Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/800/ucNHRt59AOXzpXcEvw4hQSyHtjk.roa
File:                     ucNHRt59AOXzpXcEvw4hQSyHtjk.roa (raw, json)
Hash identifier:          T7G/0ri5WiFjJUE7GH5W97lRjvFm51TEtlRXYh1NcxQ=
Subject key identifier:   B9:C3:47:46:DE:7D:00:E5:F3:A5:77:04:BF:0E:21:41:2C:87:B6:39
Certificate issuer:       /CN=084F88D837A2A2132EA8F6F8F2DB82C1C1E90A8B
Certificate serial:       46
Authority key identifier: 08:4F:88:D8:37:A2:A2:13:2E:A8:F6:F8:F2:DB:82:C1:C1:E9:0A:8B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/ucNHRt59AOXzpXcEvw4hQSyHtjk.roa
Signing time:             Tue 31 Mar 2026 08:35:36 +0000
ROA not before:           Tue 31 Mar 2026 08:35:36 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18278
IP address blocks:        123.0.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/CE-I2DeiohMuqPb48tuCwcHpCos.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/CE-I2DeiohMuqPb48tuCwcHpCos.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=084F88D837A2A2132EA8F6F8F2DB82C1C1E90A8B
        Validity
            Not Before: Mar 31 08:35:36 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B9C34746DE7D00E5F3A57704BF0E21412C87B639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:22:bd:6f:07:d8:62:74:78:98:60:a5:64:1e:
                    56:e2:8e:d8:90:6a:e0:c8:d3:92:dc:10:7a:ff:83:
                    03:39:e2:84:b9:1f:c2:59:1c:67:18:56:8c:5b:e5:
                    b4:6d:86:ba:9e:8a:65:1d:54:88:d2:53:76:92:62:
                    87:25:51:7c:a1:46:8d:3d:b8:1c:3a:b0:3e:44:bf:
                    93:01:59:12:6d:92:24:e7:ec:84:6c:2e:03:e8:ab:
                    71:db:b4:16:b6:c6:24:ea:18:e5:f5:a5:cb:d8:87:
                    78:3f:c1:ad:24:87:e2:93:09:6c:71:2a:e7:ed:44:
                    31:e5:b0:cb:79:b8:c8:50:d3:f6:48:db:94:13:07:
                    2e:a4:fa:57:14:49:0a:14:d9:08:a1:f7:29:fa:6a:
                    44:9a:1c:d0:b7:a2:99:ff:7d:b5:fa:d0:24:22:92:
                    42:08:3a:b3:15:bd:47:a6:b4:61:ee:84:f7:12:65:
                    b1:c4:98:ab:56:49:6b:2b:91:b5:bb:1e:f8:c4:02:
                    e7:1e:c8:8f:bb:3b:03:0e:17:61:bb:cd:21:83:52:
                    87:8c:09:55:c9:cb:9f:fd:11:a3:62:15:6a:44:4c:
                    e6:b1:2c:04:77:2d:2f:7e:03:cc:e7:7f:ff:b2:cc:
                    cf:dc:be:96:44:47:82:a2:06:4b:7b:bd:0e:9e:b5:
                    2d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:C3:47:46:DE:7D:00:E5:F3:A5:77:04:BF:0E:21:41:2C:87:B6:39
            X509v3 Authority Key Identifier:
                keyid:08:4F:88:D8:37:A2:A2:13:2E:A8:F6:F8:F2:DB:82:C1:C1:E9:0A:8B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/CE-I2DeiohMuqPb48tuCwcHpCos.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/ucNHRt59AOXzpXcEvw4hQSyHtjk.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.0.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         10:14:74:c4:46:2c:8d:ca:c0:4f:e0:d8:8d:e3:5f:d0:f5:1b:
         d7:ce:0d:79:1e:5a:65:d4:7d:da:61:c5:25:c5:3d:d9:d7:c5:
         65:5a:3b:e4:7d:8f:e0:6a:7d:6d:cb:a0:a3:6e:0c:6e:84:98:
         e2:e3:a5:f0:cd:86:27:2b:a8:90:9f:b5:1f:72:6f:ca:2a:0c:
         c1:b8:1d:10:8c:d7:48:fd:1f:8e:9d:34:83:38:1c:16:31:a3:
         9a:cb:84:4b:cf:16:0d:83:4d:9d:14:67:af:16:65:c2:6d:65:
         21:c4:95:da:85:1d:de:e5:6d:15:ed:77:2d:b9:01:04:b0:da:
         59:97:5f:1c:31:79:9d:e0:00:bb:67:a4:ed:d4:7e:c4:5f:ca:
         65:b4:17:c9:87:e8:70:94:4c:87:7e:7a:6e:bf:74:79:c4:e5:
         b4:be:e4:8c:d2:e0:55:a7:2d:11:ad:f8:46:cb:75:69:be:66:
         c2:ef:46:73:35:8a:15:08:69:df:fd:b0:d2:ce:73:38:28:5d:
         8d:d8:bd:7c:7e:fe:22:49:27:ed:22:ec:8f:52:05:d4:c2:13:
         5d:1a:ba:3a:fa:9c:ec:f0:8e:9f:79:9d:43:41:5a:55:c0:38:
         91:fb:bb:7a:e8:a3:b2:0a:7b:dd:7e:ba:0b:52:e5:c8:c0:41:
         4c:8d:67:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:35:29 2026 by rpki-client