Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/873/_uHYM1-slhIZIf7w1JilttUNBDI.roa
File:                     _uHYM1-slhIZIf7w1JilttUNBDI.roa (raw, json)
Hash identifier:          m9uPIRKJbJh50MSJccEMFVY8VjBYJyZ6Bi46KUkEydc=
Subject key identifier:   FE:E1:D8:33:5F:AC:96:12:19:21:FE:F0:D4:98:A5:B6:D5:0D:04:32
Certificate issuer:       /CN=80CACF70A4B6C1B6F624EF43484072406B8D3F36
Certificate serial:       39
Authority key identifier: 80:CA:CF:70:A4:B6:C1:B6:F6:24:EF:43:48:40:72:40:6B:8D:3F:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gMrPcKS2wbb2JO9DSEByQGuNPzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/_uHYM1-slhIZIf7w1JilttUNBDI.roa
Signing time:             Tue 31 Mar 2026 08:38:19 +0000
ROA not before:           Tue 31 Mar 2026 08:38:19 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     23831
IP address blocks:        115.85.136.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gMrPcKS2wbb2JO9DSEByQGuNPzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80CACF70A4B6C1B6F624EF43484072406B8D3F36
        Validity
            Not Before: Mar 31 08:38:19 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=FEE1D8335FAC96121921FEF0D498A5B6D50D0432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b1:32:94:a8:ca:bb:05:b0:b1:fb:81:b6:9e:
                    90:97:c6:9f:03:b3:b5:c8:c0:6b:9b:84:91:2f:31:
                    22:b6:75:22:b9:00:ba:e8:ff:7a:6a:4f:a2:ed:7c:
                    3a:36:47:da:0f:cf:2f:97:d9:29:d5:33:0f:6a:91:
                    17:c8:3a:6e:c6:8b:cc:72:d0:35:05:89:42:7c:26:
                    23:91:e9:f3:d1:93:fe:fc:5a:bc:5a:ea:bf:fe:e2:
                    e1:2c:10:a6:3f:32:2b:37:85:fc:11:3a:3f:8d:ee:
                    ac:f3:c8:2c:ec:61:f3:92:d3:7a:4a:9e:15:df:46:
                    8b:5d:32:f3:32:8b:ec:fe:a2:5d:2d:05:46:ee:a5:
                    f3:aa:8b:1d:70:3c:35:1a:ea:01:4f:e0:c6:4b:b9:
                    b9:0e:8b:0d:70:28:4c:e1:15:64:70:0a:be:56:37:
                    05:92:55:57:20:7a:5e:5e:a2:3d:02:e7:d9:ce:96:
                    c8:9f:23:55:4a:a9:2a:f5:d3:93:8d:36:2e:12:b8:
                    b3:95:15:de:23:02:00:b4:dc:8c:90:d9:2c:be:7f:
                    c1:60:09:62:12:7c:9e:10:56:a7:74:5c:61:eb:d1:
                    ba:5e:aa:7c:98:3a:e7:7b:c0:a4:a5:fb:3b:33:0a:
                    9b:e1:79:84:65:24:33:2b:bf:13:3c:71:7c:f4:09:
                    3e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E1:D8:33:5F:AC:96:12:19:21:FE:F0:D4:98:A5:B6:D5:0D:04:32
            X509v3 Authority Key Identifier:
                keyid:80:CA:CF:70:A4:B6:C1:B6:F6:24:EF:43:48:40:72:40:6B:8D:3F:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gMrPcKS2wbb2JO9DSEByQGuNPzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/_uHYM1-slhIZIf7w1JilttUNBDI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.85.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c7:d1:7d:2c:9f:a9:10:bb:80:17:ad:4c:0c:dd:51:81:bb:94:
         33:f3:74:5e:37:84:6e:d2:aa:24:cb:93:bd:29:53:e5:76:2e:
         0d:8a:80:d8:26:9e:fb:2a:34:7c:75:22:71:2e:78:d7:f7:de:
         ff:dc:50:0e:97:20:92:fc:b8:46:df:9f:db:07:03:55:1d:cb:
         9d:4e:f6:6f:e0:fb:92:e4:c1:ec:6a:a1:8c:50:1f:a0:32:e5:
         7c:32:54:bb:8b:4e:df:9b:ce:48:ce:5d:7a:a3:6f:ad:0e:6f:
         51:95:28:46:89:cc:35:0c:32:9e:b5:9a:2e:55:5a:24:6a:5c:
         82:cd:b9:4d:64:74:cb:e8:24:8a:48:ec:78:4f:ad:14:1e:f1:
         52:f1:62:58:26:a5:dc:7e:04:72:e6:4f:e5:a4:d0:82:55:e0:
         70:03:81:9f:ea:7c:bf:75:94:49:6c:a4:d5:73:9d:55:93:d6:
         46:f2:32:27:8b:68:44:5f:87:7e:fb:d4:23:9b:46:be:5f:5e:
         72:50:de:1e:71:c5:26:31:5a:74:ce:8c:3b:9f:48:eb:f8:37:
         af:8b:d9:aa:b7:a3:f8:4e:da:d8:6e:e1:b8:fd:0f:f7:fa:09:
         c6:a2:e3:75:7c:60:1e:72:e5:1d:6c:3d:5c:34:1f:ab:59:96:
         cd:5e:ca:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:21 2026 by rpki-client