Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/ubnCP9m6xWist_-2wt5pWUp20iI.roa
File:                     ubnCP9m6xWist_-2wt5pWUp20iI.roa (raw, json)
Hash identifier:          2WwU+LeGOD5ljQJl+osEcvb1+BRU9y5guEWARnMetJo=
Subject key identifier:   B9:B9:C2:3F:D9:BA:C5:68:AC:B7:FF:B6:C2:DE:69:59:4A:76:D2:22
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       0267
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/ubnCP9m6xWist_-2wt5pWUp20iI.roa
Signing time:             Sun 01 Feb 2026 01:38:19 +0000
ROA not before:           Sun 01 Feb 2026 01:38:19 +0000
ROA not after:            Fri 15 Jan 2027 01:30:02 +0000
asID:                     4713
IP address blocks:        125.170.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Feb 2026 12:38:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 615 (0x267)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Feb  1 01:38:19 2026 GMT
            Not After : Jan 15 01:30:02 2027 GMT
        Subject: CN=B9B9C23FD9BAC568ACB7FFB6C2DE69594A76D222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:40:4c:12:1d:b1:d0:2d:27:b7:7c:3d:ba:c9:
                    c7:7e:f3:c7:38:ac:57:67:14:2a:3a:57:dd:f7:40:
                    2e:b4:35:59:0a:9c:21:e6:84:22:ea:3f:72:f6:0e:
                    9c:2a:be:4c:45:4c:fe:89:f9:ac:39:d9:51:f0:1e:
                    54:f5:7f:46:d7:54:0e:08:39:6e:d1:7e:73:7d:e3:
                    fb:7a:6f:07:1b:2e:99:76:06:a8:7e:8e:b5:78:7f:
                    00:94:c8:b3:a2:77:a3:b8:59:8b:09:e4:4a:a7:e1:
                    7e:d1:a1:89:01:e9:f4:b9:44:0a:7b:67:75:c8:21:
                    9a:8a:70:83:5f:95:65:87:7c:1a:29:e7:85:47:1c:
                    a3:38:5a:15:7a:6d:3f:6c:ad:7e:52:7a:56:78:b6:
                    1b:72:8b:a3:75:cd:ed:1a:24:f5:24:75:10:e1:31:
                    bd:73:1d:1e:53:0b:74:5a:62:07:3c:4d:a6:5d:ab:
                    81:e6:32:42:79:36:69:64:5a:37:be:2f:68:3d:05:
                    d6:82:a2:0a:ab:8e:17:d7:f6:43:c1:9c:1c:29:19:
                    7e:02:49:cc:ab:a7:23:57:d0:18:36:e4:70:b5:2c:
                    50:45:26:ab:54:e1:f2:c3:55:88:52:b5:71:1c:d4:
                    f9:c2:f9:69:ce:99:48:3b:02:b2:24:0c:d3:92:b5:
                    31:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B9:C2:3F:D9:BA:C5:68:AC:B7:FF:B6:C2:DE:69:59:4A:76:D2:22
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/ubnCP9m6xWist_-2wt5pWUp20iI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.170.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         58:d9:b9:4e:d0:5c:4a:1e:cb:3d:69:41:13:ad:c7:92:ef:13:
         12:3a:23:fb:ee:b5:dd:1f:95:94:14:91:09:bd:18:81:62:31:
         2f:3e:3b:58:d1:19:f8:d0:79:09:49:31:c4:99:f8:3c:ee:2d:
         dc:6a:17:5e:ad:c5:33:3f:c7:0a:78:10:ea:bf:37:3a:4f:71:
         d6:ab:2e:bc:00:f5:da:58:11:d8:6a:2e:f8:17:e6:ba:b6:c7:
         04:e4:31:e0:c1:a2:a5:ca:56:12:58:a1:39:3f:51:b6:ab:df:
         7a:58:5f:c2:f7:77:45:a0:f1:8c:23:30:cd:2a:bf:eb:50:73:
         bc:75:cb:25:88:36:12:5e:10:56:9c:b6:94:2f:83:fe:14:13:
         b5:4c:cc:fa:03:e5:26:25:b6:36:7a:0e:bd:97:10:17:22:89:
         d5:75:fd:f6:7e:3b:07:1d:67:ba:bb:70:90:f3:66:a3:2c:5e:
         ae:14:c7:54:2a:af:c5:50:44:00:62:28:77:2b:92:93:c3:80:
         df:40:5e:ba:d4:cd:24:aa:31:5d:e8:e6:8b:35:3b:16:86:01:
         e0:6a:30:3b:eb:00:de:31:34:6e:21:6a:74:59:36:e9:99:59:
         04:df:f4:4b:c0:78:8b:ab:7b:46:46:47:8f:92:89:09:31:08:
         28:a6:ed:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 14:58:57 2026 by rpki-client