Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/WOYRXUkhKUVz5G1JJkI6Easyxis.roa
File:                     WOYRXUkhKUVz5G1JJkI6Easyxis.roa (raw, json)
Hash identifier:          yDDukiqwbCmOfJEBoNvwBh1w+Ky87lKan8AuPNUl2hY=
Subject key identifier:   58:E6:11:5D:49:21:29:45:73:E4:6D:49:26:42:3A:11:AB:32:C6:2B
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       04D6
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/WOYRXUkhKUVz5G1JJkI6Easyxis.roa
Signing time:             Tue 31 Mar 2026 08:18:54 +0000
ROA not before:           Tue 31 Mar 2026 08:18:54 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        27.132.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1238 (0x4d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:18:54 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=58E6115D4921294573E46D4926423A11AB32C62B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:3f:a3:ca:4b:07:92:2e:ce:d0:a9:67:5f:7a:
                    78:7e:8b:25:32:58:c0:34:c1:63:12:ff:e9:03:ad:
                    64:d9:26:82:86:3e:6b:b8:25:5d:0f:f4:56:d3:05:
                    b6:d0:7f:a4:41:76:6b:39:05:8f:1b:2a:4b:f8:38:
                    e4:f4:cf:f8:c5:96:3a:38:3d:68:3f:cc:d1:43:f4:
                    60:f7:86:93:13:b5:b3:b0:eb:bb:dd:39:2b:e3:06:
                    80:58:13:29:0c:06:ad:9b:72:c8:bb:73:3b:c9:38:
                    c9:d0:ad:d7:ce:19:f8:b5:15:cf:29:29:36:47:bf:
                    06:59:2c:e4:ee:d3:eb:38:bb:de:01:53:69:46:b6:
                    9c:01:84:51:99:f4:09:cd:99:5f:9c:66:42:6f:68:
                    3a:df:cf:c7:f7:8e:e6:de:1a:98:ce:e5:cb:b4:c9:
                    a3:44:e7:3b:3a:28:4f:68:fc:33:7f:47:91:c9:68:
                    47:69:ad:83:c1:01:d9:a7:f2:b4:1c:b2:eb:f3:64:
                    59:1d:8e:4d:3e:88:0e:e3:e9:7f:e1:4f:7d:32:88:
                    0d:7e:b8:21:82:f8:1e:06:96:dc:08:79:05:2b:a0:
                    0d:8e:34:c6:a1:40:e3:e9:e7:4e:63:7d:b0:b2:7f:
                    a2:32:c2:b4:e3:43:67:44:64:06:a2:3f:04:44:14:
                    fb:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:E6:11:5D:49:21:29:45:73:E4:6D:49:26:42:3A:11:AB:32:C6:2B
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/WOYRXUkhKUVz5G1JJkI6Easyxis.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.132.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8e:80:dc:31:2c:de:12:fc:38:e9:a1:4d:e0:7d:26:a0:cb:c1:
         d2:3c:9f:d0:a2:2d:b2:b2:62:9d:a2:00:d0:65:fd:6d:fd:cd:
         a8:32:e9:05:cc:fa:49:9c:63:2d:a5:26:04:22:c9:56:58:38:
         cf:7e:52:69:27:8a:c6:88:e6:3c:ab:b3:a1:e4:e7:6b:dc:da:
         a9:92:cb:4d:9d:7e:c9:d6:33:3f:f1:80:94:0a:e4:8e:de:17:
         6e:61:04:f3:ee:a4:a4:22:fd:e4:22:df:c3:8e:51:78:78:7f:
         bd:ca:87:52:d9:13:c4:74:c8:fa:05:75:08:41:f1:11:c3:7d:
         c2:fe:8c:61:6a:ba:11:3c:fa:ba:82:d5:69:ae:13:91:29:94:
         69:2e:b4:48:b0:82:ff:c8:8b:94:df:04:62:cb:b4:38:94:db:
         84:e2:c9:ed:96:80:e5:a6:bb:99:2d:47:6f:8d:6f:1f:ad:ea:
         dc:fb:73:d3:54:a2:c0:33:aa:46:81:20:e0:7d:69:5c:ef:fd:
         a2:60:ea:5a:19:2c:6b:1d:4f:ad:cb:a5:e6:c1:4e:9f:e5:d7:
         29:5b:f9:b3:04:3e:2b:68:fd:80:67:bb:53:e5:d0:50:27:99:
         ee:e4:33:5d:31:33:04:32:d7:0c:1f:d5:44:47:2b:ae:7d:f3:
         31:d1:d2:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:00:37 2026 by rpki-client