Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/uF6BRcIgaKJNVO6PSOR-X5AHnDs.roa
File:                     uF6BRcIgaKJNVO6PSOR-X5AHnDs.roa (raw, json)
Hash identifier:          bIgq7G0CySO2LVCUJjUk+IcVQXnApUwAB9uK+MG1UWs=
Subject key identifier:   B8:5E:81:45:C2:20:68:A2:4D:54:EE:8F:48:E4:7E:5F:90:07:9C:3B
Certificate issuer:       /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial:       012C
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/uF6BRcIgaKJNVO6PSOR-X5AHnDs.roa
Signing time:             Tue 31 Mar 2026 07:36:43 +0000
ROA not before:           Tue 31 Mar 2026 07:36:43 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9370
IP address blocks:        163.43.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 300 (0x12c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Validity
            Not Before: Mar 31 07:36:43 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B85E8145C22068A24D54EE8F48E47E5F90079C3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:81:ce:22:08:d6:bd:72:ed:d3:aa:65:09:b0:
                    21:1b:be:e2:80:28:3e:2f:0b:97:f2:a7:7e:8f:fe:
                    0d:a3:43:17:3d:81:d4:94:b5:af:ee:c0:77:9e:a8:
                    41:00:ba:01:64:dc:6c:da:66:56:00:ac:7d:02:19:
                    8c:60:78:06:bd:b7:d8:88:4b:1f:98:c5:ee:61:17:
                    3b:6b:29:98:5e:44:c0:d6:c1:2a:ce:5a:e2:d0:f6:
                    de:d7:69:f6:72:e8:a1:de:1a:1a:38:e3:5c:71:3e:
                    63:e9:a0:3b:b7:c3:fb:aa:6c:ec:09:7f:a7:55:43:
                    60:34:0b:a0:b1:51:17:b4:e6:8a:1d:5b:04:8b:83:
                    d9:1c:26:77:89:73:90:a8:50:ab:5d:25:cf:99:6a:
                    c8:69:b6:06:7f:24:5a:8b:8b:68:36:92:b7:82:f8:
                    59:ac:e5:28:07:84:0f:b1:90:c5:87:02:8f:0c:53:
                    89:55:ed:31:fc:fd:8a:93:9b:d9:9e:01:06:f4:5c:
                    82:1d:57:ae:1d:41:34:1e:55:b9:3b:32:f3:2a:81:
                    30:27:37:1a:16:fb:68:42:28:3d:f4:05:6f:5a:85:
                    9a:6f:b4:f5:bb:00:33:f1:fd:c7:62:5a:cd:f3:b3:
                    f7:d5:dc:53:a1:55:eb:74:1d:0d:9c:3e:21:0c:a8:
                    fe:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:5E:81:45:C2:20:68:A2:4D:54:EE:8F:48:E4:7E:5F:90:07:9C:3B
            X509v3 Authority Key Identifier:
                keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/uF6BRcIgaKJNVO6PSOR-X5AHnDs.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.43.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         51:f2:09:2d:ee:6d:a0:9e:3f:66:75:67:28:38:94:4c:0b:11:
         c3:1f:ac:34:e1:48:75:e9:58:7b:a6:fd:67:5a:7f:38:bf:c7:
         cd:4f:a5:5c:90:78:58:8d:9e:ef:6b:5f:c2:e1:00:ab:b3:c0:
         b3:78:d6:77:2d:02:48:7e:4b:00:90:b0:c4:41:87:95:38:3f:
         c1:eb:bf:98:69:69:3d:2f:db:37:93:8c:34:a9:74:b5:a0:c4:
         ce:b6:ac:5e:d4:7a:9b:0e:78:5c:50:3d:f3:85:de:b2:7a:9e:
         76:c7:56:12:77:a5:15:ef:0c:55:da:19:89:56:7d:c2:f9:8a:
         49:03:24:01:f0:b3:6f:b2:5b:34:ce:14:c1:6f:cf:ba:47:5d:
         e6:52:16:90:93:a7:e2:e3:bc:44:4f:0f:29:b3:07:ab:76:b8:
         12:28:4f:d1:9c:b2:ad:75:c0:90:f5:49:44:02:71:b4:60:ed:
         7d:7d:e0:a7:d4:d8:3a:a1:b3:51:11:c2:06:c2:89:d4:df:1d:
         d1:6e:1c:65:a7:db:16:25:28:8c:3f:df:a9:25:be:63:d1:ab:
         1d:5e:5b:da:2f:dc:ab:29:88:d6:6b:ab:1a:ef:f9:4b:00:c8:
         98:52:b0:8a:54:6f:8a:6e:02:b9:26:23:0e:67:31:9f:f8:ab:
         ab:ca:6e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:27:38 2026 by rpki-client