Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/hm-2-fm5noRb9M1lToXoQ_FDaUU.roa
File:                     hm-2-fm5noRb9M1lToXoQ_FDaUU.roa (raw, json)
Hash identifier:          YpO/tJyIhatMCdkJau/oe+U2iUvbTpV+LbuwO3mLXpc=
Subject key identifier:   86:6F:B6:F9:F9:B9:9E:84:5B:F4:CD:65:4E:85:E8:43:F1:43:69:45
Certificate issuer:       /CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Certificate serial:       BF
Authority key identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/hm-2-fm5noRb9M1lToXoQ_FDaUU.roa
Signing time:             Fri 17 Apr 2026 02:24:48 +0000
ROA not before:           Fri 17 Apr 2026 02:24:48 +0000
ROA not after:            Thu 15 Apr 2027 01:30:02 +0000
asID:                     9622
IP address blocks:        202.52.24.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 191 (0xbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
        Validity
            Not Before: Apr 17 02:24:48 2026 GMT
            Not After : Apr 15 01:30:02 2027 GMT
        Subject: CN=866FB6F9F9B99E845BF4CD654E85E843F1436945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:43:82:37:6d:ef:30:44:ad:97:6d:db:4b:0f:
                    9e:21:0e:56:86:84:48:aa:3b:40:24:f7:1b:4c:8f:
                    53:3d:0e:fb:7f:e0:1d:3c:9c:17:43:7c:96:99:c7:
                    c7:09:f6:e0:b4:aa:f6:32:06:0b:85:07:5f:99:96:
                    dc:7b:ca:27:94:08:5a:ae:12:d1:b4:c5:5b:60:35:
                    79:2b:46:5c:4e:47:07:a5:4b:46:66:bd:bf:7f:fd:
                    80:48:ed:20:01:bd:a1:db:79:8b:43:3c:98:99:b6:
                    db:4d:f9:43:41:f6:cd:18:89:d1:75:39:42:cf:d4:
                    95:47:ea:ce:fd:52:23:30:c8:28:d7:70:59:ac:10:
                    e5:95:b4:52:8c:70:58:78:71:f6:8f:d7:08:26:4d:
                    1e:90:d7:85:22:3d:5c:62:93:24:e4:02:f2:23:cc:
                    6b:06:3e:6a:f1:8a:a1:79:28:25:5e:9b:7c:bc:42:
                    eb:47:38:ec:69:f0:b5:28:b9:2b:76:b6:6f:0a:28:
                    33:0a:89:ce:b1:f2:0c:00:25:48:2b:bb:40:77:5c:
                    13:10:28:94:f4:07:c7:34:fd:60:1a:87:53:5c:da:
                    89:50:dd:dd:b1:5e:a3:bb:22:df:0f:81:bb:e3:a5:
                    af:fb:52:39:27:d6:72:1e:7b:0f:d9:d7:56:ff:b3:
                    e3:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:6F:B6:F9:F9:B9:9E:84:5B:F4:CD:65:4E:85:E8:43:F1:43:69:45
            X509v3 Authority Key Identifier:
                keyid:5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/hm-2-fm5noRb9M1lToXoQ_FDaUU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.52.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8b:d4:cc:ce:fa:47:25:71:c5:cb:c5:75:e9:08:b3:3f:d3:10:
         d2:0f:66:e5:81:15:07:c4:a1:45:16:b5:ff:19:46:6d:81:04:
         ff:22:a3:c8:26:02:db:ba:3e:3f:da:12:65:73:6d:9c:f1:af:
         30:58:97:2a:10:4a:68:b7:b5:e3:11:40:fc:24:84:a3:d8:b7:
         85:43:6f:d7:40:76:f0:b2:0c:b7:63:3d:64:c7:f3:8f:ee:28:
         07:1d:ce:74:17:0e:65:e8:a6:58:4e:8b:aa:0f:63:1b:d6:13:
         bf:8f:ee:22:be:96:c9:dd:fb:3c:29:af:59:c9:da:86:d4:fc:
         1b:63:61:6f:2d:fb:50:87:91:d9:c1:de:22:e9:44:13:0b:e2:
         16:bd:58:b7:ac:bf:68:3f:78:65:8d:f5:03:3b:83:53:6f:38:
         6f:62:2d:5f:28:e1:d1:ab:3a:5a:47:af:99:28:f3:b1:dc:5f:
         f7:24:7a:0c:4f:97:e5:6a:9f:4f:a8:b0:65:f3:e0:07:d8:a7:
         fe:df:88:cc:39:7c:2d:23:c6:3f:58:83:2d:85:e9:bd:1a:5d:
         06:5b:54:32:de:72:ac:d7:ac:68:37:4f:9b:ad:96:96:39:73:
         72:6b:a8:2a:b5:6c:32:55:2d:0c:86:7b:9d:46:f0:d0:28:69:
         63:3e:56:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:51:32 2026 by rpki-client