Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30423/HaDwkpOi0SmVUAPMoeIp8TZBVEw.roa
File:                     HaDwkpOi0SmVUAPMoeIp8TZBVEw.roa (raw, json)
Hash identifier:          ZnE4mhGJ0ILl9DIcmho74sAOjeiY7Sdgxs5AcJAiRvI=
Subject key identifier:   1D:A0:F0:92:93:A2:D1:29:95:50:03:CC:A1:E2:29:F1:36:41:54:4C
Certificate issuer:       /CN=B910BD9437967C7AFDD374E1EA6EBED7FA6F96B5
Certificate serial:       53
Authority key identifier: B9:10:BD:94:37:96:7C:7A:FD:D3:74:E1:EA:6E:BE:D7:FA:6F:96:B5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/HaDwkpOi0SmVUAPMoeIp8TZBVEw.roa
Signing time:             Wed 18 Feb 2026 17:21:55 +0000
ROA not before:           Wed 18 Feb 2026 17:21:55 +0000
ROA not after:            Mon 15 Feb 2027 01:30:02 +0000
asID:                     58790
IP address blocks:        2401:d20:1020::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:55:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B910BD9437967C7AFDD374E1EA6EBED7FA6F96B5
        Validity
            Not Before: Feb 18 17:21:55 2026 GMT
            Not After : Feb 15 01:30:02 2027 GMT
        Subject: CN=1DA0F09293A2D129955003CCA1E229F13641544C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b2:02:8a:1b:5d:96:b9:0f:19:b2:3d:66:fb:
                    c7:19:10:b0:64:27:45:ea:bb:26:2d:5a:e5:18:12:
                    83:fb:11:3f:2f:d4:61:d2:6f:9a:f4:ae:e1:80:86:
                    1f:86:7d:e4:7d:76:66:dc:0f:5a:d4:71:70:c4:fd:
                    8d:f8:38:99:74:df:41:5e:ea:7f:f2:ce:3d:48:65:
                    2b:37:5f:9f:3c:8a:5c:38:2b:69:7f:55:57:0f:2c:
                    da:6a:d8:cf:9b:8c:4f:26:2f:3a:03:ff:fe:cf:95:
                    20:87:f8:3e:bb:0e:8d:46:63:43:eb:0f:b2:98:a1:
                    d8:6d:4e:8c:80:4d:02:56:08:14:f5:1a:42:12:b4:
                    e5:81:7d:fb:84:bf:d9:c4:7a:16:41:9b:01:91:ff:
                    85:2f:78:a8:9a:51:e7:8e:b1:5c:3c:b3:2c:c5:8e:
                    32:09:58:bb:7e:eb:a4:7d:21:f2:59:e1:d1:e8:15:
                    e4:de:66:95:07:f6:54:c4:c4:ff:d4:44:b1:47:95:
                    61:d0:c3:af:34:22:56:ec:29:cb:01:2e:c8:48:e1:
                    c1:0c:ac:af:96:d0:c7:01:6b:6d:33:66:c3:ff:f3:
                    63:88:43:3d:34:70:61:3e:e9:3b:33:e5:49:02:db:
                    28:35:6a:41:b4:55:f1:fe:80:dd:b4:e1:0c:25:6c:
                    50:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:A0:F0:92:93:A2:D1:29:95:50:03:CC:A1:E2:29:F1:36:41:54:4C
            X509v3 Authority Key Identifier:
                keyid:B9:10:BD:94:37:96:7C:7A:FD:D3:74:E1:EA:6E:BE:D7:FA:6F:96:B5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/HaDwkpOi0SmVUAPMoeIp8TZBVEw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:d20:1020::/44

    Signature Algorithm: sha256WithRSAEncryption
         24:50:0f:4a:46:3d:57:7e:81:89:61:0a:c2:7b:3f:87:43:f4:
         9d:6b:51:76:99:f6:35:c4:58:e4:5c:2c:d2:5f:b1:23:ec:73:
         c4:30:96:ff:f2:80:ed:62:45:ce:6c:36:03:c6:3e:c5:05:d3:
         49:4e:48:24:d8:db:6f:9a:d2:c4:b6:1d:99:bb:91:77:3d:0f:
         62:36:13:29:ce:26:73:fd:22:12:1e:9a:1f:20:f9:49:1e:93:
         fe:6f:d0:7a:15:1d:66:b9:99:0d:f7:ff:32:9f:6f:09:f9:63:
         98:a2:fb:d7:77:66:cc:c8:f3:22:bc:ff:e7:fa:24:f1:a7:2c:
         db:6e:11:b7:02:55:c6:c8:92:08:34:ce:cf:ce:b2:ff:44:fe:
         43:61:0e:e9:0e:df:95:6c:b8:9f:d3:b8:9b:a2:58:f3:77:fc:
         a1:a9:d8:1a:84:28:37:c3:6b:95:e5:c8:e0:44:7a:ef:41:97:
         09:a7:2a:f9:d5:82:8a:1c:23:1a:46:97:e0:a5:b2:2f:6a:47:
         c4:88:b3:fa:f5:b6:97:b3:bc:77:81:18:0c:3d:8d:a7:5e:09:
         86:fd:83:80:de:e0:26:30:8b:8d:3f:9d:27:f4:11:10:ae:ca:
         b4:80:06:fe:33:61:f9:0b:66:96:79:5e:d3:8d:ff:ce:1f:92:
         b4:f4:9e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:56:50 2026 by rpki-client