Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/_Ir9Vk4eYWj2EL-XXzXzQZJq_HU.roa
File:                     _Ir9Vk4eYWj2EL-XXzXzQZJq_HU.roa (raw, json)
Hash identifier:          ouXbMZJ+KrbebNh1k2+KDD1OqPUl055EfTg2mvsnbRw=
Subject key identifier:   FC:8A:FD:56:4E:1E:61:68:F6:10:BF:97:5F:35:F3:41:92:6A:FC:75
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       010F
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/_Ir9Vk4eYWj2EL-XXzXzQZJq_HU.roa
Signing time:             Tue 31 Mar 2026 08:30:15 +0000
ROA not before:           Tue 31 Mar 2026 08:30:15 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4685
IP address blocks:        203.212.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 271 (0x10f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Mar 31 08:30:15 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=FC8AFD564E1E6168F610BF975F35F341926AFC75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:81:da:a9:60:0c:c6:2a:9c:53:4b:d7:4a:15:
                    da:33:5c:0d:ec:d5:04:86:20:11:ba:29:44:0f:66:
                    29:f5:f3:d4:fa:1a:5c:27:75:5f:9a:26:08:90:1e:
                    f6:2d:e8:96:95:2e:d1:6a:49:87:39:86:66:03:c2:
                    f0:17:42:ac:d7:49:73:45:74:8e:cc:c2:be:2d:a4:
                    88:d2:79:a3:46:10:5c:0c:60:01:0c:5c:83:d5:2d:
                    af:b5:52:7f:cb:c2:37:11:62:d6:15:f0:70:ee:06:
                    0c:39:d0:49:5f:b6:8d:39:1e:20:ac:0e:c2:1a:51:
                    dc:f9:bb:95:98:89:f4:24:5c:4b:36:e2:3d:87:2c:
                    32:68:48:f9:93:86:0d:9d:14:13:cd:e3:01:4d:a6:
                    2e:28:3e:0c:2f:cc:e6:7f:9b:74:69:59:f8:5b:af:
                    a6:86:bc:0e:93:68:ea:e6:1b:5a:e9:6d:4c:68:0e:
                    50:b5:7c:cc:9b:3c:fe:f9:5e:9d:c1:de:ca:21:ea:
                    21:d9:3b:e9:d9:10:52:07:7d:b1:77:4c:e1:d3:ef:
                    b0:03:20:b0:e0:7b:e9:a1:ba:6f:21:3c:12:4d:e7:
                    25:f1:62:5d:75:52:58:df:d9:b5:24:15:26:c1:7e:
                    6a:8b:ce:2e:2c:ed:39:e8:a4:d6:26:a6:b5:62:c4:
                    09:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:8A:FD:56:4E:1E:61:68:F6:10:BF:97:5F:35:F3:41:92:6A:FC:75
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/_Ir9Vk4eYWj2EL-XXzXzQZJq_HU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.212.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         d5:2e:4e:9f:65:e9:3d:56:ff:fc:cc:47:e5:2a:03:6d:ff:6d:
         f6:9e:07:98:d5:05:7e:f7:f1:c6:df:32:e2:5a:2a:4e:4c:68:
         18:31:b9:84:33:f0:e7:d2:44:be:1c:d8:6b:21:f0:8b:bb:01:
         8a:85:8c:cf:01:03:73:71:8a:19:83:ef:c5:bd:8e:35:13:18:
         6f:e2:a1:83:44:b4:f1:ee:f1:dd:ec:63:58:d8:42:c1:c9:d1:
         47:73:84:a0:0a:02:4a:1a:82:4d:fe:26:53:1a:d9:3f:08:c1:
         85:0c:75:9c:c4:cb:7b:fb:bf:a4:9b:56:10:dc:a3:d2:f8:c8:
         95:43:fd:60:7c:17:b0:e9:37:f0:1a:d8:1b:14:cd:a1:9e:b8:
         41:ab:ec:bf:b7:47:7d:5c:1a:41:ae:5c:55:3a:dc:3b:80:4d:
         c7:95:ab:df:73:61:52:d0:ba:10:4e:45:44:f8:bd:17:1e:a1:
         3e:03:d8:de:d0:57:33:c5:b4:d5:11:a4:0e:00:8f:b0:35:0f:
         b7:5b:c9:7d:63:d9:cc:85:f4:2d:3b:95:f9:e6:b9:fe:65:c9:
         93:f1:9c:18:36:53:0f:84:f7:5d:59:5c:24:f2:cc:02:31:fe:
         27:0e:eb:62:30:70:58:08:f8:67:1b:6f:fb:90:52:54:36:07:
         99:c3:40:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:27:51 2026 by rpki-client