Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/UZqxL0MYGJc085MDsZ7zhduVvoc.roa
File:                     UZqxL0MYGJc085MDsZ7zhduVvoc.roa (raw, json)
Hash identifier:          uJasherHAV/xtxdp5/BSJOvyX1YCBRj826BLZZiNXaI=
Subject key identifier:   51:9A:B1:2F:43:18:18:97:34:F3:93:03:B1:9E:F3:85:DB:95:BE:87
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1785
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/UZqxL0MYGJc085MDsZ7zhduVvoc.roa
Signing time:             Tue 31 Mar 2026 08:03:59 +0000
ROA not before:           Tue 31 Mar 2026 08:03:59 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        1.77.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6021 (0x1785)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:03:59 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=519AB12F4318189734F39303B19EF385DB95BE87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e0:c1:73:ea:a8:5e:97:d4:1a:1f:25:a8:3a:
                    8e:17:c0:f3:76:05:a0:7b:ae:9b:23:12:0b:7c:94:
                    2c:f5:02:66:2b:69:11:8a:a3:ae:3e:b2:69:a7:0d:
                    99:6d:8f:51:01:0c:2c:cb:95:1e:b2:3a:72:19:67:
                    67:52:8a:59:06:79:56:d7:62:5d:02:d7:4f:f8:93:
                    8c:6c:14:16:71:46:47:db:5a:2b:8b:26:ef:a3:26:
                    01:4e:62:85:77:5f:f2:61:8d:1c:9f:c7:5e:ed:16:
                    37:e1:d2:fe:3a:c2:33:2e:cf:22:92:32:b4:c6:dd:
                    65:70:9b:2e:f2:71:4b:73:4f:7a:01:ea:4a:d7:85:
                    26:01:ab:9d:b0:61:22:84:2f:7f:c3:cd:1a:db:fa:
                    f1:78:43:46:3e:f5:0d:e7:f5:e0:c2:4f:8b:14:ba:
                    16:86:e9:53:07:4a:ff:f7:a3:2e:4a:ca:be:fa:a4:
                    56:6a:73:91:39:7b:b8:e4:30:24:08:fc:7e:df:1a:
                    81:01:c7:90:93:4a:af:18:af:6a:4c:31:bc:99:33:
                    26:de:86:51:01:9e:92:57:6f:ec:db:7b:9d:11:6d:
                    62:e8:73:a1:1a:99:28:96:55:6c:3d:05:82:99:87:
                    bc:de:15:25:ec:7f:e8:3c:d9:05:37:16:ee:3d:4a:
                    05:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:9A:B1:2F:43:18:18:97:34:F3:93:03:B1:9E:F3:85:DB:95:BE:87
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/UZqxL0MYGJc085MDsZ7zhduVvoc.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.77.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         64:c1:29:6c:73:25:38:79:27:22:01:21:29:68:46:e6:07:ed:
         de:34:55:49:ce:67:06:a4:b4:5c:bd:35:f8:d9:72:99:f0:15:
         95:da:ea:d6:2e:a6:45:ca:1b:06:aa:91:3d:23:90:35:4e:91:
         d3:18:19:12:85:a9:2d:78:55:0c:4e:86:8c:a0:85:4d:91:f0:
         5b:2c:8d:c1:df:2d:12:03:9f:af:9d:5e:73:4a:80:5a:3c:08:
         99:a2:f8:69:13:ac:08:0b:a8:5f:b1:73:51:f3:d4:12:36:84:
         ad:1f:4c:0d:11:24:09:b2:e0:d9:b5:ce:37:4a:05:a9:c9:63:
         73:a2:c4:1f:1d:88:a3:b7:7a:e4:64:a2:53:bd:32:57:53:6d:
         5f:91:ea:d7:d7:ed:8d:93:f7:73:50:ae:62:87:46:3d:95:c0:
         0a:3a:46:ed:e7:b4:0d:e5:3f:76:7e:d5:14:a0:dc:6b:9b:31:
         f6:cb:3d:40:bf:4d:25:ff:3a:66:33:19:1f:7b:50:50:84:50:
         55:34:40:ae:60:7e:5d:16:35:10:2e:eb:0e:0e:c7:4c:54:f2:
         81:38:6b:51:96:f1:9c:cf:4e:12:22:14:68:db:38:03:4f:c3:
         1e:ee:06:2b:a3:fb:77:d4:af:ce:34:c3:ae:96:0d:51:59:7d:
         f9:97:0f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:34 2026 by rpki-client