Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/hqkkpNBfVEGPg5rakdRdig_2-0A.roa
File:                     hqkkpNBfVEGPg5rakdRdig_2-0A.roa (raw, json)
Hash identifier:          PdC8CyxxaYuER7/TEITL3p/slMZEN4xcP2PZW1lnp4Q=
Subject key identifier:   86:A9:24:A4:D0:5F:54:41:8F:83:9A:DA:91:D4:5D:8A:0F:F6:FB:40
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       0171
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/hqkkpNBfVEGPg5rakdRdig_2-0A.roa
Signing time:             Tue 31 Mar 2026 07:53:26 +0000
ROA not before:           Tue 31 Mar 2026 07:53:26 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4694
IP address blocks:        210.129.186.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 Apr 2026 23:18:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 369 (0x171)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Mar 31 07:53:26 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=86A924A4D05F54418F839ADA91D45D8A0FF6FB40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:27:db:6d:90:b0:5c:cb:ba:6b:e5:ce:81:af:
                    e1:ac:af:36:53:ce:5e:65:7c:dc:f9:61:9b:06:87:
                    ae:61:54:aa:25:12:4b:f1:e1:c4:e1:80:4a:57:d8:
                    65:78:a1:05:a3:37:d2:1c:53:f2:a5:aa:83:3b:92:
                    a6:81:7a:a9:cf:8a:1c:68:5a:62:a8:5a:ff:c3:63:
                    bd:5c:3e:d7:8d:7a:8e:85:4c:66:04:33:a9:12:fc:
                    1e:f5:5d:89:c0:c7:f2:8c:1e:e7:6f:70:29:85:00:
                    00:83:67:e5:63:6a:ec:6a:a9:59:8f:ba:d3:89:15:
                    2b:23:dc:37:5e:91:d3:7f:1e:ab:bc:f5:e9:d0:0d:
                    54:5a:4f:3d:07:10:b5:bd:37:70:ba:b7:53:8c:c0:
                    df:30:bb:3a:25:2a:6b:b6:2f:d9:1a:d0:8f:72:65:
                    d8:88:70:58:02:80:b7:3a:5b:6d:a7:a3:66:10:79:
                    ab:10:7f:8f:30:ac:9b:9b:33:92:89:c3:51:50:b7:
                    af:21:81:c5:24:b8:65:a8:f4:a8:90:d2:77:13:2b:
                    84:e4:8c:8c:45:52:c4:77:f2:6a:46:96:f1:ed:0d:
                    ed:43:be:74:ae:0f:c3:65:ad:50:f5:3c:68:d0:71:
                    dd:a9:91:d6:4b:05:25:b3:97:4b:34:f0:33:4d:6e:
                    4d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:A9:24:A4:D0:5F:54:41:8F:83:9A:DA:91:D4:5D:8A:0F:F6:FB:40
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/hqkkpNBfVEGPg5rakdRdig_2-0A.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.129.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:91:c9:ca:e0:5e:e4:ea:64:ae:1e:8b:f8:53:0d:b3:43:ce:
         6e:ba:3c:01:fb:3a:96:31:3c:df:96:92:14:3e:2a:f9:55:53:
         a7:41:e2:83:24:a9:44:73:70:ef:67:e3:15:e3:bc:29:9a:e3:
         6a:ce:c5:85:28:59:d6:29:54:e7:5a:f6:a3:8b:98:4b:0b:ee:
         6e:7d:07:0c:0d:af:e4:e4:e8:9e:a4:a6:9b:79:4e:6b:f8:33:
         d5:4c:72:41:d9:42:4f:d8:6c:79:06:66:f6:50:18:ce:7f:ef:
         5e:e8:cf:33:b4:74:d6:1f:58:ec:be:10:08:e1:fc:5f:5f:ff:
         ec:c6:db:b3:66:f0:57:a3:07:6c:75:ee:0e:75:e9:b2:a0:8a:
         03:e7:08:30:bf:e7:2c:06:6a:41:b5:7e:4e:49:ee:74:5c:29:
         f9:b7:9e:c5:c5:48:29:b3:5a:1a:3a:2e:6a:d5:e7:ee:e0:c4:
         98:db:08:2d:41:d6:7d:23:b6:b6:7b:cf:e1:d1:f5:32:7a:1b:
         fc:5a:53:c9:48:42:f8:67:f3:b0:93:4a:c6:99:14:7c:12:26:
         11:f0:59:40:d9:52:81:e1:db:63:33:ee:da:53:cc:02:9b:be:
         24:78:f1:79:f7:d7:4c:72:04:c6:d1:7f:7e:76:39:9c:7f:f4:
         7f:8a:66:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 1 15:55:57 2026 by rpki-client