Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10173/pUB3jEMY0VvbUtKQ-FuD1_ubBhw.roa
File:                     pUB3jEMY0VvbUtKQ-FuD1_ubBhw.roa (raw, json)
Hash identifier:          Xury2bTUJ1BnGeehOodhbIbCVSeslYNqy1BmN02CJrw=
Subject key identifier:   A5:40:77:8C:43:18:D1:5B:DB:52:D2:90:F8:5B:83:D7:FB:9B:06:1C
Certificate issuer:       /CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
Certificate serial:       EB
Authority key identifier: 10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/pUB3jEMY0VvbUtKQ-FuD1_ubBhw.roa
Signing time:             Tue 31 Mar 2026 07:31:33 +0000
ROA not before:           Tue 31 Mar 2026 07:31:33 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18126
IP address blocks:        202.62.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 235 (0xeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
        Validity
            Not Before: Mar 31 07:31:33 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=A540778C4318D15BDB52D290F85B83D7FB9B061C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:00:59:6a:a7:60:e0:4f:3f:c9:9a:bd:7e:8a:
                    66:8d:e9:5f:92:27:b0:03:af:35:f0:c1:8a:f6:9c:
                    7a:06:f9:4d:87:90:a4:8c:c7:6e:ab:46:81:a5:99:
                    da:c3:ee:ed:9c:c3:1c:4e:20:c6:1f:b0:bf:92:fe:
                    de:21:06:8f:20:94:e7:e7:7f:fb:85:ac:0d:4f:fa:
                    b0:37:95:49:92:26:60:c7:10:af:a9:cc:e1:e8:51:
                    a9:72:e7:e3:7e:43:b1:57:34:e4:7c:50:be:59:aa:
                    5a:46:fd:fa:72:3e:a8:06:af:79:da:c4:03:59:4c:
                    07:12:23:1c:ff:27:65:80:46:0f:c0:ff:ed:c1:7a:
                    87:4b:6b:9d:85:2e:dd:d1:f2:a1:32:49:15:d3:68:
                    06:86:c8:d8:7e:a8:a5:6b:e7:de:a7:4f:c3:8c:ba:
                    69:4a:d7:ca:44:9b:54:01:8f:87:5c:a2:32:22:71:
                    f6:1e:1c:a1:6b:8f:0d:bd:e5:73:9c:56:d1:37:03:
                    50:a1:2a:62:21:b5:16:db:14:2f:47:7c:96:ab:cd:
                    13:9c:26:d5:bd:79:cc:56:12:0c:ec:48:bf:bc:70:
                    9d:7b:ee:a7:c3:57:7d:62:1e:fc:d8:5f:13:56:0a:
                    15:f5:06:5d:57:48:da:60:12:3e:af:f8:1c:84:84:
                    91:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:40:77:8C:43:18:D1:5B:DB:52:D2:90:F8:5B:83:D7:FB:9B:06:1C
            X509v3 Authority Key Identifier:
                keyid:10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/pUB3jEMY0VvbUtKQ-FuD1_ubBhw.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.62.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         48:ec:1d:7e:69:9c:20:87:a4:43:46:f9:dc:7a:1a:12:87:66:
         9b:63:4a:7b:16:60:69:db:a5:5d:a7:4c:bd:42:d6:c8:e6:57:
         34:69:8e:2a:6c:aa:71:b1:f5:bd:c7:97:dc:64:e2:ce:60:bd:
         dc:da:f1:79:55:e6:b0:eb:86:83:28:78:b4:9e:01:85:86:a9:
         e7:a3:8f:74:f9:85:42:b5:bd:00:e0:a5:bc:a2:84:a5:1f:e0:
         e5:75:d5:20:c0:40:9b:f2:54:56:10:07:fc:f2:6c:7f:d8:5f:
         22:95:0a:8f:f2:e0:f1:e2:79:3a:8a:25:a0:3c:3f:b3:e8:cc:
         d7:64:f9:19:b9:c7:81:09:1b:89:f9:be:cf:30:60:b3:d3:87:
         0f:3e:3b:71:d3:45:a9:94:bb:1c:e3:7b:89:c8:8c:fe:1e:b5:
         a3:40:82:49:7b:93:43:81:2b:0e:7f:53:03:31:ee:ec:d6:3d:
         42:b9:47:68:87:4f:8c:54:da:7f:72:b3:87:04:bb:3c:9f:b8:
         0e:a0:9f:62:b5:25:97:83:cc:4e:fe:0b:5f:c8:d2:82:48:06:
         2f:91:0c:ed:06:93:3a:88:6a:d9:6d:8c:c8:c0:e8:1f:07:8f:
         2f:df:d6:db:9a:d6:b7:91:f0:d9:2b:42:5d:2c:14:32:3a:6c:
         75:98:92:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:33 2026 by rpki-client