Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/977/Uhfj_ELn7p7jiJdhketQJ53K4dE.roa
File:                     Uhfj_ELn7p7jiJdhketQJ53K4dE.roa (raw, json)
Hash identifier:          Dj4p/v3VgHtO1j3hrU2wYhI+eSHLSI7e1x6YcWUHL4g=
Subject key identifier:   52:17:E3:FC:42:E7:EE:9E:E3:88:97:61:91:EB:50:27:9D:CA:E1:D1
Certificate issuer:       /CN=BD69002D0E8B7ED2C3D1D5D07AE6922C7497F02D
Certificate serial:       39
Authority key identifier: BD:69:00:2D:0E:8B:7E:D2:C3:D1:D5:D0:7A:E6:92:2C:74:97:F0:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/vWkALQ6LftLD0dXQeuaSLHSX8C0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/Uhfj_ELn7p7jiJdhketQJ53K4dE.roa
Signing time:             Tue 31 Mar 2026 08:34:26 +0000
ROA not before:           Tue 31 Mar 2026 08:34:26 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     23784
IP address blocks:        119.252.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/vWkALQ6LftLD0dXQeuaSLHSX8C0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/vWkALQ6LftLD0dXQeuaSLHSX8C0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/vWkALQ6LftLD0dXQeuaSLHSX8C0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD69002D0E8B7ED2C3D1D5D07AE6922C7497F02D
        Validity
            Not Before: Mar 31 08:34:26 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=5217E3FC42E7EE9EE388976191EB50279DCAE1D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:96:65:a8:e4:ef:3f:e1:3a:7c:65:8c:3c:36:
                    35:67:65:9b:1b:3f:bb:f4:53:d1:d8:a7:7a:e9:52:
                    88:1b:06:1e:48:7a:b3:95:0f:09:b1:ec:8c:9f:a7:
                    51:96:9b:c7:d9:55:98:b2:30:48:53:19:f1:3c:35:
                    61:f9:21:14:6f:28:f7:91:70:10:69:82:87:31:d0:
                    1f:a6:8b:21:46:01:3e:d9:a5:64:cd:23:49:3c:a3:
                    70:ce:ea:3c:bf:84:81:f5:3a:dd:77:38:96:4a:46:
                    74:de:ca:15:d3:d0:5a:ea:56:28:21:0f:fa:b8:1a:
                    dc:a5:ca:61:8d:5e:07:67:de:a5:d8:9f:f3:08:76:
                    ae:03:57:83:40:a7:5c:92:06:52:f0:bf:ca:ed:83:
                    3b:be:70:8b:c1:72:3f:80:15:90:d2:86:04:f0:d6:
                    ed:45:13:db:ba:f1:6e:6c:68:86:70:5b:fc:3d:a9:
                    21:ed:f0:91:cc:a8:7a:76:ac:0e:60:64:d6:05:3c:
                    1e:80:d3:99:4c:ca:f4:78:79:11:41:44:f0:a0:ce:
                    a3:63:f5:24:75:92:c6:6d:11:6d:60:cc:47:41:69:
                    87:08:6f:a6:01:a9:9b:83:24:ad:cf:2c:aa:ed:5d:
                    0c:2b:1d:99:f8:8e:4a:38:3f:de:b3:24:8d:7e:2a:
                    ec:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:17:E3:FC:42:E7:EE:9E:E3:88:97:61:91:EB:50:27:9D:CA:E1:D1
            X509v3 Authority Key Identifier:
                keyid:BD:69:00:2D:0E:8B:7E:D2:C3:D1:D5:D0:7A:E6:92:2C:74:97:F0:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/vWkALQ6LftLD0dXQeuaSLHSX8C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/vWkALQ6LftLD0dXQeuaSLHSX8C0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/Uhfj_ELn7p7jiJdhketQJ53K4dE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.252.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         89:2b:14:7b:ff:1c:0e:97:a9:f0:7b:34:e5:c6:5e:ba:d7:0c:
         0f:14:49:3b:51:9e:56:9f:05:2d:f4:67:74:af:c1:de:17:1f:
         ea:eb:d2:62:28:41:d6:59:ff:3f:e1:34:c7:6a:6d:31:d5:ae:
         d6:09:ea:00:3a:33:ca:df:f8:ed:9a:bb:d4:75:63:c6:ef:08:
         36:ba:5a:28:cd:83:ea:3b:9f:01:25:4d:13:0b:2a:31:bd:72:
         1d:03:74:71:42:2a:47:84:6b:47:60:47:ed:9e:37:5f:6b:5b:
         07:36:0e:fd:81:2c:93:c4:f4:82:23:62:b1:c7:c7:f9:0d:8e:
         ff:a3:41:75:5b:2e:db:af:22:f7:ce:38:a4:39:63:72:4b:b9:
         76:c6:c5:a0:e6:17:b2:58:ee:35:2c:59:82:76:90:7d:aa:ef:
         0e:54:10:ed:c0:84:31:08:f1:0a:02:b5:b2:d6:46:01:d4:10:
         5c:46:ab:62:5d:fb:1e:36:0e:f0:10:00:de:68:1d:80:c8:72:
         a6:90:46:bb:a9:f8:96:10:10:96:65:62:34:e0:9d:19:66:11:
         3f:77:b8:70:18:36:b7:7f:8e:4a:f3:c9:8e:05:dd:c8:a3:d3:
         6d:90:e9:c1:72:63:18:41:e7:df:ed:cd:70:78:db:40:f3:ee:
         5a:34:be:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 20:49:45 2026 by rpki-client