Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Hnx_ZxCqZOggDAd3yOtQQw59WBs.roa
File:                     Hnx_ZxCqZOggDAd3yOtQQw59WBs.roa (raw, json)
Hash identifier:          B1LCRWdrpVxyTchPWklwSK0kKjtvAd6AwFGJ1G/qbzo=
Subject key identifier:   1E:7C:7F:67:10:AA:64:E8:20:0C:07:77:C8:EB:50:43:0E:7D:58:1B
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       175F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Hnx_ZxCqZOggDAd3yOtQQw59WBs.roa
Signing time:             Tue 31 Mar 2026 08:03:41 +0000
ROA not before:           Tue 31 Mar 2026 08:03:41 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.106.192.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5983 (0x175f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:03:41 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=1E7C7F6710AA64E8200C0777C8EB50430E7D581B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5f:4d:4d:0b:e6:d3:c6:d7:0a:b9:37:b8:4a:
                    8a:94:85:cb:af:e5:63:5f:5b:7d:45:bb:09:1d:e4:
                    c6:7e:06:b9:fd:ab:bf:f7:39:cc:88:f0:e6:11:7e:
                    5f:3a:81:06:f5:e9:03:16:c6:31:81:44:3b:da:e3:
                    ff:72:f0:dc:e8:fc:5d:48:96:c6:43:7a:af:fa:41:
                    0f:58:37:c3:af:9a:8a:95:3d:64:b9:78:ac:da:53:
                    0d:ed:18:96:8b:bd:00:23:d2:bc:4c:a8:ed:d4:a9:
                    0b:30:eb:13:97:c5:17:d9:67:f0:62:02:a0:35:f2:
                    e5:d1:99:9c:62:20:0f:7a:b6:49:8d:1e:b2:8c:94:
                    0a:75:b6:30:bd:d0:17:99:e8:2a:98:83:9f:9e:05:
                    bb:7e:98:c2:94:51:95:64:ae:25:b4:0a:88:d4:76:
                    6a:f9:23:07:da:1a:e4:c3:28:69:7d:1e:07:36:b4:
                    ff:71:5a:b0:91:f9:80:00:43:d8:17:d3:2b:bf:92:
                    7e:b7:a6:06:51:44:f3:e0:2c:4b:0e:71:8f:21:3e:
                    33:85:d9:4b:ef:b3:a7:8f:a0:fe:ca:96:b3:ed:be:
                    fd:92:1b:67:f6:5d:ec:59:a1:43:b4:e2:33:16:44:
                    fb:2f:14:0d:93:5b:d3:b0:c3:26:f9:39:dd:df:f2:
                    16:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:7C:7F:67:10:AA:64:E8:20:0C:07:77:C8:EB:50:43:0E:7D:58:1B
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Hnx_ZxCqZOggDAd3yOtQQw59WBs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.106.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:2c:41:25:b1:be:f3:69:62:8e:38:61:62:5b:8e:04:b1:cd:
         fa:4c:5c:4c:e2:36:d0:f6:be:54:0f:39:6d:31:1a:e6:7d:df:
         0f:e1:b6:6a:ae:7a:77:c8:16:d3:3c:a8:b3:21:90:a5:96:4a:
         2b:68:24:a7:e0:d6:11:3b:8d:23:5e:29:40:cb:e7:5a:17:0e:
         0f:4c:b5:1b:9a:a1:98:d6:4e:29:a6:cc:dd:f1:3c:f5:c6:f6:
         44:41:77:f9:8a:33:47:bd:e3:e4:92:8d:c3:4a:46:28:f2:bb:
         67:41:ef:e6:bf:4a:51:f0:16:01:a3:96:d5:c4:73:02:54:95:
         29:63:31:a6:f7:8a:b7:f2:b5:36:f6:56:37:44:a7:75:4f:da:
         57:82:1b:69:9a:62:f5:c7:8c:70:8f:a1:d6:d5:bf:35:31:e3:
         97:a7:2f:5d:0b:f5:fa:76:94:f7:cf:46:65:41:bb:30:0b:b9:
         e0:72:a1:43:e5:a6:90:f1:f4:fd:ea:d4:55:b0:74:f9:16:e9:
         4e:c6:be:14:f1:24:df:be:d6:8c:80:86:11:4f:77:74:f1:67:
         1c:6a:78:31:dd:8b:f1:96:bf:85:ec:51:d8:97:39:71:7c:44:
         d3:ff:66:e7:db:49:b8:c2:b3:09:9c:a2:2c:be:d9:b0:38:d1:
         13:2c:55:6c
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICF18wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNjAzMzEw
ODAzNDFaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDFFN0M3RjY3MTBBQTY0
RTgyMDBDMDc3N0M4RUI1MDQzMEU3RDU4MUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDUX01NC+bTxtcKuTe4SoqUhcuv5WNfW31Fuwkd5MZ+Brn9q7/3
OcyI8OYRfl86gQb16QMWxjGBRDva4/9y8Nzo/F1IlsZDeq/6QQ9YN8OvmoqVPWS5
eKzaUw3tGJaLvQAj0rxMqO3UqQsw6xOXxRfZZ/BiAqA18uXRmZxiIA96tkmNHrKM
lAp1tjC90BeZ6CqYg5+eBbt+mMKUUZVkriW0CojUdmr5IwfaGuTDKGl9Hgc2tP9x
WrCR+YAAQ9gX0yu/kn63pgZRRPPgLEsOcY8hPjOF2Uvvs6ePoP7KlrPtvv2SG2f2
XexZoUO04jMWRPsvFA2TW9Owwyb5Od3f8haLAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUHnx/ZxCqZOggDAd3yOtQQw59WBswHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzA5L0hueF9aeENxWk9nZ0RBZDN5T3RRUXc1OVdCcy5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAExasAwDQYJKoZIhvcNAQELBQADggEB
AIssQSWxvvNpYo44YWJbjgSxzfpMXEziNtD2vlQPOW0xGuZ93w/htmquenfIFtM8
qLMhkKWWSitoJKfg1hE7jSNeKUDL51oXDg9MtRuaoZjWTimmzN3xPPXG9kRBd/mK
M0e94+SSjcNKRijyu2dB7+a/SlHwFgGjltXEcwJUlSljMab3irfytTb2VjdEp3VP
2leCG2maYvXHjHCPodbVvzUx45enL10L9fp2lPfPRmVBuzALueByoUPlppDx9P3q
1FWwdPkW6U7GvhTxJN++1oyAhhFPd3TxZxxqeDHdi/GWv4XsUdiXOXF8RNP/Zufb
SbjCswmcoiy+2bA40RMsVWw=
-----END CERTIFICATE-----
Generated at Tue Apr 7 19:48:11 2026 by rpki-client