Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/942/HgICBi7AoCs2n4dhD4mAVak8-h8.roa
File:                     HgICBi7AoCs2n4dhD4mAVak8-h8.roa (raw, json)
Hash identifier:          Q4Hv3W/Gyfarmg31kavFmC9JYf08iMeuWqixJXQ03Sk=
Subject key identifier:   1E:02:02:06:2E:C0:A0:2B:36:9F:87:61:0F:89:80:55:A9:3C:FA:1F
Certificate issuer:       /CN=8A1E725176BFD9ABDA5CCB7B21A10B8F8DB7D578
Certificate serial:       5D
Authority key identifier: 8A:1E:72:51:76:BF:D9:AB:DA:5C:CB:7B:21:A1:0B:8F:8D:B7:D5:78
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ih5yUXa_2avaXMt7IaELj4231Xg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/HgICBi7AoCs2n4dhD4mAVak8-h8.roa
Signing time:             Tue 31 Mar 2026 08:16:11 +0000
ROA not before:           Tue 31 Mar 2026 08:16:11 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     37908
IP address blocks:        103.10.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/ih5yUXa_2avaXMt7IaELj4231Xg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/ih5yUXa_2avaXMt7IaELj4231Xg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ih5yUXa_2avaXMt7IaELj4231Xg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A1E725176BFD9ABDA5CCB7B21A10B8F8DB7D578
        Validity
            Not Before: Mar 31 08:16:11 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=1E0202062EC0A02B369F87610F898055A93CFA1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8b:cd:e3:22:d9:29:17:20:57:b4:c6:ac:99:
                    b8:2c:80:60:76:d5:ce:d0:7b:a5:19:fd:9f:97:b8:
                    bb:15:60:ca:73:20:f4:62:be:51:ba:a2:76:c6:72:
                    82:95:61:11:e6:cf:9b:98:c1:32:cb:9e:9d:18:ea:
                    da:e3:8d:fb:44:f0:61:be:12:3e:48:8b:f4:04:b3:
                    1d:42:2b:e8:0a:96:7e:74:40:e9:01:c2:2f:18:1e:
                    a1:74:16:c6:ad:a8:f9:a2:a4:73:9b:8d:ee:b5:5a:
                    09:dd:16:eb:03:b5:14:ad:58:f9:85:0d:ba:8e:56:
                    c0:b9:b4:a2:50:3b:43:0f:79:6e:bb:8c:73:36:45:
                    7b:93:51:aa:2b:a2:34:84:4e:c2:99:af:11:ad:00:
                    9d:8e:f4:ac:09:06:e4:60:81:76:0d:41:ce:f9:90:
                    9a:a9:72:1a:23:4c:2a:f5:48:d5:f1:ac:c2:eb:0f:
                    2c:05:19:7e:d9:a1:46:d0:9b:e2:6b:ca:4e:3f:80:
                    1b:9c:bd:a6:c1:0f:3d:c4:96:10:d9:7c:25:ec:e1:
                    a9:01:6a:38:1a:c7:25:85:ca:83:8d:b6:86:15:30:
                    cb:f3:88:3c:60:c4:b7:14:72:19:6f:ad:c2:49:51:
                    5d:9a:5a:66:c7:91:42:98:78:86:5e:63:d4:72:1f:
                    10:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:02:02:06:2E:C0:A0:2B:36:9F:87:61:0F:89:80:55:A9:3C:FA:1F
            X509v3 Authority Key Identifier:
                keyid:8A:1E:72:51:76:BF:D9:AB:DA:5C:CB:7B:21:A1:0B:8F:8D:B7:D5:78

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/ih5yUXa_2avaXMt7IaELj4231Xg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ih5yUXa_2avaXMt7IaELj4231Xg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/942/HgICBi7AoCs2n4dhD4mAVak8-h8.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:68:a9:df:c9:bf:5a:0f:3f:d5:a7:8a:4d:52:a3:95:46:3d:
         86:02:00:5e:2c:95:e5:a6:02:98:e3:e8:ce:97:4a:c8:0c:be:
         af:e4:ba:7b:9e:c7:d6:0b:de:1a:19:b0:be:09:3c:34:bc:2e:
         18:c4:82:1e:aa:9d:ea:1d:ec:dd:e5:c1:5b:8d:ec:75:da:e7:
         bb:54:33:f1:70:62:69:6b:93:e6:11:43:95:af:09:db:23:41:
         77:36:a6:48:e1:83:95:70:11:ec:0e:ff:50:16:2c:7d:c3:94:
         37:c0:4f:ca:16:e6:cf:d1:4f:1f:57:9b:05:95:84:df:92:fd:
         4d:0f:19:6c:5d:00:13:cf:ef:b3:53:01:23:5e:2f:3a:75:f7:
         17:26:39:1d:bd:5f:22:d1:0c:20:91:6a:14:57:7d:9b:59:2c:
         e0:5a:45:10:89:15:78:0f:65:66:c1:d9:d5:2e:a1:6b:6f:8e:
         06:cc:d6:5d:7c:92:ba:e7:cf:0e:6d:6a:90:5b:d5:9a:00:4f:
         78:a5:b5:d3:ee:13:30:4b:df:f8:66:b7:a4:70:84:51:fc:d1:
         9a:bd:09:53:94:8c:35:5f:38:4c:08:b1:3e:9a:02:51:8c:c8:
         70:6d:1e:6f:90:e0:25:3d:ea:5a:4b:81:1f:bd:fc:7f:7d:59:
         fb:bd:e6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:17 2026 by rpki-client