Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/HwzzHjjSa6yOiKErCk9DrHpMBac.roa
File:                     HwzzHjjSa6yOiKErCk9DrHpMBac.roa (raw, json)
Hash identifier:          hjHV5xlOYGa8CcdPMdXr33RTKqM0i2Q4fNau2fCYUs8=
Subject key identifier:   1F:0C:F3:1E:38:D2:6B:AC:8E:88:A1:2B:0A:4F:43:AC:7A:4C:05:A7
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       06F0
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/HwzzHjjSa6yOiKErCk9DrHpMBac.roa
Signing time:             Tue 31 Mar 2026 08:26:50 +0000
ROA not before:           Tue 31 Mar 2026 08:26:50 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:e700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1776 (0x6f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Mar 31 08:26:50 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=1F0CF31E38D26BAC8E88A12B0A4F43AC7A4C05A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:db:5e:c3:d6:90:09:90:2d:b4:59:2f:b6:c4:
                    d3:47:c4:eb:6d:b8:74:c5:24:8c:2f:15:e7:b7:49:
                    60:46:2a:c3:38:c7:d2:29:2f:f4:fd:af:f2:58:4b:
                    2a:f6:d0:2a:7d:0b:95:99:ae:9c:35:1c:b2:5f:23:
                    d0:d4:87:13:5c:ca:d6:f5:40:d0:0c:1c:bd:b1:fb:
                    fc:1b:f0:39:ea:58:b5:89:b7:3c:2c:67:00:ac:be:
                    87:fa:40:37:02:aa:66:e0:ff:61:7b:8f:a7:67:3a:
                    5c:a4:72:27:e5:e1:0a:47:6c:3c:ba:4f:d7:1a:a5:
                    da:91:a6:4c:e5:00:4a:86:65:7a:16:87:b6:4a:d0:
                    29:01:1e:28:c5:99:b4:31:a8:19:10:12:a5:08:d8:
                    93:54:c9:09:ae:e0:f5:55:f1:fb:ba:90:49:ee:75:
                    c9:af:6d:fb:ff:88:8e:01:7d:64:67:43:97:56:d3:
                    e1:b0:26:04:90:ec:76:3b:92:91:7c:aa:9c:b7:cc:
                    2f:ef:eb:bd:00:f6:6e:90:87:61:55:7e:cc:3f:dc:
                    93:b7:69:a3:80:e6:c6:96:39:c3:2c:72:a9:6e:31:
                    cf:48:09:13:0e:3a:da:71:77:1e:61:f5:12:12:80:
                    1a:c0:4a:36:94:19:9f:c3:8e:03:fa:67:47:58:98:
                    df:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:0C:F3:1E:38:D2:6B:AC:8E:88:A1:2B:0A:4F:43:AC:7A:4C:05:A7
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/HwzzHjjSa6yOiKErCk9DrHpMBac.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:e700::/40

    Signature Algorithm: sha256WithRSAEncryption
         78:f4:c0:06:83:1d:57:ef:61:b1:e8:b0:2b:a8:45:b0:7a:64:
         10:31:89:31:dd:a5:29:e8:cc:c4:31:e1:95:a9:4e:2e:a2:24:
         20:ad:d3:f1:94:2e:66:2e:17:32:42:2f:3e:cb:64:e6:8c:e8:
         3e:d7:2d:71:9d:7e:60:f8:e6:41:15:9c:95:fd:cc:88:45:1a:
         76:3c:fd:47:0e:39:48:79:29:bf:9a:a0:63:c5:f0:0a:ff:c3:
         bd:72:8b:56:51:da:ea:dd:37:37:64:a7:e1:60:48:b1:9e:1c:
         da:76:94:a5:7b:ac:7a:10:e3:16:6d:b3:b6:d1:7d:86:b5:d6:
         5f:f0:0a:28:60:9d:21:8a:d4:7c:20:86:0d:28:f9:89:93:f4:
         7f:76:35:92:12:28:78:ee:cc:1b:42:af:e8:15:d5:22:2d:08:
         a7:de:74:88:72:55:a6:d6:6e:ca:74:8a:a3:d4:dd:05:8e:22:
         d6:48:74:ed:01:0e:ee:cb:f4:89:f2:78:88:f4:1a:14:35:d8:
         05:21:14:d7:fd:c8:a8:f7:c6:17:c3:97:c0:51:8c:8d:41:ba:
         1f:c7:8b:8c:35:36:8f:3c:d8:54:4d:78:2b:39:62:9e:a3:02:
         08:c2:33:39:8f:bc:14:16:18:87:f3:86:27:a8:c6:f4:f3:7f:
         d9:f9:fc:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:48:06 2026 by rpki-client