:8b:
         f3:c4:38:f5:89:46:e4:a1:b5:78:42:a0:d8:09:6c:f0:63:2b:
         30:9b:5e:b9:73:92:cf:9f:84:78:37:a5:8c:2d:a1:a3:07:74:
         92:2c:51:58:a4:bc:dc:6d:fd:29:e1:af:71:37:b6:1d:a3:42:
         c3:c2:a9:ba:e7:2d:04:6d:cb:f1:0e:a9:e2:37:dd:51:36:28:
         69:3a:5a:de:5a:4f:4f:23:88:5e:cc:0b:61:c2:17:5b:ab:69:
         ca:aa:54:1a:23:f5:84:24:c2:87:02:2a:da:9c:e2:b4:d3:69:
         be:b5:90:b9:34:fb:62:b6:0a:b0:07:a7:82:a7:f5:b9:02:31:
         1f:90:28:54:bc:98:13:63:42:c2:a1:56:a6:9c:04:ac:0a:88:
         43:f4:7c:07:46:b5:63:a2:eb:1c:1b:d0:38:3a:3a:bc:94:7f:
         7e:37:ce:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:18:29 2026 by rpki-client