Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Uy_GBg8WqnmCl6PuMdz47EYKdDE.roa
File:                     Uy_GBg8WqnmCl6PuMdz47EYKdDE.roa (raw, json)
Hash identifier:          Uo/l8Ar9IRgpvoO5F7y9u1cQiPD6nVJhv3atbEZKnIE=
Subject key identifier:   53:2F:C6:06:0F:16:AA:79:82:97:A3:EE:31:DC:F8:EC:46:0A:74:31
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       1776
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Uy_GBg8WqnmCl6PuMdz47EYKdDE.roa
Signing time:             Tue 31 Mar 2026 08:03:51 +0000
ROA not before:           Tue 31 Mar 2026 08:03:51 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        183.74.252.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6006 (0x1776)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:03:51 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=532FC6060F16AA798297A3EE31DCF8EC460A7431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a7:19:15:b0:89:30:ac:60:5c:46:ff:10:5e:
                    c9:18:c3:56:c1:8f:bd:be:2c:35:d1:ae:4e:5d:96:
                    28:40:cd:14:88:f0:9b:7e:b6:b6:b4:5e:6a:53:6c:
                    66:12:d6:ba:09:72:74:89:e0:2d:c7:2e:bb:d8:18:
                    7a:34:14:18:86:c7:6f:19:52:e5:0b:aa:6d:84:85:
                    36:57:f1:cc:84:e4:2b:a8:29:77:13:6e:e2:3e:30:
                    62:0d:60:97:9b:08:2f:49:bc:d6:e5:f0:05:a0:a5:
                    a0:f9:6a:71:c1:87:4a:cb:58:17:96:45:05:b2:6d:
                    96:e9:43:e8:ce:1d:bf:1c:38:8a:b2:9d:95:34:6a:
                    8a:22:0d:e7:e5:aa:cb:c2:c9:a8:c9:65:74:49:7e:
                    cb:05:1c:d5:0e:81:94:68:e7:8d:26:bd:d7:4b:50:
                    c0:47:a6:0f:32:ae:72:97:7b:70:36:82:11:73:56:
                    71:ff:6e:dc:70:fe:e9:64:62:24:72:09:be:c0:50:
                    77:b3:e7:cf:f0:79:bb:59:b2:85:b8:81:c6:14:ab:
                    6e:4c:7c:fe:ae:88:ba:75:a4:0a:93:91:73:e4:ea:
                    3c:0e:5f:1e:09:6b:b8:40:e3:70:9f:0a:97:6d:97:
                    08:13:4e:25:52:38:39:6b:56:cb:ff:35:b6:3e:f7:
                    73:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:2F:C6:06:0F:16:AA:79:82:97:A3:EE:31:DC:F8:EC:46:0A:74:31
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Uy_GBg8WqnmCl6PuMdz47EYKdDE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.74.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b9:3f:15:cb:48:5e:8c:78:40:32:7e:0b:40:7b:71:54:51:6a:
         84:8d:11:3d:3c:34:eb:b0:54:9d:29:06:0a:96:e2:d9:16:0e:
         e4:ac:ad:44:cf:ec:14:7b:60:e3:37:ee:6d:74:23:91:c7:54:
         70:d9:89:08:0e:76:87:b5:3b:2f:06:4f:07:b2:4d:e7:49:30:
         59:eb:a8:0d:3e:03:d0:20:22:b3:ad:4b:3c:ec:36:18:3b:f9:
         62:03:00:0f:b2:3c:83:b9:fd:d0:24:fb:f5:b3:3e:14:9f:03:
         5a:4e:39:4d:cf:ea:61:80:d0:c4:3f:37:f2:61:e3:42:09:9c:
         bc:cc:ad:44:94:f2:d7:26:d5:8f:73:c4:8d:21:4c:bc:ad:85:
         48:56:8d:3f:e4:99:06:db:fe:cb:ff:37:98:d3:08:1c:7a:4f:
         4a:ae:11:82:0b:08:e2:3d:81:e9:8f:08:44:bf:05:6c:81:52:
         6b:10:3e:46:6c:71:5c:b8:e2:1c:0d:bd:89:b6:81:6d:43:f6:
         cd:7c:58:b4:8d:c0:46:07:7f:60:f3:1d:85:86:23:7f:c9:9c:
         73:16:43:41:7d:37:37:c2:55:71:d8:4a:b7:34:49:0a:22:40:
         fd:9f:ce:4a:1c:8c:99:47:33:d9:91:ae:c9:e1:a3:57:45:5b:
         aa:76:ea:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:48:08 2026 by rpki-client