Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/uVupjfDc2hY-66IVRPU2gMnFiVM.roa
File:                     uVupjfDc2hY-66IVRPU2gMnFiVM.roa (raw, json)
Hash identifier:          HtX/tgpMBkOQbkC6R4Q6zm5yvbY8O4dkc87jqLD1cu8=
Subject key identifier:   B9:5B:A9:8D:F0:DC:DA:16:3E:EB:A2:15:44:F5:36:80:C9:C5:89:53
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       17B2
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/uVupjfDc2hY-66IVRPU2gMnFiVM.roa
Signing time:             Tue 31 Mar 2026 08:04:21 +0000
ROA not before:           Tue 31 Mar 2026 08:04:21 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        183.74.254.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6066 (0x17b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:04:21 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B95BA98DF0DCDA163EEBA21544F53680C9C58953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:15:24:21:da:a8:f7:c6:52:9f:22:57:ec:5d:
                    59:78:a4:7a:d3:78:8e:59:09:75:95:89:07:ed:f0:
                    4e:dd:4e:2f:4b:20:87:39:9e:22:6a:11:ee:90:f3:
                    b7:c9:d5:0c:29:9a:f1:f8:63:7a:dc:73:21:5b:37:
                    07:8b:f8:32:8d:eb:c1:1d:4b:3e:c6:de:d7:42:fb:
                    c5:22:14:98:a9:82:2f:d0:e8:0d:70:24:04:4d:05:
                    1a:c9:a1:20:2a:9c:ce:3c:6b:95:b1:ea:99:34:cd:
                    38:1e:19:38:a8:d1:87:41:93:4e:a6:65:04:f0:38:
                    b8:b3:f5:2b:e9:e9:53:3f:36:d9:ad:41:38:0d:2e:
                    cd:24:7a:e5:b8:4b:5c:06:8f:68:7a:34:53:a5:e1:
                    e3:ab:a0:04:b9:53:c0:a4:b7:b1:5b:f4:f1:db:59:
                    6b:d2:bc:15:bc:6e:39:ee:34:15:7f:69:0e:fb:5f:
                    fe:bf:84:79:8a:cf:c5:70:66:2f:a1:44:0a:99:cf:
                    c8:e2:3a:1d:cc:3a:73:24:79:44:f5:79:cf:13:2c:
                    ee:49:83:7e:a3:70:e0:d5:b9:e0:a8:0e:58:a3:7b:
                    0e:14:cf:36:1f:e8:9b:bf:72:5e:58:7f:5e:a4:53:
                    2e:c0:2c:28:c3:79:af:8a:e4:72:42:28:d0:20:36:
                    4c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:5B:A9:8D:F0:DC:DA:16:3E:EB:A2:15:44:F5:36:80:C9:C5:89:53
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/uVupjfDc2hY-66IVRPU2gMnFiVM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.74.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         35:92:35:84:84:6b:fc:cc:96:76:3d:c2:62:71:83:74:ca:de:
         92:e3:24:60:33:8e:55:f9:6e:43:ce:0a:a2:a3:18:d0:54:bf:
         ce:a6:dd:47:80:c5:22:bc:78:60:01:ce:40:b1:51:b1:f3:af:
         d3:bd:30:3c:a8:03:bf:79:38:c8:7f:f8:34:43:f1:73:9a:ca:
         f9:64:74:4d:90:b3:f2:8d:36:fe:51:3c:e4:02:a0:aa:18:de:
         c6:d0:8c:0d:7e:7d:fc:e8:8e:1a:27:cb:17:18:38:12:04:3e:
         4b:e9:c5:d0:74:58:85:31:5d:e1:af:ec:e5:3c:6e:7e:d9:dc:
         36:10:56:77:b2:8f:d1:b1:19:c8:71:bb:b1:97:a2:4c:ba:0d:
         ae:ba:49:2b:a0:c0:a3:06:bb:9b:15:c6:f8:bf:70:0d:37:05:
         1a:30:26:d4:0b:b5:74:6d:13:11:f7:7b:06:1e:ca:3a:c3:4b:
         1e:b9:e7:77:81:3a:a6:2a:31:e1:32:04:9b:7b:40:78:f7:fe:
         e2:b8:80:2d:61:60:d1:fd:00:8e:a7:8c:c5:dd:ef:38:d1:04:
         49:e9:56:7d:bd:86:46:9d:91:08:e4:4c:b8:13:3d:4f:5e:15:
         53:ab:f8:7b:af:72:89:47:9b:f7:45:37:87:b9:65:42:b7:2c:
         b6:97:13:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 22:23:27 2026 by rpki-client