Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20018/uTUoIZni_5e8dOhFZHeyC7J-D4E.roa
File:                     uTUoIZni_5e8dOhFZHeyC7J-D4E.roa (raw, json)
Hash identifier:          mnolcNCYH3zAercXsszLiRJakLlgQedJ8pNQ7+dvexc=
Subject key identifier:   B9:35:28:21:99:E2:FF:97:BC:74:E8:45:64:77:B2:0B:B2:7E:0F:81
Certificate issuer:       /CN=7EA7301DFCD885481BAECD9DBBEC8A14E98157D9
Certificate serial:       55
Authority key identifier: 7E:A7:30:1D:FC:D8:85:48:1B:AE:CD:9D:BB:EC:8A:14:E9:81:57:D9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fqcwHfzYhUgbrs2du-yKFOmBV9k.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20018/uTUoIZni_5e8dOhFZHeyC7J-D4E.roa
Signing time:             Tue 31 Mar 2026 07:49:59 +0000
ROA not before:           Tue 31 Mar 2026 07:49:59 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131912
IP address blocks:        103.79.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20018/fqcwHfzYhUgbrs2du-yKFOmBV9k.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20018/fqcwHfzYhUgbrs2du-yKFOmBV9k.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fqcwHfzYhUgbrs2du-yKFOmBV9k.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EA7301DFCD885481BAECD9DBBEC8A14E98157D9
        Validity
            Not Before: Mar 31 07:49:59 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B935282199E2FF97BC74E8456477B20BB27E0F81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3b:8e:23:b9:0b:65:72:6c:40:89:1e:6f:33:
                    ae:17:3e:65:3f:82:70:dc:29:e4:22:e0:17:76:7b:
                    cc:4b:15:2d:11:cf:96:f6:1f:62:33:b0:ca:a4:90:
                    77:28:cb:05:03:b1:7d:22:02:c5:cb:a6:b8:c7:a3:
                    0c:38:a2:f5:f4:4e:1d:1c:ec:91:10:76:12:db:a3:
                    79:bd:be:cc:6b:b4:84:71:4c:93:30:e7:7c:ae:7e:
                    34:05:73:e1:66:81:13:4f:5d:09:30:a7:8f:88:68:
                    a3:c7:25:5a:3a:0d:82:cb:44:97:a9:94:c6:23:b7:
                    86:24:5b:88:3e:40:f9:ed:b4:a2:71:42:54:56:53:
                    f9:b9:0d:52:df:d2:f2:d8:d7:61:c5:63:65:e4:9f:
                    aa:f7:ce:b1:4b:8d:6b:8c:83:fe:80:fe:d8:03:25:
                    45:27:26:38:a4:a6:14:e4:9d:5b:57:a7:ce:ca:7b:
                    a2:0e:12:dd:ae:85:37:6f:db:5e:b1:2d:10:bb:c3:
                    52:13:56:01:19:54:3e:cc:9d:e5:62:59:40:7f:fa:
                    a7:58:f7:0e:3f:6b:76:9a:7a:24:f2:2a:89:d3:be:
                    b6:52:1f:52:7a:24:d7:3a:7f:53:e7:1b:43:d0:bc:
                    ee:0b:41:13:dc:bb:b7:45:45:1e:28:fb:6a:df:75:
                    33:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:35:28:21:99:E2:FF:97:BC:74:E8:45:64:77:B2:0B:B2:7E:0F:81
            X509v3 Authority Key Identifier:
                keyid:7E:A7:30:1D:FC:D8:85:48:1B:AE:CD:9D:BB:EC:8A:14:E9:81:57:D9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20018/fqcwHfzYhUgbrs2du-yKFOmBV9k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fqcwHfzYhUgbrs2du-yKFOmBV9k.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20018/uTUoIZni_5e8dOhFZHeyC7J-D4E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.79.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:67:68:a7:d1:78:ed:eb:cf:ba:6c:27:02:c8:9c:c3:20:bc:
         76:20:a1:b8:f5:0b:e2:e1:31:40:8f:49:b5:6b:a2:2e:33:36:
         25:37:82:06:8a:bc:87:d2:02:72:7a:1f:a0:fb:cc:79:c3:a2:
         83:a8:7e:71:da:67:45:21:e8:c5:f8:cb:2b:25:5c:d9:97:4f:
         41:74:02:0e:74:b5:26:0f:8a:16:d5:60:1c:f8:f3:71:a4:35:
         39:b9:f7:62:27:35:67:0b:28:a3:87:03:23:9e:24:a8:c6:09:
         76:24:1c:04:0a:86:4c:84:73:b9:c6:a7:b5:cc:47:3d:2c:0f:
         e2:07:ea:a4:6b:6f:b1:f8:ff:55:63:5c:36:79:04:0b:f2:2e:
         c8:37:5c:2f:eb:21:64:a8:8a:08:3a:dc:e4:f8:24:93:6b:4c:
         8b:d8:a0:d0:17:28:95:fa:12:5f:be:27:88:17:96:c5:dd:5c:
         93:48:fa:6a:c2:d6:b4:e2:64:b9:5d:de:e1:a4:4d:1e:30:52:
         6b:00:2b:47:71:91:12:e8:af:ef:4b:6c:c5:b7:8c:41:ae:84:
         13:9e:21:d1:cb:8f:6f:ea:ac:ad:b2:bc:11:08:30:ee:20:65:
         df:77:fb:df:ad:bf:7c:1e:e0:64:04:2e:d4:0e:b7:4b:9b:9a:
         1e:92:87:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:43:51 2026 by rpki-client