Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/uKAI9O1ep1YJ-1VJrFQHLyH35qg.roa
File:                     uKAI9O1ep1YJ-1VJrFQHLyH35qg.roa (raw, json)
Hash identifier:          +OE/5OkzkZcHOLy3kOe9x5choNoFozJYt8TVvhw0myo=
Subject key identifier:   B8:A0:08:F4:ED:5E:A7:56:09:FB:55:49:AC:54:07:2F:21:F7:E6:A8
Certificate issuer:       /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Certificate serial:       C0
Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/uKAI9O1ep1YJ-1VJrFQHLyH35qg.roa
Signing time:             Tue 31 Mar 2026 07:39:38 +0000
ROA not before:           Tue 31 Mar 2026 07:39:38 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2527
IP address blocks:        147.192.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 192 (0xc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
        Validity
            Not Before: Mar 31 07:39:38 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=B8A008F4ED5EA75609FB5549AC54072F21F7E6A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b9:3e:4c:9e:c7:c9:f9:62:b2:81:fe:ef:d7:
                    bc:cf:a5:49:d1:b6:50:27:7f:c9:4b:a9:37:7c:fd:
                    94:3d:91:ff:f6:64:41:95:ec:53:7e:92:61:c3:b2:
                    3b:04:6c:2e:e3:b5:cd:49:aa:1c:4d:71:a6:b5:66:
                    3e:c6:73:27:b4:13:1d:28:d0:33:f0:09:ef:ed:b5:
                    5c:86:f5:6a:11:76:5a:03:16:fb:43:13:57:b7:86:
                    71:ff:23:40:33:a5:54:30:03:a5:d4:c5:c9:6b:81:
                    b0:82:8e:43:47:7f:b2:b8:19:be:5e:02:f2:89:d1:
                    da:4e:cb:bd:87:63:ef:04:c6:87:c5:82:fd:15:dc:
                    c6:28:64:9a:76:d6:af:b1:cd:0e:0e:8d:4f:a7:e9:
                    26:08:c0:16:a0:0e:32:36:f2:68:b6:e3:84:c6:48:
                    10:3d:b2:04:52:19:45:66:9a:41:e4:6f:b4:f6:aa:
                    87:63:f5:6d:d9:33:29:81:0d:34:9f:0a:33:41:71:
                    51:38:28:09:0b:86:7a:58:91:1a:de:af:a6:c3:7f:
                    ca:f9:66:53:96:66:34:61:4b:fc:b7:a7:e8:5b:3d:
                    e1:10:99:da:5e:9e:4f:97:41:7a:59:f4:06:9b:cd:
                    6a:a8:7c:64:52:84:73:18:97:d3:a2:36:a3:9c:69:
                    33:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:A0:08:F4:ED:5E:A7:56:09:FB:55:49:AC:54:07:2F:21:F7:E6:A8
            X509v3 Authority Key Identifier:
                keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/uKAI9O1ep1YJ-1VJrFQHLyH35qg.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.192.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1c:99:00:96:b4:07:b6:70:1a:a2:4a:b3:0e:b0:41:5f:97:cc:
         80:7a:0a:d5:5d:76:c1:48:48:76:14:b9:81:97:08:6c:9a:ea:
         3f:c2:88:94:74:9e:fc:e6:94:7c:9f:f3:72:7c:da:6b:a8:5d:
         7d:0b:82:8d:1d:0c:ef:ca:11:19:b1:19:9b:e4:83:4f:a9:15:
         8f:d5:4a:96:be:3d:d4:36:d7:ea:9a:20:af:0f:81:64:97:77:
         52:e2:3e:e1:8e:6a:51:dd:66:43:56:e7:17:73:bb:1d:f1:5d:
         1b:2a:7a:c1:9d:15:c9:8c:fc:4e:f2:b3:83:de:a2:07:93:da:
         d2:f4:61:5c:01:fe:4d:71:cb:5f:2c:95:7a:46:39:5b:b3:ab:
         39:c0:9c:ee:dd:01:e4:30:0d:7e:20:20:79:8a:24:79:a6:ae:
         3f:f0:b1:4c:4a:7b:ee:36:52:4e:05:58:3e:b7:5a:73:b8:d2:
         23:51:0b:3b:9f:aa:61:eb:f2:ae:1f:9f:f6:e1:7a:c7:28:9a:
         00:4f:1a:e1:a8:dd:5e:d8:a8:5e:37:63:64:9f:da:0e:a4:cc:
         e0:d7:3e:1c:20:96:3d:86:4e:16:48:3e:d4:96:77:a9:c3:39:
         d5:65:82:a4:7a:65:94:2c:c7:d4:b6:c3:b9:71:bc:0a:2e:9b:
         14:af:1d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:33:39 2026 by rpki-client