Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/493/H8FHGeNf495Hndhj6-k25RKiNvU.roa
File:                     H8FHGeNf495Hndhj6-k25RKiNvU.roa (raw, json)
Hash identifier:          4FXpYxC0jya7QF5RbS/J09GFqjOoB/HAVWTsSPV//LE=
Subject key identifier:   1F:C1:47:19:E3:5F:E3:DE:47:9D:D8:63:EB:E9:36:E5:12:A2:36:F5
Certificate issuer:       /CN=677198612266777D83A2DB4A1E9E147C72A5D76D
Certificate serial:       4C
Authority key identifier: 67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/H8FHGeNf495Hndhj6-k25RKiNvU.roa
Signing time:             Tue 31 Mar 2026 08:49:32 +0000
ROA not before:           Tue 31 Mar 2026 08:49:32 +0000
ROA not after:            Wed 24 Mar 2027 01:46:06 +0000
asID:                     17511
IP address blocks:        219.122.32.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677198612266777D83A2DB4A1E9E147C72A5D76D
        Validity
            Not Before: Mar 31 08:49:32 2026 GMT
            Not After : Mar 24 01:46:06 2027 GMT
        Subject: CN=1FC14719E35FE3DE479DD863EBE936E512A236F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ac:5d:01:c3:8a:51:26:f1:53:cb:9a:85:00:
                    70:16:0a:a7:f2:a7:69:31:61:95:29:8b:bc:f6:0c:
                    15:e0:ba:b6:76:c9:f2:78:f0:21:c5:1f:ea:34:f7:
                    26:d6:f1:7e:d9:a0:f6:cf:b1:e4:4c:90:b3:87:7d:
                    5f:37:c9:84:7a:ba:26:4c:a8:2d:86:be:7b:33:57:
                    7b:cf:b3:61:85:6a:0e:c8:4e:43:58:0e:83:ec:cf:
                    35:19:b7:a7:e7:12:fc:65:51:a5:8b:aa:34:84:00:
                    29:7c:b6:fa:af:28:c9:30:0b:98:55:a8:eb:ba:c8:
                    8b:28:a9:02:17:e8:9b:6b:3a:cc:b8:3a:b1:f3:8b:
                    98:37:f6:4d:3c:4b:9a:fe:0f:6f:11:ea:f7:68:12:
                    46:bc:eb:0c:ac:6d:1e:01:2c:71:55:a9:27:92:bf:
                    32:f0:26:4e:86:0b:f8:1e:c8:58:e2:ea:8f:eb:3a:
                    95:81:63:f4:a9:0c:73:5a:7d:be:10:26:34:8f:89:
                    86:39:4f:e8:03:c5:b2:a8:6a:cc:08:74:56:2a:37:
                    7c:8f:16:1a:32:a7:1f:ea:81:1a:ef:41:44:21:4b:
                    0c:66:ea:fd:8d:02:02:79:3f:25:62:85:7b:1e:c5:
                    2f:bd:8a:13:c9:ed:23:8a:e6:a5:b3:7d:8d:ef:2b:
                    8a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:C1:47:19:E3:5F:E3:DE:47:9D:D8:63:EB:E9:36:E5:12:A2:36:F5
            X509v3 Authority Key Identifier:
                keyid:67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/H8FHGeNf495Hndhj6-k25RKiNvU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.122.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         23:aa:87:73:ed:48:f8:8a:33:cc:ee:8f:46:aa:cb:03:e0:ca:
         ed:79:e6:ad:a2:f1:27:e7:25:40:f3:d3:84:8e:7d:7f:de:02:
         93:e0:32:d8:35:1e:7f:32:68:54:95:68:9d:38:53:c5:a8:bd:
         b5:fa:58:49:43:93:14:78:36:04:8d:bd:11:34:61:e0:34:7b:
         74:fb:10:e3:b7:49:dc:c3:f7:91:6e:e9:48:17:6f:93:5d:40:
         0c:c4:96:90:43:fd:b2:2a:71:ff:fb:4c:27:14:11:42:e7:ed:
         83:0c:50:fb:fd:f7:71:19:69:65:33:b9:06:ee:61:0c:48:e6:
         34:3f:ae:9d:2f:5b:02:0a:f4:09:9a:35:c8:05:32:df:a3:17:
         63:98:42:d7:8b:d8:14:7a:b0:eb:2d:4d:74:a1:b3:b3:0d:6e:
         71:c6:4d:bb:f0:22:3e:96:30:63:82:1b:50:21:48:78:4f:4a:
         6e:eb:35:b4:b6:c3:ae:39:f0:d7:01:06:d1:ec:f2:f9:b3:3f:
         ca:15:03:3a:e5:a9:6b:88:44:f5:b1:0f:0a:ef:f1:1a:67:91:
         2b:72:96:ce:5f:0b:2e:2d:ad:3f:1f:9c:7f:ac:f5:c7:c8:51:
         b9:60:ca:eb:79:b5:0f:ed:ee:5c:99:96:2b:86:11:f3:d7:38:
         a4:85:4a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:35:07 2026 by rpki-client