Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/UUFmhk36xhSGoyF9sxak_Z9RNJU.roa
File:                     UUFmhk36xhSGoyF9sxak_Z9RNJU.roa (raw, json)
Hash identifier:          mILBy3LxTYFiCdyRM/RoXGVAmh+3SIIMqA8WM7Iiu28=
Subject key identifier:   51:41:66:86:4D:FA:C6:14:86:A3:21:7D:B3:16:A4:FD:9F:51:34:95
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       14BC
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/UUFmhk36xhSGoyF9sxak_Z9RNJU.roa
Signing time:             Tue 31 Mar 2026 07:58:11 +0000
ROA not before:           Tue 31 Mar 2026 07:58:11 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.79.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5308 (0x14bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:58:11 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=514166864DFAC61486A3217DB316A4FD9F513495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:30:cd:bd:68:b2:d1:e6:14:33:0d:b6:09:00:
                    26:ad:f4:5f:03:ca:4f:4c:80:89:50:f2:4e:f4:c4:
                    1c:0b:81:04:a4:c6:e1:f2:69:b0:3e:52:80:a1:24:
                    02:3f:5e:1b:2b:cb:a1:d4:32:66:4c:e0:f7:9e:77:
                    90:11:0d:d5:cf:7a:cc:39:a1:dc:3d:6d:49:db:0b:
                    78:b1:e4:d1:e4:2b:99:93:66:38:48:82:4d:a8:50:
                    6d:f9:dc:37:f9:1e:d0:87:87:65:3a:b8:8c:37:90:
                    b9:f8:a4:93:20:2d:f4:35:cf:ef:76:0a:c7:d5:47:
                    56:03:e9:13:94:74:44:65:78:ac:81:df:2e:b0:04:
                    2b:e7:a5:14:a8:60:91:c8:d7:ff:01:fb:60:98:91:
                    95:85:55:71:2d:81:af:8f:d1:81:2b:42:06:ae:2c:
                    5f:48:47:9f:f4:dc:61:44:b5:85:6e:1d:2d:fd:19:
                    88:5d:bd:6e:10:83:6a:6a:4d:3a:4a:6c:b2:1d:98:
                    36:3d:e9:a0:b2:b0:a3:2e:63:91:a0:eb:d4:c3:cf:
                    e0:4b:eb:a7:8a:b2:13:9e:da:cf:54:de:af:a6:6c:
                    7b:b7:97:e5:15:47:c5:00:be:8f:61:9c:ad:b7:ef:
                    06:6d:00:0e:37:5e:2c:60:b5:07:34:ac:43:bd:50:
                    68:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:41:66:86:4D:FA:C6:14:86:A3:21:7D:B3:16:A4:FD:9F:51:34:95
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/UUFmhk36xhSGoyF9sxak_Z9RNJU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.79.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b4:e8:7a:33:ec:5d:55:82:d9:2b:dc:18:e3:7c:57:96:96:0d:
         4c:16:30:d9:96:64:9e:0a:45:99:6c:5c:3d:93:79:6d:5c:82:
         fe:75:8c:3f:36:1d:47:f6:de:8b:87:97:f1:e9:e0:ae:bc:6b:
         5d:4e:ee:58:f2:7e:57:3f:a5:32:bd:b4:70:56:2c:ae:62:27:
         96:82:14:eb:d4:d5:14:9a:25:2f:56:ee:0d:cc:c1:08:c6:c0:
         21:62:7c:bb:b1:a1:95:eb:98:ad:4e:38:63:e7:dd:70:e9:4b:
         b8:4b:1c:d4:78:2b:e5:fe:4a:8a:ee:f5:0f:75:0f:41:11:dd:
         b9:45:e8:70:1f:10:47:0a:38:21:34:7f:35:4c:d7:12:00:4a:
         5c:08:e4:cb:ae:5d:f3:1b:49:c0:34:c6:b3:93:16:84:95:19:
         8a:0d:12:c0:d0:9a:56:30:c5:7d:e1:de:f8:23:17:99:0f:a2:
         d2:48:12:c1:c0:6f:3e:77:e7:27:33:79:eb:ff:9f:77:5b:38:
         00:d5:59:f8:93:7e:3e:7a:99:98:4f:fe:be:7c:ea:57:f8:09:
         5f:ef:c9:ca:9b:ed:bd:39:cf:38:0f:57:59:af:46:14:dc:6f:
         ab:d4:40:7d:8b:db:8d:d1:fb:99:9e:68:1f:f5:5e:c8:dc:76:
         59:3d:9d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:46:10 2026 by rpki-client