Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/a2L5G_kK9vGgQsXI78a6sIZrco0.roa
File:                     a2L5G_kK9vGgQsXI78a6sIZrco0.roa (raw, json)
Hash identifier:          f0iEW/d+DgLfndGzjQykhHLN8iVLj7ROE2GRRYrJ1AQ=
Subject key identifier:   6B:62:F9:1B:F9:0A:F6:F1:A0:42:C5:C8:EF:C6:BA:B0:86:6B:72:8D
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       05EF
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/a2L5G_kK9vGgQsXI78a6sIZrco0.roa
Signing time:             Tue 31 Mar 2026 08:21:10 +0000
ROA not before:           Tue 31 Mar 2026 08:21:10 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        220.150.16.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1519 (0x5ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:21:10 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=6B62F91BF90AF6F1A042C5C8EFC6BAB0866B728D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:44:55:12:c1:8d:e9:1c:24:6b:df:a8:3d:8f:
                    d8:c8:6c:f6:30:1d:dc:44:58:11:2e:52:29:47:59:
                    5e:ec:23:21:b0:d2:6f:9d:88:01:0e:f4:6e:28:1a:
                    94:97:b6:c0:c0:f0:f2:98:f7:90:03:aa:77:48:92:
                    22:62:96:9c:76:54:21:74:41:d0:a9:bc:a4:93:f7:
                    b3:73:31:9d:ea:33:91:5e:e5:bd:c5:4e:36:b9:13:
                    02:c3:8c:ff:67:64:74:15:07:49:22:93:5f:9e:37:
                    4f:6b:d0:70:ff:84:d5:dd:c3:90:a7:b9:33:e2:c2:
                    d3:01:2c:08:be:23:98:7f:98:75:30:a4:3f:53:99:
                    e0:8a:35:e9:00:d8:5c:fc:63:ba:18:ea:84:f9:e2:
                    d5:60:9e:65:10:d8:b8:a6:41:a0:a1:df:be:e3:6b:
                    b0:8f:dc:44:5e:f5:2d:c7:91:8d:d2:c0:bb:9f:c1:
                    a1:c2:c1:5d:0f:8c:c4:26:6a:5c:90:2d:f7:c2:45:
                    6c:0c:44:c5:6e:0c:3d:7d:61:f3:e8:53:ea:1e:85:
                    40:db:09:4c:86:83:7e:b9:3f:7f:9d:82:f4:1d:6d:
                    3c:13:48:9c:bc:16:0c:3f:da:ec:83:51:d8:9a:b4:
                    fd:27:7f:22:51:c8:0b:b6:98:63:3c:57:17:a0:52:
                    82:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:62:F9:1B:F9:0A:F6:F1:A0:42:C5:C8:EF:C6:BA:B0:86:6B:72:8D
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/a2L5G_kK9vGgQsXI78a6sIZrco0.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.150.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:9d:fc:f8:f6:46:7d:21:f4:8e:20:2d:75:ea:03:e7:80:a2:
         d8:69:9a:3c:dd:78:c1:f7:9d:0d:3e:f4:f2:0e:86:01:e6:8d:
         a1:95:08:06:81:67:ce:50:78:0b:1c:0c:d4:e3:3b:6f:20:ab:
         7a:e6:04:dd:af:f1:ca:3d:ef:5a:03:f7:bc:49:f5:bc:db:7f:
         91:7f:90:30:f4:a1:9d:09:ef:55:0a:c4:19:94:1b:56:e4:36:
         b2:df:33:1c:13:0b:6a:b7:6c:39:a4:30:50:ca:be:cb:77:d4:
         22:5d:0e:ad:22:e7:df:a8:db:08:cf:88:b0:bf:c7:a2:a4:03:
         8c:10:4b:4d:1b:86:25:18:fa:70:6a:dc:e6:db:0d:0a:e0:4f:
         62:e0:47:6c:30:0e:b7:e5:ae:82:55:4b:44:30:a0:cf:59:20:
         2c:a0:e9:c2:e3:96:1a:0a:0e:42:96:fa:d2:c6:e4:29:c4:58:
         0b:e9:bf:b3:c3:7c:2f:f5:4b:40:fe:2e:93:6f:63:65:69:b5:
         21:db:4b:72:c3:20:86:c5:f0:c4:f8:be:8e:d9:56:b8:3b:42:
         31:d5:98:12:59:ab:26:02:62:93:fc:6d:1a:c1:ea:df:29:f2:
         91:28:c0:be:b0:28:14:83:df:c1:2b:58:0d:8e:67:a2:88:1d:
         48:c6:e7:ef
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICBe8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNjAzMzEw
ODIxMTBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDZCNjJGOTFCRjkwQUY2
RjFBMDQyQzVDOEVGQzZCQUIwODY2QjcyOEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC8RFUSwY3pHCRr36g9j9jIbPYwHdxEWBEuUilHWV7sIyGw0m+d
iAEO9G4oGpSXtsDA8PKY95ADqndIkiJilpx2VCF0QdCpvKST97NzMZ3qM5Fe5b3F
Tja5EwLDjP9nZHQVB0kik1+eN09r0HD/hNXdw5CnuTPiwtMBLAi+I5h/mHUwpD9T
meCKNekA2Fz8Y7oY6oT54tVgnmUQ2LimQaCh377ja7CP3ERe9S3HkY3SwLufwaHC
wV0PjMQmalyQLffCRWwMRMVuDD19YfPoU+oehUDbCUyGg365P3+dgvQdbTwTSJy8
Fgw/2uyDUdiatP0nfyJRyAu2mGM8VxegUoKFAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUa2L5G/kK9vGgQsXI78a6sIZrco0wHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzk0L2EyTDVHX2tLOXZHZ1FzWEk3OGE2c0lacmNvMC5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHclhAwDQYJKoZIhvcNAQELBQADggEB
AFid/Pj2Rn0h9I4gLXXqA+eAothpmjzdeMH3nQ0+9PIOhgHmjaGVCAaBZ85QeAsc
DNTjO28gq3rmBN2v8co971oD97xJ9bzbf5F/kDD0oZ0J71UKxBmUG1bkNrLfMxwT
C2q3bDmkMFDKvst31CJdDq0i59+o2wjPiLC/x6KkA4wQS00bhiUY+nBq3ObbDQrg
T2LgR2wwDrflroJVS0QwoM9ZICyg6cLjlhoKDkKW+tLG5CnEWAvpv7PDfC/1S0D+
LpNvY2VptSHbS3LDIIbF8MT4vo7ZVrg7QjHVmBJZqyYCYpP8bRrB6t8p8pEowL6w
KBSD38ErWA2OZ6KIHUjG5+8=
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:00:24 2026 by rpki-client