Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/HCBvBcoxNUGT6sWe2uOEtSKQKjw.roa
File:                     HCBvBcoxNUGT6sWe2uOEtSKQKjw.roa (raw, json)
Hash identifier:          voVF4WsxV3mz9KCWBSBl2CfHE4S9yWkr+7zhgW6tcJM=
Subject key identifier:   1C:20:6F:05:CA:31:35:41:93:EA:C5:9E:DA:E3:84:B5:22:90:2A:3C
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       01D9
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/HCBvBcoxNUGT6sWe2uOEtSKQKjw.roa
Signing time:             Tue 31 Mar 2026 07:39:49 +0000
ROA not before:           Tue 31 Mar 2026 07:39:49 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2527
IP address blocks:        210.156.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 473 (0x1d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Mar 31 07:39:49 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=1C206F05CA31354193EAC59EDAE384B522902A3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c9:cf:35:fe:97:90:ce:ae:81:fd:37:4d:42:
                    d9:d9:72:a3:5a:c7:77:06:db:14:e6:97:bc:13:e7:
                    e3:59:b8:c3:b5:9f:41:cf:61:a2:b4:e1:d6:17:94:
                    82:d0:3f:da:69:76:b4:86:d4:47:a3:f7:08:8d:12:
                    95:0a:ad:68:b1:06:31:e7:f7:4e:27:7b:c4:64:61:
                    0d:3c:36:57:d8:31:38:4f:f0:25:3b:95:b0:ee:b3:
                    9b:9f:fa:5b:50:17:d5:7a:23:f1:e0:1b:42:1a:a1:
                    7e:2c:3b:39:68:e8:7b:31:bd:a6:d3:14:08:55:4b:
                    25:e8:ac:3a:6d:1d:3d:96:ae:36:92:fc:af:70:c5:
                    ad:76:89:50:46:b2:ff:b6:e4:15:b1:92:01:73:a3:
                    d2:ef:c2:0e:70:1a:7e:ab:2f:90:3a:36:e6:bf:fd:
                    2a:eb:cd:6a:d7:ea:7c:44:f1:55:be:25:92:6e:7b:
                    69:5e:c6:f0:57:2d:7a:27:53:50:7a:7f:83:62:77:
                    05:5f:02:c0:dc:0a:39:3d:5b:4e:8a:14:7a:aa:ab:
                    b2:8c:b5:c4:e5:da:7d:76:85:b0:8f:aa:65:a1:9c:
                    b5:6d:84:86:14:29:be:c3:c9:5f:fc:f9:20:c0:8e:
                    ed:0c:02:50:e9:35:4d:85:91:e4:73:01:40:0b:6d:
                    53:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:20:6F:05:CA:31:35:41:93:EA:C5:9E:DA:E3:84:B5:22:90:2A:3C
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/HCBvBcoxNUGT6sWe2uOEtSKQKjw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.156.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         36:73:d0:0e:22:8b:d0:e6:90:11:8f:1e:1e:b1:ac:e8:2d:5f:
         2f:87:17:d9:ea:4f:e0:d9:88:8f:b8:f8:18:79:59:0d:74:0f:
         8b:27:7a:a1:0e:a2:eb:de:1c:2e:73:46:78:52:a0:b9:10:84:
         7a:c3:5c:2f:fc:79:a7:b0:70:58:dd:a4:12:d6:9c:0c:f4:61:
         ee:ba:8b:2d:0d:29:fd:24:50:39:5b:a3:bd:a3:d3:29:81:92:
         94:2c:03:2e:1b:78:ad:7f:76:da:ec:a2:6c:e3:b2:9b:2c:a7:
         52:09:9a:c9:9f:cf:36:0b:36:37:32:4e:22:9e:a5:2f:a4:06:
         7d:5a:67:10:6d:f3:f1:46:f0:0b:02:4b:f4:5e:7c:c6:89:86:
         cc:29:e5:f5:00:e7:92:f0:26:ba:01:89:5b:19:23:1e:5e:07:
         b0:ea:dd:52:86:80:d9:83:a6:4c:b4:4c:78:8e:60:68:85:70:
         a9:16:30:5a:5b:26:8d:52:6b:db:5a:e7:8a:3f:56:b8:eb:4b:
         f0:c1:64:39:c4:17:6f:e5:b9:22:51:c4:63:fe:01:88:10:f9:
         08:08:c4:00:39:16:af:4c:bd:2a:3d:52:47:56:0b:dc:6a:93:
         fe:db:10:10:67:c3:fa:c5:e4:6e:d1:09:65:03:0f:fd:13:cd:
         c2:f6:83:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:51:12 2026 by rpki-client