Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/HW6VsNMs8ApVRotNWzVU3L14BP0.roa
File:                     HW6VsNMs8ApVRotNWzVU3L14BP0.roa (raw, json)
Hash identifier:          HlYtZQmDnQNdeK5IlqT/qZteOwaPiLIWxZbefaEpmCQ=
Subject key identifier:   1D:6E:95:B0:D3:2C:F0:0A:55:46:8B:4D:5B:35:54:DC:BD:78:04:FD
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1824
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HW6VsNMs8ApVRotNWzVU3L14BP0.roa
Signing time:             Tue 31 Mar 2026 08:05:21 +0000
ROA not before:           Tue 31 Mar 2026 08:05:21 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.109.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6180 (0x1824)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:05:21 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=1D6E95B0D32CF00A55468B4D5B3554DCBD7804FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:16:78:6d:dc:52:00:b3:a5:53:40:33:38:95:
                    58:72:01:03:1a:b3:61:19:74:f4:10:b3:52:18:a9:
                    16:7f:0b:ef:d4:3e:61:63:b9:b2:96:eb:06:9f:6d:
                    7c:a3:0a:01:51:2b:49:98:b4:6a:c7:e0:3b:c6:b9:
                    58:d5:90:8a:5c:b8:1c:65:01:f6:f8:94:d1:e5:40:
                    e9:96:e6:a6:db:84:c2:29:4f:b6:c5:ed:b2:08:58:
                    63:fa:a1:31:eb:ff:96:26:57:a7:34:4c:68:98:55:
                    55:6d:06:e8:14:72:3b:68:88:1d:a6:c1:59:0f:7d:
                    81:0f:0a:96:5a:a9:aa:17:76:0c:4c:47:82:fb:97:
                    b6:84:ae:f6:8b:87:4f:95:8a:26:0b:7f:98:0a:67:
                    ed:39:59:51:04:1d:85:3d:38:11:63:7c:54:8d:58:
                    14:17:f3:47:50:15:34:d5:f1:95:0b:3d:ba:24:32:
                    32:93:c3:b1:83:5e:d6:0f:01:a8:b4:e7:58:22:0c:
                    8f:3f:a5:71:ab:bd:21:ad:0f:5b:2a:33:e5:04:0f:
                    ae:0e:79:6d:da:db:83:69:67:6e:5e:15:45:62:75:
                    be:53:f2:b2:75:a6:c5:8d:f3:24:f4:d5:27:86:54:
                    a5:4e:6e:7a:c5:e3:0f:9b:6b:4c:ad:5c:79:a7:53:
                    18:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:6E:95:B0:D3:2C:F0:0A:55:46:8B:4D:5B:35:54:DC:BD:78:04:FD
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HW6VsNMs8ApVRotNWzVU3L14BP0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.109.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         e5:4e:c0:2a:d3:37:1f:04:26:ef:5d:e8:79:23:c8:51:de:15:
         04:e0:3e:57:70:8c:3d:60:3d:75:63:ae:a1:4f:d9:c1:fe:be:
         72:6b:33:d8:be:f1:d6:4e:37:f7:64:36:68:f5:6a:e4:60:b7:
         ba:7c:47:0f:c3:e8:fa:48:ac:85:df:59:aa:19:06:59:07:9c:
         a6:53:bd:41:73:5a:0d:22:b0:cb:74:e6:9b:d8:0b:39:e4:11:
         56:3b:66:4a:8d:88:d5:4a:ca:36:33:e5:b6:4b:7a:c2:42:ab:
         66:f3:83:fe:f5:f2:42:a0:af:89:30:11:f6:24:3c:f9:c9:46:
         ed:23:c9:86:6b:c7:ee:25:7a:72:d9:db:c3:b6:3a:5c:c6:e2:
         bf:ab:b7:71:94:c5:b2:e4:ec:12:40:2e:a6:af:43:8e:b0:87:
         d5:75:ac:29:84:14:8c:26:67:6d:44:67:47:83:37:9e:34:5d:
         8e:33:bc:08:0f:40:36:d1:01:90:7d:76:34:c9:9b:1c:8d:fa:
         92:7d:6f:72:18:0e:16:9d:ed:b3:c4:a4:43:76:f3:2f:93:77:
         ff:e2:e3:20:7f:1b:0a:3f:f1:d0:0c:0f:08:8e:a3:e2:66:98:
         d6:b8:d2:8c:85:a1:69:e3:20:62:c7:a0:76:e9:1c:0f:7e:eb:
         b7:e2:ee:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:51 2026 by rpki-client