Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/uLRs9EFLCC6bI-vKyXLk2b5AHzU.roa
File:                     uLRs9EFLCC6bI-vKyXLk2b5AHzU.roa (raw, json)
Hash identifier:          lDVuK1vw/JU1gX9zECeDyvvWQpEIDGIyW6HUeh+N7eU=
Subject key identifier:   B8:B4:6C:F4:41:4B:08:2E:9B:23:EB:CA:C9:72:E4:D9:BE:40:1F:35
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       0132
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/uLRs9EFLCC6bI-vKyXLk2b5AHzU.roa
Signing time:             Tue 31 Mar 2026 07:47:43 +0000
ROA not before:           Tue 31 Mar 2026 07:47:43 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4913
IP address blocks:        61.200.83.144/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 306 (0x132)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Mar 31 07:47:43 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B8B46CF4414B082E9B23EBCAC972E4D9BE401F35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:be:bf:f2:9f:bf:db:a6:b2:9d:03:de:21:fe:
                    e2:eb:2e:e4:6e:8b:6b:1a:53:d8:2a:d9:91:0c:84:
                    a1:d9:58:c4:07:69:d1:d9:39:71:88:5d:05:c5:76:
                    5a:0d:b7:e5:92:53:7e:8b:85:2e:5e:05:23:60:f7:
                    85:fd:99:59:4d:8f:fe:8f:db:d7:7b:ea:b8:17:5d:
                    83:8c:23:1e:bb:1b:15:de:31:94:4f:5e:41:2e:f0:
                    b0:81:d6:ba:e6:ab:57:cd:93:80:e3:d5:87:c1:b7:
                    53:e7:8f:ab:7e:11:7b:6c:2a:ea:5c:d7:10:7d:3e:
                    74:88:a4:84:6e:c6:61:7e:e5:4e:46:c9:ca:9c:0a:
                    18:c1:8d:fc:4c:2f:30:64:66:73:d2:d0:3a:44:67:
                    83:89:fc:f4:62:2d:19:1d:74:f1:2d:dd:b5:00:84:
                    d1:24:82:48:0a:cd:6f:d8:55:de:98:59:b6:3f:d8:
                    56:e4:cc:e7:65:b5:01:67:d2:66:c0:8f:be:48:58:
                    d4:8f:01:a9:9e:7c:06:5a:e9:62:43:72:f8:37:42:
                    32:90:04:66:41:e3:68:0f:a5:92:03:53:b1:fe:7e:
                    cc:26:65:34:41:fa:30:46:45:45:e5:34:a0:ce:ee:
                    2f:d3:e7:81:d0:f3:19:b6:03:57:77:43:a8:c8:b5:
                    8c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:B4:6C:F4:41:4B:08:2E:9B:23:EB:CA:C9:72:E4:D9:BE:40:1F:35
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/uLRs9EFLCC6bI-vKyXLk2b5AHzU.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.200.83.144/28

    Signature Algorithm: sha256WithRSAEncryption
         82:aa:d7:f5:04:07:1d:eb:15:2e:c6:6c:55:65:ef:4d:23:b5:
         68:3f:55:43:2b:15:30:c5:f7:8a:de:1b:89:68:62:63:b5:e2:
         7a:4f:81:0a:53:b3:65:2f:9d:69:13:96:8a:33:fd:1e:b5:88:
         f2:45:54:6d:d1:0d:b5:a0:c3:87:58:52:6e:32:14:d1:37:ce:
         96:7f:29:5b:bf:67:f2:f0:8c:6e:f1:1b:7a:8c:61:25:fa:4e:
         8a:d5:7c:82:c2:5c:ba:4b:b4:7b:16:eb:44:63:5c:3e:00:04:
         25:b0:92:c4:d6:1a:bf:16:5c:31:e0:ea:29:a3:6f:56:72:49:
         fc:c1:ad:88:db:4d:5a:9c:9c:eb:35:83:83:d3:d1:0c:76:f1:
         77:ab:5f:fc:45:6d:bc:93:2a:92:f0:d0:78:02:58:94:f5:92:
         9e:ec:09:11:ed:8d:45:b0:4a:eb:46:04:df:8b:a5:7f:4d:bd:
         da:3f:d2:53:44:47:20:f4:5a:67:6e:e3:46:4c:65:08:d1:4f:
         4a:84:92:00:f8:98:83:99:44:44:c9:92:ea:c3:d6:af:5d:29:
         fb:c5:df:8e:e2:89:f5:40:b7:90:e8:5f:56:d0:51:8c:65:04:
         42:9c:d6:3b:c4:7c:05:86:b3:e1:00:7c:61:32:a9:27:95:58:
         73:89:18:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:28:14 2026 by rpki-client