Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/IE-L57RUlfGViCnCw-Pa6OknpLo.roa
File:                     IE-L57RUlfGViCnCw-Pa6OknpLo.roa (raw, json)
Hash identifier:          6Ef31lgKDZBKk2WdThFuMs1IX3FSkd5BiXwRjrEhvvk=
Subject key identifier:   20:4F:8B:E7:B4:54:95:F1:95:88:29:C2:C3:E3:DA:E8:E9:27:A4:BA
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0509
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/IE-L57RUlfGViCnCw-Pa6OknpLo.roa
Signing time:             Tue 31 Mar 2026 08:19:18 +0000
ROA not before:           Tue 31 Mar 2026 08:19:18 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        219.109.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1289 (0x509)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:19:18 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=204F8BE7B45495F1958829C2C3E3DAE8E927A4BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8b:08:16:04:97:e9:c0:d6:14:ed:38:a6:aa:
                    19:4d:d3:62:8c:f8:df:f3:50:b9:d2:a2:a3:4d:a6:
                    dc:76:82:00:1e:26:ae:b2:e7:65:b5:ac:f0:a1:6c:
                    ee:1a:9f:a2:5a:f7:e4:57:d3:1b:7a:06:51:15:3b:
                    5e:ff:3e:fb:d6:82:8c:5b:82:3d:35:c5:71:fc:4e:
                    ec:b4:14:02:b6:2a:3e:4a:3a:8a:39:ea:c0:ba:b4:
                    18:a2:e9:ab:f1:46:11:63:2f:4e:79:62:cd:c2:97:
                    be:ca:5a:d0:c0:da:0f:9a:e9:b2:b6:e4:fd:e4:51:
                    01:3b:2e:d1:12:df:43:f5:5d:dc:67:12:2a:94:cc:
                    99:33:96:05:e4:b0:7a:b8:e0:7a:92:fd:20:a9:0e:
                    f0:1d:09:7b:23:b5:68:69:2e:6e:df:52:57:9a:42:
                    90:2f:09:c7:24:04:48:5e:85:58:cc:11:95:2e:29:
                    de:0b:58:37:d5:1d:29:74:e3:fc:06:cf:fa:66:4f:
                    ed:d2:27:bc:ae:49:67:bb:77:77:97:69:f4:f6:03:
                    74:59:39:ad:84:c6:19:4e:59:67:4d:d3:97:40:c8:
                    40:89:db:a2:98:b5:0c:15:3c:47:c9:43:16:1c:3c:
                    23:1d:58:89:b0:6f:cc:e0:dd:3f:e9:f5:11:0f:95:
                    72:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:4F:8B:E7:B4:54:95:F1:95:88:29:C2:C3:E3:DA:E8:E9:27:A4:BA
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/IE-L57RUlfGViCnCw-Pa6OknpLo.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.109.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         91:26:5a:99:83:ea:d7:6f:c3:c9:6b:fe:a8:58:db:35:53:e7:
         b3:77:ee:66:3e:6b:cf:36:25:1d:30:8d:4c:f1:97:ec:a9:00:
         91:99:e6:b6:c4:1e:50:d0:fc:6d:55:ce:90:ef:a1:5a:0d:4e:
         64:75:47:e3:9b:f4:95:21:20:4a:0f:ba:90:78:c7:01:4b:07:
         41:a5:41:e7:51:da:b7:68:fe:b8:e7:ca:ae:11:73:91:8d:24:
         96:7d:7a:97:af:e9:e5:21:1f:37:62:29:c7:e3:48:a5:91:82:
         14:b7:95:5e:2f:55:c3:df:ea:05:c2:31:2e:79:7a:19:f8:e7:
         70:e4:c5:84:53:b3:3b:2e:b1:65:c0:06:fc:92:ae:56:1b:51:
         16:74:9f:00:82:44:08:3e:96:90:e2:3e:23:06:6e:3b:f8:d1:
         a7:00:06:6b:d8:25:5d:eb:9f:77:2d:ae:41:cd:5d:95:4d:e2:
         63:8c:43:80:1e:f2:ef:67:28:49:b7:47:e8:1c:1b:13:eb:51:
         ff:d9:c7:a7:6b:5c:b0:54:b3:e1:aa:9d:d5:70:b7:53:89:29:
         cf:a8:e1:6a:35:c7:b4:e7:43:ea:49:af:ef:e5:89:81:4c:8f:
         d0:bd:b0:4d:0e:0a:26:e3:a1:8d:e9:c0:27:a3:46:1c:5a:63:
         b2:72:04:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:21:23 2026 by rpki-client