Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20270/HyK-vFuytIEBKMG6ZWZ2YakLcGs.roa
File:                     HyK-vFuytIEBKMG6ZWZ2YakLcGs.roa (raw, json)
Hash identifier:          2PSR2V7aW7I+vrNoaLAEwc9SNRTnH6V/gyj3bRrkUoE=
Subject key identifier:   1F:22:BE:BC:5B:B2:B4:81:01:28:C1:BA:65:66:76:61:A9:0B:70:6B
Certificate issuer:       /CN=83719395ECECD227AAB3E2529E7A10483C0F986F
Certificate serial:       1B
Authority key identifier: 83:71:93:95:EC:EC:D2:27:AA:B3:E2:52:9E:7A:10:48:3C:0F:98:6F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/g3GTlezs0ieqs-JSnnoQSDwPmG8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20270/HyK-vFuytIEBKMG6ZWZ2YakLcGs.roa
Signing time:             Tue 31 Mar 2026 08:43:50 +0000
ROA not before:           Tue 31 Mar 2026 08:43:50 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     152865
IP address blocks:        160.187.26.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20270/g3GTlezs0ieqs-JSnnoQSDwPmG8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20270/g3GTlezs0ieqs-JSnnoQSDwPmG8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/g3GTlezs0ieqs-JSnnoQSDwPmG8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Apr 2026 04:17:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83719395ECECD227AAB3E2529E7A10483C0F986F
        Validity
            Not Before: Mar 31 08:43:50 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=1F22BEBC5BB2B4810128C1BA65667661A90B706B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c3:0d:dc:f2:51:d0:5d:6d:5b:67:78:60:f1:
                    eb:43:7b:3e:74:e7:0f:d1:a9:c3:2b:35:66:0b:91:
                    cc:0e:37:a5:45:44:21:3e:1e:b7:1b:bc:ba:88:2a:
                    bf:c9:3c:cd:c3:db:49:b1:e5:e2:b7:0c:19:7f:17:
                    a6:0d:9d:9a:ce:96:33:1b:b0:36:59:71:af:93:58:
                    20:4f:13:5b:f9:86:32:7d:2f:e0:52:ac:af:a6:a9:
                    84:c6:c6:f5:11:21:21:06:cb:08:45:19:a8:50:69:
                    45:a1:0f:cc:c2:08:22:46:cc:b2:6a:bb:4f:c9:b5:
                    31:83:44:83:63:37:4b:82:70:3b:3d:97:a0:06:d4:
                    b6:eb:0e:f3:68:bf:df:bd:b8:21:ec:58:77:fd:45:
                    ac:e6:a4:9b:0e:d7:54:c8:8e:38:d6:be:80:76:5a:
                    cf:03:7f:96:7e:0f:33:41:47:76:e0:df:08:a6:af:
                    3e:4c:9b:cf:da:d7:a3:5f:02:e2:5a:80:3b:35:3b:
                    10:f4:bd:37:d7:ca:55:e1:16:b5:37:23:12:6b:83:
                    4b:43:c8:37:ed:ba:56:d0:01:ea:8b:fb:85:8d:52:
                    3a:57:26:24:3a:45:fa:96:87:06:e7:95:76:3f:c5:
                    25:f9:15:a9:0c:7b:84:e5:e5:47:70:9b:5d:47:a3:
                    0e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:22:BE:BC:5B:B2:B4:81:01:28:C1:BA:65:66:76:61:A9:0B:70:6B
            X509v3 Authority Key Identifier:
                keyid:83:71:93:95:EC:EC:D2:27:AA:B3:E2:52:9E:7A:10:48:3C:0F:98:6F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20270/g3GTlezs0ieqs-JSnnoQSDwPmG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/g3GTlezs0ieqs-JSnnoQSDwPmG8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20270/HyK-vFuytIEBKMG6ZWZ2YakLcGs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b6:99:4a:ba:7c:e8:5b:cd:c4:13:81:b8:bc:d7:35:7f:79:74:
         de:af:ee:bb:56:0a:7c:d6:8b:6b:5d:fe:87:ed:38:f7:7b:9f:
         90:69:dd:a0:5e:c7:1d:83:18:87:05:b7:92:ba:e9:74:bd:22:
         16:51:93:f7:c3:a8:f7:b1:75:b1:12:b6:06:67:75:e3:b1:28:
         ff:ec:91:46:3a:ce:aa:3f:19:79:b0:9c:a0:e1:26:2c:ec:8b:
         4c:b8:6a:34:3b:c2:f4:0b:bd:7c:28:3e:aa:9e:2f:9d:95:fc:
         53:30:7a:0f:c2:e8:86:22:67:03:1a:dc:d9:5a:08:5e:40:8d:
         d0:00:de:b9:05:9d:2c:22:1e:47:40:c8:65:f1:b2:38:2c:a3:
         16:f8:d9:89:37:af:22:0a:e3:34:2e:83:a3:71:7f:91:e1:76:
         88:24:ec:68:16:4f:e7:7f:6e:0a:18:88:e1:3b:0d:3c:72:c2:
         f5:a8:ca:2b:e5:62:4e:2f:b1:2a:e6:2b:d1:0c:e7:d7:0f:c4:
         f4:80:13:ed:9d:1f:f9:37:f4:d1:3f:5d:e2:22:91:7f:2a:a1:
         b0:93:3e:44:33:bf:be:cb:7d:79:96:09:63:ce:1a:83:2d:d9:
         63:12:ce:81:ce:6d:59:3e:ee:66:81:31:01:be:e0:80:c9:16:
         a0:6a:b1:0c
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgIBGzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4Mzcx
OTM5NUVDRUNEMjI3QUFCM0UyNTI5RTdBMTA0ODNDMEY5ODZGMB4XDTI2MDMzMTA4
NDM1MFoXDTI3MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMUYyMkJFQkM1QkIyQjQ4
MTAxMjhDMUJBNjU2Njc2NjFBOTBCNzA2QjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANLDDdzyUdBdbVtneGDx60N7PnTnD9Gpwys1ZguRzA43pUVEIT4e
txu8uogqv8k8zcPbSbHl4rcMGX8Xpg2dms6WMxuwNllxr5NYIE8TW/mGMn0v4FKs
r6aphMbG9REhIQbLCEUZqFBpRaEPzMIIIkbMsmq7T8m1MYNEg2M3S4JwOz2XoAbU
tusO82i/3724IexYd/1FrOakmw7XVMiOONa+gHZazwN/ln4PM0FHduDfCKavPkyb
z9rXo18C4lqAOzU7EPS9N9fKVeEWtTcjEmuDS0PIN+26VtAB6ov7hY1SOlcmJDpF
+paHBueVdj/FJfkVqQx7hOXlR3CbXUejDt8CAwEAAaOCAd0wggHZMB0GA1UdDgQW
BBQfIr68W7K0gQEowbplZnZhqQtwazAfBgNVHSMEGDAWgBSDcZOV7OzSJ6qz4lKe
ehBIPA+YbzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAyNzAvZzNHVGxlenMwaWVxcy1KU25ub1FTRHdQbUc4LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvZzNHVGxlenMwaWVxcy1KU25ub1FT
RHdQbUc4LmNlcjAOBgNVHQ8BAf8EBAMCB4AwcwYIKwYBBQUHAQsEZzBlMGMGCCsG
AQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzIwMjcwL0h5Sy12RnV5dElFQktNRzZaV1oyWWFrTGNHcy5yb2Ew
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGguxowDQYJKoZIhvcNAQELBQAD
ggEBALaZSrp86FvNxBOBuLzXNX95dN6v7rtWCnzWi2td/oftOPd7n5Bp3aBexx2D
GIcFt5K66XS9IhZRk/fDqPexdbEStgZndeOxKP/skUY6zqo/GXmwnKDhJizsi0y4
ajQ7wvQLvXwoPqqeL52V/FMweg/C6IYiZwMa3NlaCF5AjdAA3rkFnSwiHkdAyGXx
sjgsoxb42Yk3ryIK4zQug6Nxf5Hhdogk7GgWT+d/bgoYiOE7DTxywvWoyivlYk4v
sSrmK9EM59cPxPSAE+2dH/k39NE/XeIikX8qobCTPkQzv77LfXmWCWPOGoMt2WMS
zoHObVk+7maBMQG+4IDJFqBqsQw=
-----END CERTIFICATE-----
Generated at Sat Apr 11 16:28:25 2026 by rpki-client