Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/HuikSEisxUOlXRuhr5135Vsn_Vc.roa
File:                     HuikSEisxUOlXRuhr5135Vsn_Vc.roa (raw, json)
Hash identifier:          Pt3wCht50J0fgOHooQUgA6lU+GxkpRnvUCMTut7b9nc=
Subject key identifier:   1E:E8:A4:48:48:AC:C5:43:A5:5D:1B:A1:AF:9D:77:E5:5B:27:FD:57
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       160E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HuikSEisxUOlXRuhr5135Vsn_Vc.roa
Signing time:             Tue 31 Mar 2026 08:01:01 +0000
ROA not before:           Tue 31 Mar 2026 08:01:01 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5646 (0x160e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:01:01 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=1EE8A44848ACC543A55D1BA1AF9D77E55B27FD57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d9:ba:ec:65:06:e8:3e:3f:ef:79:3d:8d:eb:
                    09:96:8e:35:cf:de:d4:d2:ec:4c:09:4b:43:35:44:
                    d0:4c:dc:01:a1:48:ce:12:37:97:c4:97:5a:8a:b6:
                    ab:a1:e2:8d:34:84:d4:ab:45:be:cd:a9:7d:d7:71:
                    d9:54:d7:05:38:bd:6d:2f:d4:5e:31:f9:8e:a1:64:
                    a7:70:78:4b:dc:5f:2f:b6:6f:58:8b:b4:c0:97:7b:
                    4a:c4:82:67:85:66:fb:c1:e0:b0:80:5e:16:16:d5:
                    b7:e5:62:26:65:b8:99:ce:d8:59:bc:ba:92:4c:b2:
                    df:95:de:b3:8c:42:95:4a:55:38:c0:31:88:73:65:
                    f3:f4:8d:fc:a5:e4:20:43:82:19:17:ef:c6:bc:a3:
                    e7:98:03:df:20:a6:97:de:87:ae:4f:4f:e5:0c:11:
                    44:d1:8a:45:ff:9c:5c:e8:db:31:f4:64:f8:7f:44:
                    91:cb:2a:69:9a:d4:0d:61:1a:cf:e2:dc:e1:c5:07:
                    9e:fc:3f:72:77:dc:21:a8:e4:d1:b2:65:03:31:fc:
                    66:89:09:97:f9:58:3e:50:c1:e0:34:a5:58:83:45:
                    51:4b:e6:cb:fe:4c:52:30:e4:c9:23:f8:78:10:02:
                    90:f2:d9:2d:c8:90:f8:ad:77:de:85:8d:1b:e9:83:
                    d7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E8:A4:48:48:AC:C5:43:A5:5D:1B:A1:AF:9D:77:E5:5B:27:FD:57
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/HuikSEisxUOlXRuhr5135Vsn_Vc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:27:75:71:33:b5:48:4b:68:47:b6:92:a1:b9:ac:81:15:21:
         d6:7a:39:f4:4b:4b:22:05:30:11:10:ff:8d:24:a6:80:b5:a4:
         24:9e:22:02:ae:c5:68:5c:e7:6a:f0:55:88:54:51:61:95:ab:
         58:15:af:06:d7:8f:05:19:a8:5a:62:14:cb:cf:7c:97:a9:ee:
         a9:c4:ce:c9:93:9d:43:0e:07:9d:d6:8a:66:4a:44:5d:8e:52:
         0e:df:de:f8:0d:14:25:b2:a6:a8:fd:ce:06:64:77:25:80:00:
         f1:ff:94:c5:d3:f1:2a:7f:b6:9c:8f:fa:57:fa:af:26:6c:05:
         fb:6a:04:d1:fe:c9:ed:27:dc:73:75:57:51:8e:e5:11:01:ae:
         c3:63:0b:c1:5b:53:03:40:fd:82:93:cd:9a:6c:f9:d3:9e:bb:
         a9:4f:5e:49:11:dc:19:7a:ed:42:ba:4b:70:c0:5f:87:30:b6:
         b2:9a:49:ce:b7:69:2f:df:d3:3b:2c:40:69:4a:23:c8:2f:53:
         89:d6:ed:81:e0:fb:a8:18:43:42:41:72:4b:92:20:2d:7f:19:
         74:dc:10:73:7e:46:d1:9e:8e:24:72:cd:96:bd:86:1b:b7:f6:
         da:6b:d0:cc:7d:39:34:92:38:81:67:57:8a:e5:98:e5:ea:e2:
         47:a3:5c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:57 2026 by rpki-client