Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/hu_vTIPvkPJAy6x5URsL1MZce7Q.roa
File:                     hu_vTIPvkPJAy6x5URsL1MZce7Q.roa (raw, json)
Hash identifier:          yFsGHhiNGhZsftGvgF78Q/TJJQ6jlqwQCo3ELGXepbQ=
Subject key identifier:   86:EF:EF:4C:83:EF:90:F2:40:CB:AC:79:51:1B:0B:D4:C6:5C:7B:B4
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       171F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hu_vTIPvkPJAy6x5URsL1MZce7Q.roa
Signing time:             Tue 31 Mar 2026 08:03:12 +0000
ROA not before:           Tue 31 Mar 2026 08:03:12 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.74.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5919 (0x171f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:03:12 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=86EFEF4C83EF90F240CBAC79511B0BD4C65C7BB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:13:0e:7a:49:a8:0c:bf:69:a4:4e:9a:c5:a2:
                    8a:36:05:a5:1a:57:36:98:0e:18:28:bf:5a:43:f9:
                    4c:2a:dc:14:be:d7:aa:e0:c6:25:69:85:ad:48:38:
                    fa:e5:4c:29:87:e1:21:f1:66:fd:71:dd:de:65:11:
                    c8:d0:0a:26:6e:53:5b:59:d7:8d:f7:7f:48:f6:ad:
                    62:70:77:3f:ab:b3:b5:0f:df:d0:0e:d0:d2:af:db:
                    f5:b4:e4:be:5d:b7:91:26:35:ca:d6:0f:4c:c0:65:
                    94:12:56:07:e1:5d:2e:b6:fc:62:05:16:3e:65:95:
                    9b:f8:80:45:48:90:b2:e6:23:c3:44:c2:03:87:7f:
                    12:40:1c:5b:6c:ef:7f:b5:1d:bb:93:89:06:cd:75:
                    2e:77:38:a5:05:72:bb:c3:13:0f:01:d4:6b:5e:61:
                    91:cf:50:9d:c8:76:83:d4:1a:1a:91:70:93:1f:2a:
                    ea:df:72:ea:eb:7f:40:01:b2:b0:ed:63:7b:63:33:
                    f0:4d:c3:4e:b2:64:06:76:93:f5:df:e1:6e:e4:f1:
                    23:17:ec:e0:52:73:c4:5b:05:de:c1:54:bb:b4:9c:
                    c8:52:fc:90:55:82:6a:2d:ca:68:45:fe:92:c8:12:
                    a2:51:56:9e:55:fe:b2:da:5a:1a:b7:7a:7d:2a:1d:
                    17:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:EF:EF:4C:83:EF:90:F2:40:CB:AC:79:51:1B:0B:D4:C6:5C:7B:B4
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hu_vTIPvkPJAy6x5URsL1MZce7Q.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.74.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:cd:7f:51:4d:e0:89:31:e3:dc:69:3c:85:e9:f6:5f:ea:6e:
         ff:21:43:30:66:d6:82:23:91:91:d3:f7:ef:15:33:47:72:f3:
         1a:e7:5f:e5:b9:96:3e:9e:41:ad:1f:ff:3b:9e:a8:02:9d:a3:
         05:0a:9a:c3:12:e7:ae:65:0d:c7:e0:ce:5f:a0:f4:55:e4:15:
         82:25:ec:94:06:91:bb:11:b2:f6:a2:dd:1f:af:9c:af:20:fd:
         00:d6:1e:35:cc:84:e2:0e:4d:97:48:ba:1a:b0:a3:c1:1f:a8:
         24:0d:19:a5:42:c6:f0:cc:7d:8b:93:9f:3b:dc:88:46:b5:43:
         00:a1:bc:39:0b:08:02:66:02:74:3a:88:72:4d:0c:ee:2d:70:
         d9:fb:3c:69:ad:4f:f6:df:9d:c7:77:a7:85:60:2f:36:4d:27:
         77:64:54:9e:f3:ea:04:95:c4:b1:7c:eb:fc:3a:db:bd:56:ed:
         05:49:77:db:09:f4:8c:03:3d:20:74:e1:07:80:0f:1e:89:5e:
         8f:6d:a8:86:2c:0b:f1:9a:6f:f7:c8:be:73:57:90:98:27:6c:
         cc:46:7e:fb:9c:33:7f:62:66:e5:b6:39:79:ed:21:a8:25:08:
         5a:ff:98:15:8a:12:bf:e4:e2:c0:c7:74:b9:5b:f1:e5:53:da:
         29:41:11:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:43 2026 by rpki-client