Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/997/uunpdP0Ea2h5xe-Iga1nYahsunU.roa
File:                     uunpdP0Ea2h5xe-Iga1nYahsunU.roa (raw, json)
Hash identifier:          62Y6BpmUVK2O143YsdGnLUjrDpy5/A2AA0NAspAkkco=
Subject key identifier:   BA:E9:E9:74:FD:04:6B:68:79:C5:EF:88:81:AD:67:61:A8:6C:BA:75
Certificate issuer:       /CN=B7187C4D4BDDD435728B412888E0655334208E0B
Certificate serial:       6C
Authority key identifier: B7:18:7C:4D:4B:DD:D4:35:72:8B:41:28:88:E0:65:53:34:20:8E:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/txh8TUvd1DVyi0EoiOBlUzQgjgs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/997/uunpdP0Ea2h5xe-Iga1nYahsunU.roa
Signing time:             Tue 31 Mar 2026 07:50:31 +0000
ROA not before:           Tue 31 Mar 2026 07:50:31 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     17707
IP address blocks:        219.109.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/997/txh8TUvd1DVyi0EoiOBlUzQgjgs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/997/txh8TUvd1DVyi0EoiOBlUzQgjgs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/txh8TUvd1DVyi0EoiOBlUzQgjgs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 10:05:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 108 (0x6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7187C4D4BDDD435728B412888E0655334208E0B
        Validity
            Not Before: Mar 31 07:50:31 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=BAE9E974FD046B6879C5EF8881AD6761A86CBA75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:57:eb:61:41:07:47:85:6a:5c:89:9c:d2:7a:
                    b2:47:78:2e:e2:65:b9:f8:bc:50:8c:0e:5a:a1:2a:
                    d3:92:5d:4d:46:4e:93:ec:45:af:a1:4d:c3:36:9b:
                    f0:86:69:e9:f0:0d:1d:f4:9d:c6:94:64:b5:a0:ae:
                    62:63:77:1b:11:e0:63:a4:fb:4c:46:50:14:1c:a6:
                    9d:35:31:e8:a0:b1:1f:fc:14:6a:a7:8e:f5:d9:cf:
                    e4:18:85:b9:35:34:b3:ba:ed:fa:19:98:9d:bf:db:
                    72:99:23:3d:d1:82:98:77:51:4d:f3:a6:d3:39:97:
                    58:9a:78:2c:c8:37:d8:f1:96:0b:2a:7f:30:4a:31:
                    16:0e:7f:22:56:99:1c:2a:f8:61:2f:a3:12:28:72:
                    6b:37:47:1a:2b:22:fc:52:c9:b6:f0:1d:f1:05:31:
                    0d:29:41:f1:4e:e6:eb:75:15:9b:43:4c:8d:04:fd:
                    6a:f6:4c:e8:25:0d:b6:6e:83:62:37:f2:28:4a:e0:
                    93:21:df:75:7c:e2:87:75:18:03:4f:36:a9:30:15:
                    09:4d:62:f6:3a:19:80:05:4f:9c:8f:c0:1d:7e:98:
                    3f:28:63:2f:04:74:73:b7:0f:12:46:74:a6:78:21:
                    37:6c:fe:36:fc:07:fa:ef:7c:80:87:e9:e2:17:f4:
                    54:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:E9:E9:74:FD:04:6B:68:79:C5:EF:88:81:AD:67:61:A8:6C:BA:75
            X509v3 Authority Key Identifier:
                keyid:B7:18:7C:4D:4B:DD:D4:35:72:8B:41:28:88:E0:65:53:34:20:8E:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/997/txh8TUvd1DVyi0EoiOBlUzQgjgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/txh8TUvd1DVyi0EoiOBlUzQgjgs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/997/uunpdP0Ea2h5xe-Iga1nYahsunU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.109.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         df:ce:91:67:09:91:55:c6:e2:de:b0:3d:67:3c:77:ce:1a:8b:
         aa:1b:61:cc:d4:8b:82:a4:dd:81:2b:d1:e8:9f:c4:29:77:95:
         a7:8d:5d:dd:1b:f8:ac:85:dc:aa:b5:5b:f4:c9:d2:11:ea:62:
         89:8e:ef:d8:fc:98:25:95:94:70:b9:59:57:c6:4e:89:c4:5b:
         ef:06:5c:4c:85:a7:73:76:6a:f8:97:6c:43:46:23:9a:2b:a5:
         78:20:49:8c:72:ee:b3:a1:a9:05:68:c9:97:44:ac:49:45:9f:
         70:a8:94:9e:28:2b:da:c2:20:1e:16:4a:b5:a9:d8:31:a8:e8:
         8f:14:40:96:2e:e0:e3:21:dc:84:7a:df:66:7f:ef:07:1a:a2:
         b2:3c:41:73:42:2b:ae:6e:79:fa:57:be:0f:e7:e6:3c:4f:63:
         47:32:f0:96:20:62:65:9b:1c:15:35:02:d1:53:39:77:08:a5:
         47:9c:91:76:b2:6c:0d:7e:c6:58:19:93:64:45:34:f8:a6:a7:
         09:43:a9:0e:fb:cd:56:42:cf:f5:96:71:c9:02:6f:c5:62:21:
         75:7d:39:50:a4:43:2e:7f:cf:c5:d0:8f:e4:99:80:bb:d0:f5:
         ae:4b:d9:c8:62:f0:6a:91:84:ab:87:27:a2:9a:b5:60:6b:f3:
         a3:83:ba:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:51:58 2026 by rpki-client