Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20116/uqklAM86d-sSr52EU_GIWtPhZn4.roa
File:                     uqklAM86d-sSr52EU_GIWtPhZn4.roa (raw, json)
Hash identifier:          nfDF/hX5XhBVjkk5lXXZwYuz/J3nrxs7aYXNUdumuzg=
Subject key identifier:   BA:A9:25:00:CF:3A:77:EB:12:AF:9D:84:53:F1:88:5A:D3:E1:66:7E
Certificate issuer:       /CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
Certificate serial:       C5
Authority key identifier: C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/uqklAM86d-sSr52EU_GIWtPhZn4.roa
Signing time:             Mon 03 Aug 2026 04:50:58 +0000
ROA not before:           Mon 03 Aug 2026 04:50:58 +0000
ROA not after:            Thu 15 Jul 2027 01:30:02 +0000
asID:                     23816
IP address blocks:        211.14.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Aug 2026 00:45:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 197 (0xc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
        Validity
            Not Before: Aug  3 04:50:58 2026 GMT
            Not After : Jul 15 01:30:02 2027 GMT
        Subject: CN=BAA92500CF3A77EB12AF9D8453F1885AD3E1667E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:49:d9:29:a8:7e:40:fd:cc:29:dd:c1:1d:e6:
                    f4:a4:ef:ea:c2:af:9b:5e:cb:b7:88:50:2b:56:ab:
                    1f:8a:38:bf:cb:49:9a:4e:51:b3:5e:4d:16:10:fd:
                    f9:e5:2c:63:07:b2:6a:e7:37:ff:e7:9c:90:b7:61:
                    8c:ae:4c:44:24:e1:13:91:d8:29:a0:c3:29:59:8a:
                    cd:63:92:67:93:13:46:87:82:32:75:8c:ce:57:36:
                    f6:a7:91:57:0a:5e:71:93:2d:9e:a2:ba:eb:2b:40:
                    0c:5e:7a:3a:2d:c3:24:1d:76:9b:fd:d1:d9:3d:3b:
                    2a:74:b5:11:de:12:ff:67:49:29:14:e5:b6:62:79:
                    42:06:90:90:35:cb:ab:fe:12:c8:45:a7:da:e4:90:
                    4b:bb:3c:c2:78:30:ce:bf:14:c8:59:97:91:73:d4:
                    60:f9:e9:f2:14:46:c8:ae:70:60:df:4e:8b:85:b1:
                    e0:8f:97:4e:57:f8:c9:29:ef:bf:02:65:51:90:0c:
                    44:02:b9:cc:9c:12:9c:57:0b:7e:b7:62:00:c1:7b:
                    99:2c:6c:32:01:23:43:1f:f6:f7:47:55:99:93:3d:
                    c5:ee:a2:c6:ce:54:5d:84:11:dd:1f:cf:f0:c9:d1:
                    ac:4e:3e:33:c1:d9:d3:60:3b:e9:56:38:61:bb:b2:
                    60:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:A9:25:00:CF:3A:77:EB:12:AF:9D:84:53:F1:88:5A:D3:E1:66:7E
            X509v3 Authority Key Identifier:
                keyid:C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/uqklAM86d-sSr52EU_GIWtPhZn4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.14.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:e7:92:45:1b:8a:65:0a:ae:20:f0:a0:9a:bb:24:c2:07:80:
         21:83:19:45:f6:63:35:68:a4:11:be:3e:28:d1:9a:c8:bc:da:
         be:df:10:ee:00:af:b3:24:cf:5e:be:cb:16:26:4a:7a:3b:e8:
         31:9c:84:63:25:45:dd:37:c0:1a:a9:1f:dc:17:36:f8:e9:64:
         d4:6f:c2:55:e1:30:15:05:56:c0:ab:64:89:ae:b5:d8:03:a7:
         8e:97:2b:a5:8d:9e:bf:3f:21:e8:82:72:a5:27:42:07:48:81:
         94:2d:cb:d2:80:bc:8b:b7:f4:3f:25:94:7e:5a:c4:69:fa:40:
         84:61:3d:dd:a8:51:77:10:ad:9f:21:f5:03:02:a2:58:68:e4:
         d7:60:03:72:91:49:f9:6a:df:53:f0:2e:6c:8b:12:2d:eb:cb:
         e7:ac:9d:51:7a:e2:ae:a7:95:cb:b4:a9:83:ca:82:26:b0:4b:
         80:bc:75:15:44:3a:f2:6d:39:ca:08:bc:2b:f3:f1:ac:75:c2:
         e5:38:7d:c1:5a:d7:77:e1:99:d8:f6:7b:0f:7d:45:0c:f4:25:
         83:57:cc:68:50:6b:7b:43:e9:3b:d7:ff:7b:7d:6b:84:0d:7c:
         0d:19:1e:17:24:c7:3d:ea:28:98:12:85:c6:3c:6d:a0:f3:ab:
         ee:65:e6:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 03:34:16 2026 by rpki-client