Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/hrpR_jUQcG5eop7iMLNGf8rPhas.roa
File:                     hrpR_jUQcG5eop7iMLNGf8rPhas.roa (raw, json)
Hash identifier:          GTBRXRaFfZKdwibJZxROGnVhl60HUK8O/uW3u719vC8=
Subject key identifier:   86:BA:51:FE:35:10:70:6E:5E:A2:9E:E2:30:B3:46:7F:CA:CF:85:AB
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       17BC
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hrpR_jUQcG5eop7iMLNGf8rPhas.roa
Signing time:             Tue 31 Mar 2026 08:04:27 +0000
ROA not before:           Tue 31 Mar 2026 08:04:27 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.79.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6076 (0x17bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:04:27 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=86BA51FE3510706E5EA29EE230B3467FCACF85AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:90:3d:72:1b:be:b3:23:ae:38:e4:15:e8:a4:
                    05:55:b8:0f:f9:af:56:bf:6b:c7:bd:cb:17:89:3d:
                    19:d6:19:df:d0:42:06:03:9b:9d:43:95:36:a2:c3:
                    fa:16:63:a2:39:ff:a0:00:29:0a:b0:9d:42:78:27:
                    85:42:d2:3c:42:c1:25:ce:28:79:85:17:08:44:ef:
                    38:29:0c:81:55:8d:05:d4:e6:22:10:b7:5d:2a:c9:
                    c6:6d:db:ae:e3:6f:a0:ff:b4:2c:41:fe:9c:b3:34:
                    af:0e:a1:d8:f0:df:42:68:0e:4d:b0:38:8c:3e:cc:
                    fb:1f:b4:2a:7c:f0:bf:46:09:b2:64:6f:f0:7f:1e:
                    59:60:8d:60:a6:d0:3c:1c:ca:44:55:ab:77:b5:da:
                    da:93:d6:21:17:fe:44:82:50:c7:32:0d:60:53:9c:
                    3f:3b:b4:57:cb:bc:50:9d:15:30:4b:b7:a6:4d:9e:
                    6e:19:24:04:71:81:f6:33:ce:5d:77:d0:b8:0d:1e:
                    1b:7c:8c:54:98:46:7e:ee:db:6b:c1:01:68:54:65:
                    27:5e:6a:39:e9:05:82:f8:ae:d9:38:3c:51:58:1f:
                    82:6d:b6:e4:08:1a:ba:58:e0:78:2a:0f:83:ec:4a:
                    56:35:c5:7a:82:af:08:a8:6d:bb:77:13:0f:42:d4:
                    66:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:BA:51:FE:35:10:70:6E:5E:A2:9E:E2:30:B3:46:7F:CA:CF:85:AB
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hrpR_jUQcG5eop7iMLNGf8rPhas.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5e:c5:e9:8f:e1:28:4f:36:31:f8:c8:ff:84:07:22:97:e7:bb:
         2e:2a:3c:f9:8f:5b:b7:e2:45:00:cf:ba:da:7e:af:cb:45:29:
         25:8c:32:79:1b:d0:2f:a4:90:75:e1:e2:02:6c:5b:77:88:6b:
         18:69:a2:d1:7a:a6:a0:eb:c6:82:75:ad:02:96:0c:7f:86:f0:
         ab:fb:a1:9e:48:34:f6:ff:dd:c7:af:12:05:2e:67:8e:3a:11:
         10:f7:67:b0:7c:27:51:49:29:1c:2d:03:2d:55:4e:dc:1a:9b:
         23:26:e0:42:dd:35:18:3f:f0:ca:4d:cf:3e:27:14:58:77:c4:
         56:52:25:15:51:c3:e2:07:9c:e7:12:c1:18:6c:24:87:d6:65:
         0e:08:d1:d1:c8:49:d3:5c:52:6d:65:40:3d:56:59:78:3e:9d:
         54:5c:61:16:8f:15:0d:48:aa:96:30:51:75:67:1f:1f:5f:e5:
         b9:aa:e9:63:35:fe:6e:23:46:92:0c:0b:43:5c:bc:91:a5:48:
         a9:c5:3a:28:16:d6:d6:76:e0:d9:a0:70:2f:ff:4d:07:c9:3e:
         5c:2c:6b:56:c4:6d:ea:7e:28:3c:fe:bb:d3:73:be:bb:31:06:
         53:c1:e2:4a:a7:08:41:9f:1c:b8:7a:96:c0:58:ff:da:55:7e:
         58:96:b6:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:16 2026 by rpki-client