Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/493/OVauGeMAuAZJSLjNE3w4lU_hipc.roa
File:                     OVauGeMAuAZJSLjNE3w4lU_hipc.roa (raw, json)
Hash identifier:          B+cTGDZMy3wBhsbAe2dnbn6KLF+2bDizO/vWAlQv7Po=
Subject key identifier:   39:56:AE:19:E3:00:B8:06:49:48:B8:CD:13:7C:38:95:4F:E1:8A:97
Certificate issuer:       /CN=677198612266777D83A2DB4A1E9E147C72A5D76D
Certificate serial:       45
Authority key identifier: 67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/OVauGeMAuAZJSLjNE3w4lU_hipc.roa
Signing time:             Tue 31 Mar 2026 08:49:28 +0000
ROA not before:           Tue 31 Mar 2026 08:49:28 +0000
ROA not after:            Wed 24 Mar 2027 01:46:06 +0000
asID:                     17511
IP address blocks:        210.199.80.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69 (0x45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677198612266777D83A2DB4A1E9E147C72A5D76D
        Validity
            Not Before: Mar 31 08:49:28 2026 GMT
            Not After : Mar 24 01:46:06 2027 GMT
        Subject: CN=3956AE19E300B8064948B8CD137C38954FE18A97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a6:96:d1:5e:70:1b:be:21:7f:cd:2e:a1:c1:
                    78:da:6d:2c:95:56:77:15:1f:98:fb:1b:26:ef:68:
                    39:76:58:66:02:e2:ac:61:40:44:0e:8b:c6:b0:30:
                    af:7a:e6:ee:9e:70:ed:3b:0a:7e:cb:c5:e5:4d:b2:
                    0b:0c:98:c8:18:05:e5:12:a9:42:cb:fc:36:33:3d:
                    7f:87:1c:59:34:ef:e2:9e:ea:30:ce:4c:e2:a3:ba:
                    50:fb:e7:67:cd:68:90:52:74:07:65:97:a5:11:c0:
                    12:f0:11:c0:7c:47:95:29:2f:f3:aa:5a:18:93:e2:
                    84:20:6a:93:8b:2b:8c:78:05:d5:0b:fc:8a:c3:0c:
                    13:87:fc:e5:72:6e:a3:65:71:57:75:44:06:0c:1c:
                    2c:44:79:ae:7b:ee:5b:18:a7:25:33:f2:a5:7e:c3:
                    c8:80:a9:8a:bd:57:79:23:2d:da:b8:e9:ba:c0:b9:
                    2c:5a:0f:7b:b0:fe:f4:b5:99:47:77:ee:36:79:a8:
                    c0:b6:58:ab:25:76:68:a9:94:7b:1b:17:f4:09:53:
                    88:b6:1d:26:b5:06:a3:c8:9c:e2:72:8a:0d:55:a1:
                    f4:74:db:6a:84:86:5f:28:4c:b4:cc:be:96:2f:e3:
                    e6:b4:48:2b:76:cc:23:f7:7c:57:78:66:95:82:7f:
                    b4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:56:AE:19:E3:00:B8:06:49:48:B8:CD:13:7C:38:95:4F:E1:8A:97
            X509v3 Authority Key Identifier:
                keyid:67:71:98:61:22:66:77:7D:83:A2:DB:4A:1E:9E:14:7C:72:A5:D7:6D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/Z3GYYSJmd32DottKHp4UfHKl120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z3GYYSJmd32DottKHp4UfHKl120.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/493/OVauGeMAuAZJSLjNE3w4lU_hipc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.199.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ac:22:a9:c3:bb:49:11:c6:71:24:93:a2:98:12:a2:e0:37:5f:
         af:88:ea:21:62:d2:6a:97:4b:1c:0a:01:bd:5f:75:92:c7:57:
         34:ba:b1:bf:2b:72:8b:58:d4:2b:bd:8b:c9:a8:ef:4b:ba:dc:
         06:2f:13:ab:5d:8d:a0:79:98:a6:50:c6:c7:b2:7a:29:97:c9:
         9c:cb:0c:4a:9b:ec:a9:23:f4:ca:d1:14:39:64:29:e6:51:06:
         9b:af:6e:17:a8:50:44:65:90:2e:a2:b1:00:22:67:3d:78:82:
         9e:b0:4e:d7:10:39:5c:7c:21:c6:5d:bc:2e:8b:6b:c3:8a:f5:
         72:56:d1:bf:11:c9:b4:33:b3:b7:e7:db:d1:f6:30:6c:fb:06:
         6a:02:f5:57:1b:57:36:0c:9b:ef:d5:f8:0f:f7:d4:44:96:94:
         2c:81:8a:b7:72:ea:74:d9:1a:de:74:0b:9c:da:08:b1:2a:78:
         85:7d:83:72:5c:a5:4b:35:a9:0d:31:88:be:81:87:5d:1a:9b:
         95:40:ad:fb:b6:b6:cd:60:ee:56:05:9e:54:95:19:42:95:bf:
         bc:00:96:14:59:05:ba:6d:5a:28:8b:e7:26:da:c7:94:9c:47:
         17:9c:36:10:ed:45:9c:a5:3f:4c:d3:7b:58:63:cc:cc:dd:a5:
         a6:2d:f2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:33:53 2026 by rpki-client