Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/620/uFJj__36m8Vu7sWm7qIv4szJZSo.roa
File:                     uFJj__36m8Vu7sWm7qIv4szJZSo.roa (raw, json)
Hash identifier:          fMfWgZ9BB3wY+vq07zujF4BgoVXZ9Pg+nW/BqD5v0hE=
Subject key identifier:   B8:52:63:FF:FD:FA:9B:C5:6E:EE:C5:A6:EE:A2:2F:E2:CC:C9:65:2A
Certificate issuer:       /CN=7A7B162C11E74EBF8D6B4914D671CD29BA99A9B9
Certificate serial:       07
Authority key identifier: 7A:7B:16:2C:11:E7:4E:BF:8D:6B:49:14:D6:71:CD:29:BA:99:A9:B9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ensWLBHnTr-Na0kU1nHNKbqZqbk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/620/uFJj__36m8Vu7sWm7qIv4szJZSo.roa
Signing time:             Fri 18 Sep 2026 05:59:35 +0000
ROA not before:           Fri 18 Sep 2026 05:59:35 +0000
ROA not after:            Wed 15 Sep 2027 01:30:02 +0000
asID:                     0
IP address blocks:        27.122.48.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/620/ensWLBHnTr-Na0kU1nHNKbqZqbk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/620/ensWLBHnTr-Na0kU1nHNKbqZqbk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ensWLBHnTr-Na0kU1nHNKbqZqbk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A7B162C11E74EBF8D6B4914D671CD29BA99A9B9
        Validity
            Not Before: Sep 18 05:59:35 2026 GMT
            Not After : Sep 15 01:30:02 2027 GMT
        Subject: CN=B85263FFFDFA9BC56EEEC5A6EEA22FE2CCC9652A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2c:dc:5f:00:69:48:58:91:cd:69:b8:4a:1a:
                    84:21:e4:1d:6b:19:e9:fc:0f:9b:d4:cf:a7:88:85:
                    8e:27:7c:69:d6:56:94:d6:ea:1b:9b:b0:f3:f3:07:
                    e1:31:8e:43:45:48:a9:e8:10:f4:20:f6:9e:fc:44:
                    14:e8:f7:ad:ce:00:21:ed:0a:a2:31:c8:a7:b7:b0:
                    84:98:20:46:6c:85:29:98:5c:6c:64:77:32:dc:7e:
                    22:52:14:64:d1:43:e9:3f:a5:57:3a:24:5f:62:7e:
                    1c:b0:f5:36:0c:71:24:4c:48:d4:f6:2e:72:c5:26:
                    ba:51:d0:47:cb:78:34:6e:25:af:47:2b:a3:61:bd:
                    27:e2:b0:59:b7:03:77:9a:38:70:78:59:fe:63:45:
                    e5:3b:e2:38:7f:bb:8e:4b:bf:8c:64:63:39:bc:36:
                    55:80:50:f3:36:8e:4e:ae:8d:c5:3f:63:b2:ae:8a:
                    a2:af:e5:c5:41:80:b8:81:7b:55:c8:48:a9:30:a3:
                    21:dc:be:01:49:b4:07:52:91:c1:bd:58:74:24:25:
                    22:90:9d:1e:c5:11:56:66:52:d1:73:e0:55:9f:57:
                    43:7d:4f:d4:47:fa:45:95:1d:f0:ca:cb:d6:a3:12:
                    fb:81:7a:66:3e:b2:75:69:40:bc:55:36:bf:dd:79:
                    98:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:52:63:FF:FD:FA:9B:C5:6E:EE:C5:A6:EE:A2:2F:E2:CC:C9:65:2A
            X509v3 Authority Key Identifier:
                keyid:7A:7B:16:2C:11:E7:4E:BF:8D:6B:49:14:D6:71:CD:29:BA:99:A9:B9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/620/ensWLBHnTr-Na0kU1nHNKbqZqbk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ensWLBHnTr-Na0kU1nHNKbqZqbk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/620/uFJj__36m8Vu7sWm7qIv4szJZSo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.122.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5e:fa:cf:4e:05:0c:e7:dd:c6:0e:4d:3b:24:88:77:60:47:d5:
         3b:3c:e5:c9:8f:1b:f4:d0:0d:bb:20:87:65:fc:72:04:a9:93:
         b5:62:46:0a:c4:52:ad:2d:31:00:11:8d:f5:c1:46:82:21:35:
         4c:fb:f3:ab:6b:5e:4d:7f:33:2a:a0:82:8b:c0:d8:63:c7:ac:
         a2:0a:78:cc:26:07:81:7a:47:02:d7:ee:40:b2:a8:b0:c1:2e:
         8e:07:df:3a:32:a0:73:97:db:96:83:4a:93:23:08:71:bd:e2:
         cf:f5:7b:25:6c:02:40:5c:65:d6:2e:1e:3b:c4:0d:d5:8c:1a:
         78:3d:cb:8b:c4:0a:6b:8a:8a:ac:2d:1d:8f:d7:82:c3:c3:c7:
         6c:d0:f8:56:94:57:6e:a4:4c:84:1e:81:8e:db:cc:f8:7b:bb:
         62:03:4e:ac:51:dd:a6:1d:f9:b1:1b:ec:bd:a6:6a:5b:42:7c:
         5d:7a:63:13:20:d6:51:67:cc:ac:47:04:4c:2d:94:56:8d:9c:
         9d:58:68:97:7a:28:30:98:0e:60:b7:55:55:a9:b5:77:78:73:
         0b:92:7d:a7:19:fe:cf:f0:75:64:00:ea:92:bf:6d:97:94:fe:
         30:65:68:e8:d7:71:82:ac:8c:26:9a:71:39:4f:24:d9:ea:3c:
         a1:35:da:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:29:19 2026 by rpki-client