Route Origin Authorization

$ rpki-client -vvvf rpki-repository.nic.ad.jp/ap/A91A73810000/191/UB0Hbip7WKPB-rdZ1cjOddHnduA.roa
File:                     UB0Hbip7WKPB-rdZ1cjOddHnduA.roa (raw, json)
Hash identifier:          +RwoBQvfCXl5Z6Fuz/o7gpRLjOlLUIpOCbNb3fpXsV0=
Subject key identifier:   50:1D:07:6E:2A:7B:58:A3:C1:FA:B7:59:D5:C8:CE:75:D1:E7:76:E0
Certificate issuer:       /CN=7C117923A3AE6D14160F5031115AED44CB4D827D
Certificate serial:       C7
Authority key identifier: 7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/UB0Hbip7WKPB-rdZ1cjOddHnduA.roa
Signing time:             Thu 24 Sep 2026 00:41:57 +0000
ROA not before:           Thu 24 Sep 2026 00:41:57 +0000
ROA not after:            Wed 15 Sep 2027 01:30:02 +0000
asID:                     58325
IP address blocks:        133.157.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 10:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 199 (0xc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C117923A3AE6D14160F5031115AED44CB4D827D
        Validity
            Not Before: Sep 24 00:41:57 2026 GMT
            Not After : Sep 15 01:30:02 2027 GMT
        Subject: CN=501D076E2A7B58A3C1FAB759D5C8CE75D1E776E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e1:ea:8b:5f:fb:e7:bc:d7:dc:e0:3a:7f:f6:
                    29:80:7b:50:0c:77:77:dc:6b:9f:9e:f2:82:bf:1d:
                    93:22:da:cd:69:53:14:66:07:69:54:b1:99:4d:59:
                    af:e5:5b:c2:f9:0e:06:42:e0:98:6e:cc:95:41:11:
                    45:ae:8e:52:c9:ec:a4:f8:d9:66:9e:4d:18:a9:c9:
                    34:07:3e:cf:92:9a:40:0d:a4:19:80:94:17:33:28:
                    76:5f:75:d5:70:ef:37:96:13:2a:3b:42:34:50:8b:
                    9f:1b:22:77:ff:ff:96:52:95:a4:fb:93:a7:9a:b0:
                    ef:1f:15:49:75:06:a1:66:28:51:03:88:4b:14:65:
                    ca:65:25:cb:6a:14:ad:2e:9a:cd:89:ca:70:1e:4d:
                    a7:3e:fb:e3:89:b0:70:7c:3e:99:93:9c:1b:cd:2c:
                    20:92:a4:f0:da:11:2e:7f:e3:c4:9c:59:9b:60:af:
                    01:41:10:1e:bf:0d:ed:4e:a6:4c:75:e4:e0:0c:1b:
                    67:f2:91:05:61:30:9b:a8:57:a2:fe:3a:c0:de:68:
                    b5:2f:2c:94:8b:ae:21:ad:49:12:e5:1b:82:cc:34:
                    7c:64:cf:e3:27:6e:70:ce:04:20:e4:a7:ee:55:1b:
                    0d:ee:25:14:f6:56:c4:e0:88:1e:dc:78:6d:1c:c8:
                    bc:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:1D:07:6E:2A:7B:58:A3:C1:FA:B7:59:D5:C8:CE:75:D1:E7:76:E0
            X509v3 Authority Key Identifier:
                keyid:7C:11:79:23:A3:AE:6D:14:16:0F:50:31:11:5A:ED:44:CB:4D:82:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/fBF5I6OubRQWD1AxEVrtRMtNgn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fBF5I6OubRQWD1AxEVrtRMtNgn0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/191/UB0Hbip7WKPB-rdZ1cjOddHnduA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.157.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:5c:ef:d1:2b:a8:dc:8c:36:a0:b0:50:fd:dc:f2:52:f0:e1:
         9d:77:a8:00:a2:1e:4a:de:27:4d:0b:a3:d7:dd:58:78:c6:37:
         fb:9b:ee:eb:86:a9:b8:5d:7f:0e:ac:83:cc:ad:54:16:ba:9c:
         b8:63:ca:7c:2a:7f:a2:22:da:b1:72:27:a3:67:0e:59:52:00:
         2b:f6:ff:e8:2a:fd:a6:16:57:3d:98:55:0d:5c:60:b9:d5:88:
         9d:08:55:24:77:4b:9f:25:2d:e8:dc:0b:16:79:b8:1e:03:4e:
         16:ac:58:07:3f:35:2f:61:6f:f7:4e:33:fc:6e:d7:49:e4:da:
         1e:56:bc:4e:6a:a8:a5:ab:eb:00:d3:7b:df:14:72:5a:51:e1:
         51:dd:36:d4:3f:a9:6a:23:af:cc:48:42:fe:b3:08:b0:bd:17:
         42:f3:f6:eb:56:11:5d:2d:ca:56:7b:3a:15:61:d5:d1:f2:d2:
         91:b8:43:dc:33:df:5c:19:d4:96:31:a5:07:b9:f0:6f:9a:06:
         62:d1:fa:b3:d3:1c:91:62:63:fe:00:cd:67:b0:91:7d:a5:f1:
         e9:9f:7d:ed:ad:8d:0e:4a:34:33:b3:4a:cd:7e:46:cc:68:79:
         c2:ba:e2:ad:ac:7f:9d:58:78:61:31:38:c3:09:cc:61:ec:f3:
         c0:4d:57:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 12:58:25 2026 by rpki-client