Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/hvP-NG_bcj3dFKzIhmzY_efMTSs.roa
File:                     hvP-NG_bcj3dFKzIhmzY_efMTSs.roa (raw, json)
Hash identifier:          BnLeC01t6ho5nX9GDVot3Ezvub+3DVufHeTdfwbR+gM=
Subject key identifier:   86:F3:FE:34:6F:DB:72:3D:DD:14:AC:C8:86:6C:D8:FD:E7:CC:4D:2B
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1860
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hvP-NG_bcj3dFKzIhmzY_efMTSs.roa
Signing time:             Tue 31 Mar 2026 08:05:52 +0000
ROA not before:           Tue 31 Mar 2026 08:05:52 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.102.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6240 (0x1860)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:05:52 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=86F3FE346FDB723DDD14ACC8866CD8FDE7CC4D2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:59:0e:cf:7e:f7:c0:d6:22:f8:ea:ff:20:41:
                    8f:c9:1b:7e:92:ab:d2:69:c4:56:da:bb:2c:72:29:
                    97:91:97:04:93:a1:7b:43:f6:f5:3a:37:fb:1b:d6:
                    43:54:ed:1e:7c:87:82:fb:eb:f0:14:b2:b3:69:c8:
                    12:fa:2e:a3:29:d1:d1:bd:10:b9:3a:ab:8a:28:99:
                    f8:2d:a6:4b:e8:e2:ff:49:c2:c8:49:3d:e6:f6:af:
                    2d:1c:eb:bc:23:7f:d0:07:8a:f9:e0:2e:ed:49:55:
                    59:ac:0e:40:9c:e5:e9:65:ea:b6:34:ee:63:1f:ce:
                    d4:23:70:8f:86:7a:8d:72:fe:c7:5d:3b:fe:8f:f7:
                    be:82:fe:66:d5:8a:16:02:5e:e4:84:ec:1c:da:3b:
                    19:4b:5d:29:a4:5f:66:c2:1f:e6:91:4c:5a:be:de:
                    5c:1a:4f:7e:e3:0a:74:8d:8f:ec:95:ad:f2:9c:db:
                    4a:c4:55:bd:9f:6d:de:a4:12:ce:93:58:b2:09:30:
                    76:bc:de:6f:6b:2a:d0:5e:4f:e5:ba:40:01:60:98:
                    4a:4f:0f:1c:36:92:40:5e:e8:ca:ef:b5:bc:e6:5d:
                    04:ca:7f:ee:16:82:84:08:70:57:4a:af:f9:c1:12:
                    71:94:04:2f:de:0f:ba:52:db:0b:1b:16:52:81:92:
                    08:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:F3:FE:34:6F:DB:72:3D:DD:14:AC:C8:86:6C:D8:FD:E7:CC:4D:2B
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hvP-NG_bcj3dFKzIhmzY_efMTSs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.102.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         05:9c:3d:61:d2:b8:7a:38:0a:e3:cb:29:00:c6:9e:14:98:18:
         59:c7:54:b4:92:cd:3d:6e:f2:96:81:d1:65:da:d6:f2:9c:8b:
         95:06:f5:8a:22:33:8a:f8:c8:51:ee:3f:9d:64:19:e6:19:d0:
         23:0f:ab:ec:14:52:19:05:ac:46:79:86:fd:96:c5:94:f5:d9:
         8f:74:10:fe:da:f7:27:2b:e0:89:de:ed:9a:ff:b4:56:d0:ae:
         e8:7a:a7:f8:51:90:e8:a5:5d:47:cc:03:1a:3e:a3:47:20:5f:
         62:2e:1c:bd:d2:37:c5:83:93:18:0e:96:df:dd:9d:33:6e:8b:
         58:6f:f1:b4:78:85:7f:71:ba:fc:59:0e:e2:c4:c4:ce:50:55:
         60:a0:db:76:c0:be:29:e4:58:85:6e:45:18:55:b5:5b:87:c1:
         65:3f:be:8c:c1:e7:af:e0:b7:6a:2a:40:bd:68:34:59:a2:80:
         88:91:90:be:4d:ed:d0:d3:72:7d:57:1b:d6:e0:23:f4:b5:47:
         62:0a:5a:14:dd:07:7b:a9:e3:9f:66:26:6b:0f:8b:03:5d:44:
         7e:98:35:4a:a6:9f:d2:9f:79:c0:28:cf:af:20:cd:36:0a:6a:
         fa:47:b6:29:0e:e2:eb:fd:69:14:ba:f4:b6:42:6f:4d:67:0e:
         2f:77:05:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:57 2026 by rpki-client