Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/HPYVBYURCRqn_BQFdW2YuvFk0DI.roa
File:                     HPYVBYURCRqn_BQFdW2YuvFk0DI.roa (raw, json)
Hash identifier:          hV5B9zWQ+GqWKHCg5CQfVL0wUfgMUKIZjFFX0Fsz5yE=
Subject key identifier:   1C:F6:15:05:85:11:09:1A:A7:FC:14:05:75:6D:98:BA:F1:64:D0:32
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0448
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/HPYVBYURCRqn_BQFdW2YuvFk0DI.roa
Signing time:             Tue 31 Mar 2026 08:12:12 +0000
ROA not before:           Tue 31 Mar 2026 08:12:12 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     23788
IP address blocks:        202.148.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 12:05:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1096 (0x448)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:12:12 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=1CF615058511091AA7FC1405756D98BAF164D032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:f3:52:b8:1c:cc:b6:2a:67:ce:a0:6b:0f:30:
                    23:29:a9:53:33:a0:a9:95:a0:cd:f9:5b:c3:83:9d:
                    a1:9c:d8:30:18:47:ff:40:ff:79:6e:31:ba:2e:70:
                    62:3d:16:a8:51:33:19:a2:dc:c8:33:ca:72:23:94:
                    d2:91:f4:15:1b:46:7e:3e:18:e5:8b:ea:0b:cd:2e:
                    95:51:46:f2:ed:99:56:cf:72:22:49:cc:37:95:ac:
                    f1:14:5d:e3:38:9e:b9:98:02:bd:87:84:0f:48:6d:
                    25:8f:32:99:aa:6c:9a:e8:cc:a4:9e:89:6e:c6:af:
                    2e:33:a8:cc:a9:9c:30:ea:20:58:c3:0a:5d:df:59:
                    61:56:de:32:4e:36:fe:da:63:6b:d6:e9:02:de:c5:
                    4c:ba:2e:4d:50:b9:03:d2:0f:cd:bc:13:c2:84:e9:
                    b6:9c:ec:60:7b:25:cf:00:30:d6:dd:f3:e2:e4:f5:
                    eb:3a:8b:06:95:12:cd:53:cf:dd:48:30:00:8c:53:
                    89:44:dc:82:33:7d:29:bd:35:f6:90:2d:25:29:54:
                    3e:18:84:0e:75:88:45:ca:a9:fe:76:4c:5a:86:6b:
                    ed:88:9f:27:39:e5:d0:c3:10:17:32:e5:79:66:f6:
                    6b:ce:53:6e:9b:db:76:7d:46:e4:8d:32:5b:f2:d8:
                    21:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:F6:15:05:85:11:09:1A:A7:FC:14:05:75:6D:98:BA:F1:64:D0:32
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/HPYVBYURCRqn_BQFdW2YuvFk0DI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.148.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         d1:02:fe:59:e7:cc:73:7d:d0:c8:39:a7:4b:c5:44:25:15:fc:
         34:00:ee:34:47:e1:54:31:c2:01:cd:66:ff:40:2b:1c:9c:d4:
         07:68:02:e1:16:0d:4f:b7:d4:b2:e4:39:27:02:e4:7c:eb:65:
         68:30:f6:63:6e:0e:14:f5:b5:3e:a3:7d:16:4a:c8:d3:e0:8a:
         63:a3:08:50:17:bd:de:63:31:8f:5f:8b:10:17:75:18:8f:83:
         08:97:fe:63:8a:f9:17:0f:a7:eb:a1:91:41:73:b8:fd:09:c8:
         77:66:29:e9:a7:29:fb:b1:15:7b:bb:90:4e:71:33:65:18:85:
         73:ac:e6:e5:ce:7e:bf:5f:0b:e0:52:6a:c8:9c:53:49:13:26:
         8a:df:4b:9e:ed:0e:cd:81:11:1f:4c:43:0b:bd:e1:ea:1f:0b:
         cb:11:47:55:a1:c7:b2:e1:73:f0:17:8f:e8:bb:ea:fd:ab:2b:
         b1:9c:b8:a7:d1:f6:43:f0:9c:10:30:28:84:de:8c:91:70:02:
         a0:c9:95:13:e5:83:32:7d:3e:64:21:94:2e:62:50:77:de:6c:
         c5:6e:77:6f:24:8c:57:01:d9:91:f8:53:4f:64:4e:d9:d3:91:
         b4:f3:0e:18:29:cd:14:a5:08:be:03:5c:1a:49:38:68:e8:af:
         31:97:fa:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:40:17 2026 by rpki-client