Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/ux2BnIcfl_qxWDUIIutFANmYiFM.roa
File:                     ux2BnIcfl_qxWDUIIutFANmYiFM.roa (raw, json)
Hash identifier:          Bt3+mWen8StydmPSIytT+Q8ERRJqDK0/+S2llyDTRb8=
Subject key identifier:   BB:1D:81:9C:87:1F:97:FA:B1:58:35:08:22:EB:45:00:D9:98:88:53
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0490
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/ux2BnIcfl_qxWDUIIutFANmYiFM.roa
Signing time:             Tue 31 Mar 2026 08:12:47 +0000
ROA not before:           Tue 31 Mar 2026 08:12:47 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     4721
IP address blocks:        211.19.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Apr 2026 13:54:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1168 (0x490)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Mar 31 08:12:47 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=BB1D819C871F97FAB158350822EB4500D9988853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:01:7b:40:9f:5b:53:95:67:ff:64:d6:80:97:
                    5f:ad:c5:38:40:d9:ea:de:33:20:cc:dd:61:1d:03:
                    34:28:45:f3:81:0f:40:e2:0d:2a:9a:28:43:ac:55:
                    92:98:ec:42:8e:df:79:5c:18:4c:c4:ed:45:0f:be:
                    ea:16:82:ee:2c:45:8d:c5:8f:24:f2:d2:9b:2b:f8:
                    ce:2e:28:c9:55:e9:c4:2e:fe:57:69:7f:e8:78:2d:
                    97:61:00:75:40:74:18:1d:6a:7d:fe:53:7d:44:d5:
                    a7:f5:f5:5b:84:40:b3:29:c2:58:e8:62:05:98:ca:
                    11:22:d2:14:f2:db:ec:ea:56:94:82:6e:19:d4:ad:
                    bf:b1:f2:c5:64:16:17:96:2d:b1:cc:48:4f:46:4f:
                    6b:f6:f1:39:24:ed:af:37:49:2a:e0:56:50:cf:10:
                    aa:0d:93:da:4a:63:5e:e0:ca:99:39:01:73:68:14:
                    73:24:6c:dd:98:e3:1d:eb:8e:d5:9e:da:48:9a:d8:
                    22:08:56:6e:2b:75:30:0c:fe:cc:a5:21:46:60:41:
                    d7:36:4f:f4:fc:23:48:0c:1a:01:20:24:f8:a4:0a:
                    8c:9e:fa:94:55:0b:bb:b9:66:d5:2b:70:6b:62:f1:
                    86:84:99:c4:30:3f:73:14:c8:85:92:90:21:51:87:
                    f6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:1D:81:9C:87:1F:97:FA:B1:58:35:08:22:EB:45:00:D9:98:88:53
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/ux2BnIcfl_qxWDUIIutFANmYiFM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.19.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b8:bb:89:cc:ce:e2:2d:48:e0:36:3e:ef:85:3b:90:55:09:ad:
         02:15:b7:37:3c:33:c8:df:50:6f:6b:88:92:8b:da:39:ff:c6:
         d9:a3:e0:5c:9d:ef:ed:d6:9b:bd:b1:1d:ae:4b:a9:65:e3:09:
         ed:be:a9:cb:fa:dd:64:07:2b:33:e6:74:8a:00:ef:17:04:de:
         b1:5d:ac:2d:f2:f4:97:87:38:93:e5:b0:1e:ea:ea:11:1d:79:
         eb:34:5d:a7:f8:72:b7:e4:75:4e:85:0a:47:3c:4a:42:f5:15:
         af:be:dd:19:a0:7a:db:ad:56:f2:9b:40:4f:ab:0f:c6:47:f7:
         38:f9:70:86:30:0f:b5:05:bb:58:93:d3:bd:6f:d2:7f:27:f1:
         d2:04:d6:86:00:f6:e2:71:83:55:88:aa:d7:bc:20:31:b4:e7:
         5b:b2:ab:dd:cd:06:48:bb:e4:ec:93:be:dd:9c:92:e6:6f:16:
         5a:31:c1:ae:ca:a2:0b:18:4f:fd:40:58:6c:77:79:87:9f:a4:
         6e:6b:36:3e:ff:91:80:f3:92:a0:0b:0b:c8:eb:0a:81:9a:17:
         07:e6:03:a8:29:e9:5b:06:74:74:54:b3:91:ce:73:2b:78:e8:
         08:5e:33:da:f2:27:78:be:d3:0b:5c:67:6f:cf:9b:a3:ff:78:
         94:fe:2c:90
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICBJAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNjAzMzEw
ODEyNDdaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEJCMUQ4MTlDODcxRjk3
RkFCMTU4MzUwODIyRUI0NTAwRDk5ODg4NTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCnAXtAn1tTlWf/ZNaAl1+txThA2ereMyDM3WEdAzQoRfOBD0Di
DSqaKEOsVZKY7EKO33lcGEzE7UUPvuoWgu4sRY3FjyTy0psr+M4uKMlV6cQu/ldp
f+h4LZdhAHVAdBgdan3+U31E1af19VuEQLMpwljoYgWYyhEi0hTy2+zqVpSCbhnU
rb+x8sVkFheWLbHMSE9GT2v28Tkk7a83SSrgVlDPEKoNk9pKY17gypk5AXNoFHMk
bN2Y4x3rjtWe2kia2CIIVm4rdTAM/sylIUZgQdc2T/T8I0gMGgEgJPikCoye+pRV
C7u5ZtUrcGti8YaEmcQwP3MUyIWSkCFRh/brAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUux2BnIcfl/qxWDUIIutFANmYiFMwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvNjcxL3V4MkJuSWNmbF9xeFdEVUlJdXRGQU5tWWlGTS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATTE9AwDQYJKoZIhvcNAQELBQADggEB
ALi7iczO4i1I4DY+74U7kFUJrQIVtzc8M8jfUG9riJKL2jn/xtmj4Fyd7+3Wm72x
Ha5LqWXjCe2+qcv63WQHKzPmdIoA7xcE3rFdrC3y9JeHOJPlsB7q6hEdees0Xaf4
crfkdU6FCkc8SkL1Fa++3RmgetutVvKbQE+rD8ZH9zj5cIYwD7UFu1iT071v0n8n
8dIE1oYA9uJxg1WIqte8IDG051uyq93NBki75OyTvt2ckuZvFloxwa7KogsYT/1A
WGx3eYefpG5rNj7/kYDzkqALC8jrCoGaFwfmA6gp6VsGdHRUs5HOcyt46AheM9ry
J3i+0wtcZ2/Pm6P/eJT+LJA=
-----END CERTIFICATE-----
Generated at Mon Apr 6 15:41:17 2026 by rpki-client