Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/UbxVjN-ZpU_s9m161-Bj1Qi6Y54.roa
File:                     UbxVjN-ZpU_s9m161-Bj1Qi6Y54.roa (raw, json)
Hash identifier:          eCiKoGeyPxv8UuDlxtI2mEnUwZCV5hSOB1oiH0LtXws=
Subject key identifier:   51:BC:55:8C:DF:99:A5:4F:EC:F6:6D:7A:D7:E0:63:D5:08:BA:63:9E
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       13FB
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/UbxVjN-ZpU_s9m161-Bj1Qi6Y54.roa
Signing time:             Tue 31 Mar 2026 07:56:39 +0000
ROA not before:           Tue 31 Mar 2026 07:56:39 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        49.98.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5115 (0x13fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 07:56:39 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=51BC558CDF99A54FECF66D7AD7E063D508BA639E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:97:e7:c6:90:33:b7:39:d2:85:ef:63:6f:0e:
                    a9:f7:45:02:96:cc:9f:a6:27:99:4e:91:28:94:2b:
                    95:bb:3a:0e:94:b6:ba:46:62:8d:57:62:a3:77:c4:
                    7c:64:a5:13:9a:a4:5d:39:4c:74:0e:43:68:00:90:
                    81:57:60:18:4f:0f:0b:6e:fd:cb:92:6e:a5:52:24:
                    19:19:46:64:6d:1a:f9:4a:c0:8f:62:13:2e:ea:25:
                    2e:8d:f5:8c:cd:17:79:17:a1:92:62:e8:67:6a:2c:
                    46:ec:d4:ca:cc:57:6d:a7:31:74:03:f1:1e:b9:47:
                    0a:61:55:4f:c8:b2:19:8f:85:61:d6:a6:ec:a0:63:
                    13:be:d3:6d:23:a5:99:69:c9:da:0e:9a:27:13:05:
                    b5:a1:e0:02:d7:e4:29:43:70:30:d9:e9:15:20:03:
                    5b:c4:b3:81:cb:54:32:bb:2b:89:86:32:1f:bf:fa:
                    f7:99:5c:15:7d:ed:62:55:10:c9:4f:ce:a8:f7:6c:
                    5f:27:3e:19:c3:75:27:e5:96:8e:d1:92:b8:9d:bc:
                    59:4d:8b:07:bc:e2:40:90:16:da:2d:2b:ff:95:a1:
                    a6:ea:a1:2e:a5:58:6b:3c:16:1e:6c:30:93:3d:b4:
                    d7:15:42:41:69:fb:3c:3c:9d:e4:cf:45:91:6d:a5:
                    3e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:BC:55:8C:DF:99:A5:4F:EC:F6:6D:7A:D7:E0:63:D5:08:BA:63:9E
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/UbxVjN-ZpU_s9m161-Bj1Qi6Y54.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.98.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b9:c4:fc:20:da:66:46:24:3c:9f:5f:bd:11:8d:58:a9:d8:78:
         43:c6:e1:d6:47:d0:89:15:b4:da:28:d5:56:a9:4d:9d:dd:f2:
         02:19:f7:56:ae:10:1c:15:6a:b7:59:b4:aa:dc:be:76:67:15:
         42:03:36:00:23:72:25:38:50:27:ef:ac:9c:b1:7b:f3:aa:fc:
         da:56:fe:c1:29:e5:d8:99:4b:7d:cf:5f:74:0f:f1:5c:52:8a:
         1e:ed:09:e4:52:dc:26:5d:2e:ae:9e:33:11:de:db:4a:91:89:
         c8:ff:16:3a:01:78:2b:12:62:7e:69:8e:77:b4:6b:30:47:c0:
         0f:cc:91:cf:98:3f:e1:14:8f:76:05:e1:d5:2e:27:58:4f:d9:
         57:7b:fd:c0:f3:01:54:74:2f:cc:18:b7:d4:f2:41:e7:a7:b3:
         8f:59:60:02:da:ae:80:80:21:96:5b:07:cd:03:41:30:32:a3:
         64:ea:34:3f:94:4c:0a:3a:58:ea:27:e3:52:1d:11:a8:79:d8:
         18:03:8b:e0:9d:71:8f:92:17:d0:05:b6:3a:ef:76:dd:f8:b3:
         c9:74:a1:79:e3:7c:5c:cc:aa:a8:6d:81:c2:6c:55:c9:c2:a8:
         a7:42:98:85:47:cd:fe:02:15:b7:3c:ab:8c:44:11:cd:8d:6b:
         91:22:69:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:47:17 2026 by rpki-client