Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/20303/uYpjXKTrYKSKnXOuGtxYMzvbXwg.roa
File:                     uYpjXKTrYKSKnXOuGtxYMzvbXwg.roa (raw, json)
Hash identifier:          7qfQyPFnOEsrLMRPdmy3Fs45RJrK5Wcf9uskZw6GMUY=
Subject key identifier:   B9:8A:63:5C:A4:EB:60:A4:8A:9D:73:AE:1A:DC:58:33:3B:DB:5F:08
Certificate issuer:       /CN=AFDA42B37DC7ED84AF731AB5EAF0382A799D497C
Certificate serial:       0A
Authority key identifier: AF:DA:42:B3:7D:C7:ED:84:AF:73:1A:B5:EA:F0:38:2A:79:9D:49:7C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r9pCs33H7YSvcxq16vA4KnmdSXw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/uYpjXKTrYKSKnXOuGtxYMzvbXwg.roa
Signing time:             Mon 03 Aug 2026 06:34:42 +0000
ROA not before:           Mon 03 Aug 2026 06:34:42 +0000
ROA not after:            Tue 03 Aug 2027 00:26:42 +0000
asID:                     131965
IP address blocks:        183.181.78.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/r9pCs33H7YSvcxq16vA4KnmdSXw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/r9pCs33H7YSvcxq16vA4KnmdSXw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r9pCs33H7YSvcxq16vA4KnmdSXw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Aug 2026 10:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFDA42B37DC7ED84AF731AB5EAF0382A799D497C
        Validity
            Not Before: Aug  3 06:34:42 2026 GMT
            Not After : Aug  3 00:26:42 2027 GMT
        Subject: CN=B98A635CA4EB60A48A9D73AE1ADC58333BDB5F08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:11:c7:ff:71:c2:60:a8:5a:c6:fa:43:ba:2e:
                    e0:fc:27:11:f3:c9:6d:a6:a5:67:5e:8f:05:b2:b1:
                    e3:f6:a4:07:8a:0b:fa:04:5f:7b:a3:f5:85:6c:a5:
                    40:55:1c:06:60:0c:7d:d2:6b:6f:c1:7c:e4:b0:e4:
                    1c:f9:63:26:9b:d1:eb:30:d7:f2:53:29:ea:82:61:
                    21:d1:90:44:32:9b:b2:02:25:0d:29:40:c2:e1:4a:
                    82:88:69:79:fb:07:42:43:1d:7f:ea:2d:f2:2d:a4:
                    2e:02:e7:53:d8:84:c8:e0:94:21:92:1c:85:3e:7f:
                    b3:89:ad:93:d0:4b:02:82:78:62:29:ef:99:db:db:
                    ea:e5:2b:a6:6d:af:30:2a:ac:3c:ad:0b:fe:f1:d7:
                    aa:4a:ae:8d:ae:02:ed:6d:16:53:51:da:7a:4f:1c:
                    cd:e2:7b:36:d6:d7:2c:7d:54:d8:c0:15:f9:df:d8:
                    de:1f:44:49:72:8d:30:1a:5a:12:c9:11:8b:a4:ba:
                    54:52:8c:6e:65:1c:52:a9:df:82:1b:84:75:ba:3c:
                    e6:b0:e5:7a:fb:e1:de:23:f1:59:5e:e6:0e:72:70:
                    28:6c:4e:59:23:96:6f:b1:82:d3:b8:8e:70:8b:4b:
                    04:41:b7:44:6b:07:33:99:12:8e:d3:6f:f1:52:8f:
                    5c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:8A:63:5C:A4:EB:60:A4:8A:9D:73:AE:1A:DC:58:33:3B:DB:5F:08
            X509v3 Authority Key Identifier:
                keyid:AF:DA:42:B3:7D:C7:ED:84:AF:73:1A:B5:EA:F0:38:2A:79:9D:49:7C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/r9pCs33H7YSvcxq16vA4KnmdSXw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r9pCs33H7YSvcxq16vA4KnmdSXw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20303/uYpjXKTrYKSKnXOuGtxYMzvbXwg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.181.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:7f:f8:a3:dc:22:84:82:fe:4c:7c:ae:20:5b:8d:f5:53:cb:
         4f:1e:4c:5d:d9:a4:db:ab:07:57:69:4d:0c:0b:a4:22:9f:06:
         90:5a:c1:28:e7:64:43:91:b4:43:bf:c6:97:8f:2d:b6:64:85:
         c9:1b:fe:b0:12:06:82:0b:77:d7:f1:26:d3:b9:39:09:64:94:
         db:f8:81:c9:45:55:75:61:a8:e4:c7:6d:1a:a9:0b:55:79:8e:
         2b:8d:57:f3:17:97:db:3c:1e:8b:89:e6:89:04:39:9a:74:ed:
         8f:4e:fe:fc:c9:5a:a3:3d:8d:07:dc:1f:4b:12:40:18:98:22:
         8d:c6:5a:67:84:aa:70:7c:81:e8:64:64:47:9e:e6:09:07:ae:
         b3:c0:ae:18:d5:86:97:31:5b:27:9b:ed:f8:50:de:33:c1:93:
         54:3a:47:b5:ab:8b:d1:68:aa:38:7f:70:f3:be:13:a8:bf:cf:
         03:78:ef:72:bd:fe:24:5b:41:8c:38:99:18:e3:4e:fd:49:88:
         5c:c2:34:d6:3e:2b:90:cd:c1:3d:2a:8f:f3:0b:fe:72:85:42:
         f6:0c:03:8d:e6:8e:02:29:e3:74:a4:ef:13:dd:c3:a1:34:e8:
         67:95:12:b0:c4:a9:82:78:ba:6a:eb:3a:c0:5e:ed:1d:cf:bb:
         ad:13:ca:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 01:35:00 2026 by rpki-client