Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/uP2QQLfjE3AA07dI0DqjaXFOq_s.roa
File:                     uP2QQLfjE3AA07dI0DqjaXFOq_s.roa (raw, json)
Hash identifier:          4XRopl1OvKXycP4s5M2ey/u8MG7ZtQbMaPZnwh2hsPA=
Subject key identifier:   B8:FD:90:40:B7:E3:13:70:00:D3:B7:48:D0:3A:A3:69:71:4E:AB:FB
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0274
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/uP2QQLfjE3AA07dI0DqjaXFOq_s.roa
Signing time:             Tue 31 Mar 2026 07:33:28 +0000
ROA not before:           Tue 31 Mar 2026 07:33:28 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4713
IP address blocks:        58.88.0.0/13 maxlen: 13
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 628 (0x274)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Mar 31 07:33:28 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B8FD9040B7E3137000D3B748D03AA369714EABFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e4:60:92:1f:e0:3b:5b:41:57:0a:6a:fe:5d:
                    df:0b:d9:87:1d:60:68:71:92:10:4d:9b:91:e9:e2:
                    83:f8:7f:aa:db:d7:4c:83:59:7b:36:b9:2b:b4:c0:
                    60:2e:7b:3e:13:54:08:b4:4b:32:64:2e:1d:d1:0f:
                    a3:15:a4:e5:9e:7d:eb:74:ae:f5:e8:e1:3a:db:2d:
                    00:b6:66:2a:04:e7:a4:d3:05:ad:44:e6:d3:f0:19:
                    01:6e:5c:4b:84:ee:c5:53:41:bd:70:a3:33:3c:9d:
                    05:7d:f3:20:65:5d:44:dc:17:a9:ed:43:48:8c:be:
                    cb:0e:b5:52:9c:80:59:15:d7:8e:e0:fb:22:79:45:
                    64:25:d3:fa:46:c1:96:bd:6b:f5:de:fb:32:20:be:
                    89:51:13:c8:b5:bd:0f:43:97:54:f3:9a:32:7b:b3:
                    3c:7e:a0:31:a3:a5:98:b3:ea:f2:3d:f4:22:df:0d:
                    5f:db:7e:8e:6c:09:be:98:22:b6:8f:9b:af:28:8b:
                    3e:0f:31:53:d5:a1:c2:85:75:0c:e0:b2:11:92:00:
                    d2:e7:5b:5f:94:9a:06:9c:1b:4b:d2:e0:27:b1:60:
                    11:e3:a1:b3:d8:35:18:e1:44:c8:ba:ef:81:fa:b2:
                    64:aa:32:21:17:ce:6f:5a:7b:21:be:19:e4:24:fc:
                    77:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:FD:90:40:B7:E3:13:70:00:D3:B7:48:D0:3A:A3:69:71:4E:AB:FB
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/uP2QQLfjE3AA07dI0DqjaXFOq_s.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.88.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         1a:fb:cf:f4:b2:85:2a:d2:8d:03:5a:1f:bc:8b:27:88:db:18:
         17:c9:60:77:d1:c4:b8:bd:02:e7:5e:ee:8b:d1:f3:db:aa:89:
         12:9e:f6:8d:e4:c7:56:b8:84:3c:94:61:2f:34:d0:db:d0:74:
         56:71:90:25:91:fb:24:64:2b:98:cc:3d:ff:82:89:98:57:9a:
         14:4a:f7:5b:25:7b:12:27:6d:fe:6a:67:9b:bc:84:83:07:da:
         24:c2:19:8e:a5:96:5c:e2:61:74:c1:81:e2:17:c0:23:fc:d9:
         47:0b:91:dc:6a:f8:9e:cf:46:eb:07:43:c0:da:11:41:10:9b:
         d2:6e:af:90:83:5d:ff:24:07:00:4b:27:d9:ed:23:1e:17:d3:
         10:49:3f:a0:c0:b3:b5:3d:6a:56:b8:91:92:56:61:61:58:30:
         ad:42:2e:bc:6c:7b:0c:3a:25:7c:c7:05:4b:a8:0f:04:2f:1d:
         44:cf:4d:5b:7c:7f:de:2e:3a:7f:03:63:ae:af:f5:67:34:d4:
         5b:7c:e6:af:0f:39:ea:62:f3:69:a2:da:48:f7:38:67:68:d2:
         66:f5:0c:79:91:70:60:0b:9a:fb:ab:a5:29:ec:d3:cd:27:66:
         31:35:6d:8f:a7:f8:e0:6d:a2:11:ef:69:32:ad:55:01:35:a3:
         75:6d:de:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:56 2026 by rpki-client