Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/HeC6QY5BATsSiG90TupdN4WEQDY.roa
File:                     HeC6QY5BATsSiG90TupdN4WEQDY.roa (raw, json)
Hash identifier:          IcIoF1S/ilO+pFvmLSUAX84RCG+Orf7R0PiIGKaIJMU=
Subject key identifier:   1D:E0:BA:41:8E:41:01:3B:12:88:6F:74:4E:EA:5D:37:85:84:40:36
Certificate issuer:       /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Certificate serial:       A2
Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/HeC6QY5BATsSiG90TupdN4WEQDY.roa
Signing time:             Tue 31 Mar 2026 07:52:31 +0000
ROA not before:           Tue 31 Mar 2026 07:52:31 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     15830
IP address blocks:        115.30.0.0/19 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 22:23:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162 (0xa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
        Validity
            Not Before: Mar 31 07:52:31 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=1DE0BA418E41013B12886F744EEA5D3785844036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e7:35:83:a7:16:91:23:44:e0:e7:83:71:3f:
                    39:d8:5b:4e:e0:cc:e4:9f:ba:94:e6:b5:2a:c5:22:
                    44:ab:e3:4b:e6:54:f1:bb:94:55:4b:ab:c8:2a:13:
                    93:86:bc:17:a3:56:08:23:3f:aa:fa:c6:20:79:1b:
                    bc:58:d4:0e:d1:af:2a:e7:fe:40:2c:a6:78:4f:c1:
                    11:39:35:18:64:c5:7c:38:27:01:1a:c3:ea:64:63:
                    1e:be:46:b3:26:c3:da:96:f2:00:23:d4:ea:fe:96:
                    d6:51:77:44:c9:de:41:e7:b5:51:75:4e:ea:42:d2:
                    fc:11:10:ad:ed:36:bb:8b:d9:be:b5:7a:88:69:7b:
                    0d:10:a3:df:0d:c3:47:b2:09:6b:6c:e8:bf:a7:cb:
                    e9:4d:06:79:8f:8b:5d:f5:ee:57:d1:e1:b7:09:67:
                    2a:e6:ed:fd:af:a8:8b:46:bc:bc:28:de:94:86:86:
                    9e:7e:ab:c6:a1:dc:45:0e:cc:ba:cd:48:31:cb:4a:
                    c8:5d:bb:65:d4:1f:97:37:a6:6d:c0:f5:a2:5c:00:
                    44:e4:bb:f1:97:8c:ec:5c:1d:a9:37:26:42:64:f5:
                    a1:8d:bb:47:d8:28:52:f8:04:f3:4b:bb:96:7f:56:
                    07:f9:7c:95:df:49:4f:81:82:89:62:8f:b6:16:d4:
                    f3:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:E0:BA:41:8E:41:01:3B:12:88:6F:74:4E:EA:5D:37:85:84:40:36
            X509v3 Authority Key Identifier:
                keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/HeC6QY5BATsSiG90TupdN4WEQDY.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.30.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         51:d7:89:0f:ee:0e:5b:64:1d:75:cc:d0:5b:36:8a:40:89:a9:
         f0:f0:0c:e7:c4:59:f4:61:96:f3:7d:60:9f:6a:b1:96:1d:b2:
         eb:dc:e4:c0:9d:9c:ec:ed:03:ca:e3:09:3a:c2:0d:f5:0d:60:
         af:20:84:2d:17:74:ed:98:99:d5:cc:94:e8:dc:f5:a8:c1:6d:
         4d:23:69:b5:6b:b1:97:85:42:c5:c7:ba:3a:30:6e:8e:02:80:
         c0:41:02:85:43:45:00:c1:65:b5:c4:89:46:4a:1a:2b:4e:65:
         a7:6b:4d:34:f9:19:ea:85:11:dc:af:fe:a4:cc:70:33:7d:4f:
         d3:58:0e:90:8d:fd:90:ed:42:01:a6:5b:f0:bb:5b:8c:2b:85:
         62:9d:37:ba:ae:67:23:38:c0:fe:cf:e0:90:d9:e7:49:be:09:
         70:57:34:ed:61:f2:5a:1e:5d:df:11:29:e9:51:7e:45:4b:3d:
         ed:fd:0d:ca:8f:0e:c1:67:72:13:69:03:0f:37:62:18:f0:e2:
         ca:c8:f7:67:7d:61:bb:00:86:5f:dd:3f:e1:ee:bd:eb:25:e5:
         dd:58:3b:17:3e:4a:d6:4f:fc:87:0e:68:37:04:48:2a:ea:61:
         17:a2:71:db:49:3c:52:0c:8f:9d:07:5b:9a:f5:78:21:b0:dd:
         df:51:d3:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:57:18 2026 by rpki-client