Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/ke-dLJvDOJ1_rIgQ4ZmKiQKozWA.roa
File:                     ke-dLJvDOJ1_rIgQ4ZmKiQKozWA.roa (raw, json)
Hash identifier:          wr6S5PhfUEvVM+z6yQsV72TVkh/9L0Hy9ZYgB6RZ6bU=
Subject key identifier:   91:EF:9D:2C:9B:C3:38:9D:7F:AC:88:10:E1:99:8A:89:02:A8:CD:60
Certificate issuer:       /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial:       C3
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/ke-dLJvDOJ1_rIgQ4ZmKiQKozWA.roa
Signing time:             Tue 31 Mar 2026 08:17:48 +0000
ROA not before:           Tue 31 Mar 2026 08:17:48 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     2514
IP address blocks:        119.245.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 195 (0xc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
        Validity
            Not Before: Mar 31 08:17:48 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=91EF9D2C9BC3389D7FAC8810E1998A8902A8CD60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:1c:c3:12:3b:c9:c1:d2:3f:e5:f4:b3:e5:14:
                    56:14:f8:bc:13:c2:17:2d:d9:8b:06:28:9c:3e:08:
                    c3:e1:4e:5d:a8:f5:d1:9e:46:40:3d:24:0c:8f:f9:
                    d8:b1:1b:38:1f:99:b4:7f:52:2c:26:ab:5a:bf:56:
                    5b:df:f1:c4:29:65:c1:93:73:8a:fa:50:75:49:b9:
                    65:04:ee:c2:b5:27:8d:5a:b1:ea:2b:12:7b:e9:12:
                    c5:3b:21:cb:c8:46:5d:64:4c:ed:be:59:b7:a1:c4:
                    5b:d9:91:c0:5d:cf:62:47:26:7b:47:6d:df:ee:79:
                    6e:28:c9:ae:29:68:ea:e1:bf:94:4f:79:d5:70:83:
                    e5:a4:8f:f9:09:5c:34:37:a4:74:20:b8:40:93:5a:
                    38:74:80:97:7a:9a:40:0b:87:52:0a:73:e4:34:89:
                    ba:15:36:06:dd:04:c6:44:ae:c3:80:ed:13:63:65:
                    3b:c5:9f:32:42:7b:4a:61:37:f2:9d:19:ed:b2:08:
                    45:39:04:6f:9c:fd:bd:c1:4f:a3:06:e3:8d:ee:ee:
                    c1:9b:91:68:aa:21:a6:4f:72:f6:59:45:58:10:9a:
                    c3:c7:a1:60:63:aa:43:63:aa:79:3d:ec:5b:33:e3:
                    69:38:c4:69:16:43:23:9d:33:8c:16:0c:4b:5c:6a:
                    7c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:EF:9D:2C:9B:C3:38:9D:7F:AC:88:10:E1:99:8A:89:02:A8:CD:60
            X509v3 Authority Key Identifier:
                keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/ke-dLJvDOJ1_rIgQ4ZmKiQKozWA.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.245.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         aa:ef:bc:93:4e:c8:6d:43:62:e3:d9:cc:2f:06:05:1f:e0:3c:
         c4:50:44:9b:7e:5e:11:6d:ed:90:aa:7c:0b:4c:8d:d6:97:85:
         bf:26:ba:33:13:74:df:42:64:28:16:db:cc:d6:0c:0b:ea:96:
         cc:39:be:6f:dd:7b:09:82:75:2d:10:fe:b6:cc:b7:3a:0a:44:
         08:1a:27:25:44:5a:5f:77:1f:9a:f6:85:e0:7a:d0:82:ac:85:
         fd:ab:cc:25:b7:77:7e:77:90:5f:64:60:6d:f1:52:8d:de:e5:
         25:e0:9c:be:f2:b4:c8:9a:f5:34:7a:d3:72:b2:48:3b:ee:6e:
         13:91:fc:25:f1:c2:80:3a:9a:fc:eb:d0:0a:8e:87:65:67:0a:
         da:38:91:95:02:0a:cb:ad:63:c2:21:16:10:7c:aa:66:f3:16:
         e6:3b:9a:f4:6d:7f:66:bb:92:01:77:21:6d:57:09:db:76:b1:
         61:0c:2e:c9:93:f3:ce:9e:77:c6:d6:a2:a7:25:40:83:43:f3:
         9e:6f:7a:d7:b7:88:fb:93:17:9d:62:32:bc:ef:e0:6f:b7:c2:
         ff:15:38:10:88:a1:29:36:41:39:be:79:64:72:c0:37:4f:fb:
         26:3d:fe:26:61:a4:4f:17:4d:24:3c:14:8e:01:ef:d5:87:e5:
         38:34:89:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:42:14 2026 by rpki-client