Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/uK4103hCuT96MvV8FTsKdqmkpM0.roa
File:                     uK4103hCuT96MvV8FTsKdqmkpM0.roa (raw, json)
Hash identifier:          mrK4SG9Ur2DfXv0Yac7Y/jHYMlYIWIDbIb6zbW5MtwA=
Subject key identifier:   B8:AE:35:D3:78:42:B9:3F:7A:32:F5:7C:15:3B:0A:76:A9:A4:A4:CD
Certificate issuer:       /CN=813105362E0334564C753A2CEEB0D85764FD2E68
Certificate serial:       62
Authority key identifier: 81:31:05:36:2E:03:34:56:4C:75:3A:2C:EE:B0:D8:57:64:FD:2E:68
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gTEFNi4DNFZMdTos7rDYV2T9Lmg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/uK4103hCuT96MvV8FTsKdqmkpM0.roa
Signing time:             Tue 31 Mar 2026 07:36:38 +0000
ROA not before:           Tue 31 Mar 2026 07:36:38 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9370
IP address blocks:        160.16.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/gTEFNi4DNFZMdTos7rDYV2T9Lmg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/gTEFNi4DNFZMdTos7rDYV2T9Lmg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gTEFNi4DNFZMdTos7rDYV2T9Lmg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=813105362E0334564C753A2CEEB0D85764FD2E68
        Validity
            Not Before: Mar 31 07:36:38 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B8AE35D37842B93F7A32F57C153B0A76A9A4A4CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:59:21:6e:31:ce:13:e8:03:76:2e:72:04:30:
                    2f:0f:a4:84:74:09:f3:02:2b:e1:bf:22:16:b1:63:
                    67:b6:35:79:f9:a3:55:34:5c:ab:fb:10:6c:6e:fd:
                    d4:bf:6f:38:b2:88:04:68:2f:7a:eb:cb:52:d5:e3:
                    f0:54:81:6b:d3:c5:bf:de:e5:1f:50:d7:8a:3c:50:
                    4a:12:5a:3a:c1:09:91:0d:51:bd:ee:41:ef:1e:cc:
                    3f:b3:69:d2:c2:40:bc:6f:4a:82:67:85:96:78:d7:
                    05:92:e5:8b:7a:1a:c5:20:13:13:34:11:a7:f2:2c:
                    a3:f6:67:04:a1:db:00:a1:ec:fa:0d:b5:19:cd:7d:
                    73:fa:a0:15:73:e9:bc:bb:1a:fe:df:8d:89:0f:df:
                    7e:cb:27:55:13:7d:ce:71:74:9a:55:59:6f:f1:65:
                    5c:26:b9:87:7c:3e:e9:50:2f:d4:02:3d:32:e9:93:
                    a9:44:2b:f6:48:3c:70:fa:3a:ed:17:e6:df:ac:c6:
                    91:0e:8f:87:66:72:f8:79:99:b4:fa:66:ba:22:db:
                    22:58:5e:b1:cf:01:1c:cf:33:e0:80:60:d1:79:97:
                    1a:55:be:00:9a:ce:f7:36:5c:0e:c3:bf:44:0e:9b:
                    d7:e0:6c:ad:7c:43:0b:a3:ae:aa:1d:22:5b:13:88:
                    45:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:AE:35:D3:78:42:B9:3F:7A:32:F5:7C:15:3B:0A:76:A9:A4:A4:CD
            X509v3 Authority Key Identifier:
                keyid:81:31:05:36:2E:03:34:56:4C:75:3A:2C:EE:B0:D8:57:64:FD:2E:68

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/gTEFNi4DNFZMdTos7rDYV2T9Lmg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gTEFNi4DNFZMdTos7rDYV2T9Lmg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/uK4103hCuT96MvV8FTsKdqmkpM0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.16.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         01:d5:53:0b:70:55:6a:1c:d4:aa:2b:20:0d:cf:d4:31:ed:17:
         35:1f:34:5b:9f:67:f1:44:7b:7e:16:8f:aa:8a:62:f1:8e:67:
         cd:e0:c6:8a:4d:d5:39:f7:f0:21:a2:81:c0:c7:b9:31:71:17:
         8f:eb:83:79:0c:1e:1d:06:20:09:ca:ec:98:27:b9:24:63:62:
         03:e1:90:8f:f3:10:e6:46:4b:9e:13:ff:51:7f:d2:3b:52:2f:
         2f:46:77:96:ec:76:4d:8b:fb:38:d5:36:7e:fa:a5:5f:87:85:
         e6:6a:b0:24:70:08:39:a2:fd:ec:9f:8e:42:2b:b3:4c:3e:68:
         64:ab:51:55:cf:f5:50:eb:47:72:50:85:e6:37:2c:12:a1:ee:
         58:2b:e6:3e:0c:04:d3:a9:78:c9:c3:28:76:c4:dd:2a:7e:06:
         4c:98:bf:05:ce:90:dc:6e:1c:75:b4:1e:59:b1:85:67:48:b6:
         23:6e:91:22:fe:7a:ec:ed:49:c5:82:92:2a:a3:33:6a:d8:22:
         d0:b1:3c:b8:e2:9e:45:17:7d:db:33:88:f7:34:3d:6d:93:a2:
         f8:4d:9d:a7:e9:e7:75:9a:3a:25:98:37:c1:a9:33:d1:a7:8d:
         d5:d5:31:a2:4b:67:f1:f7:e4:2e:3a:87:b7:1d:d7:96:f9:07:
         7c:09:22:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:29:09 2026 by rpki-client