Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/kE62GAkGWHGMO62CCbdMwfJfKpM.roa
File:                     kE62GAkGWHGMO62CCbdMwfJfKpM.roa (raw, json)
Hash identifier:          VjfTNs0P+FvPta3vUYukSN1e2SS/o+uqOoNI5ttFj6o=
Subject key identifier:   90:4E:B6:18:09:06:58:71:8C:3B:AD:82:09:B7:4C:C1:F2:5F:2A:93
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0606
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/kE62GAkGWHGMO62CCbdMwfJfKpM.roa
Signing time:             Tue 31 Mar 2026 08:21:20 +0000
ROA not before:           Tue 31 Mar 2026 08:21:20 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     10013
IP address blocks:        180.131.96.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:25:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1542 (0x606)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Mar 31 08:21:20 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=904EB618090658718C3BAD8209B74CC1F25F2A93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a4:29:a5:e2:ce:53:29:81:42:a5:23:a1:4f:
                    6b:74:75:e0:69:fb:f8:a4:fe:66:61:8d:bc:1c:e1:
                    b2:18:6f:43:73:f5:bd:aa:97:de:71:2d:a0:31:bb:
                    82:d3:0f:02:c1:62:2f:bc:29:fa:95:70:88:98:3a:
                    72:ef:d6:87:1f:3b:de:44:71:de:88:ae:25:08:1e:
                    c9:ee:5c:15:56:18:6b:86:75:9a:5c:2e:8c:d2:11:
                    3b:b9:a2:76:7f:85:ba:b5:3f:55:e2:4a:41:53:70:
                    f8:71:b0:31:32:07:79:9a:9c:68:cc:96:9d:9d:4b:
                    31:c0:e2:e5:8e:6a:fb:2c:7d:ec:c2:e5:ad:f0:28:
                    97:f2:55:1c:8d:27:8a:11:00:bf:35:a1:bd:a5:ae:
                    30:e0:d1:54:05:bb:ad:93:38:90:b0:ac:53:f4:d2:
                    7b:b3:7f:ba:72:5e:c2:b3:d9:76:6a:20:c0:13:34:
                    8e:0f:3f:aa:31:5f:b9:87:9f:41:f9:6b:51:eb:9a:
                    d8:52:5a:b7:a5:30:b9:4c:ad:64:c1:6d:f3:2b:18:
                    7a:fd:e5:75:e3:77:c3:ce:f4:dc:1e:ea:92:4f:5f:
                    16:80:35:55:4b:83:54:d0:18:b1:5d:ea:e5:8e:ad:
                    86:60:e0:4e:ca:78:bf:63:44:bb:eb:5a:9c:56:dd:
                    bb:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:4E:B6:18:09:06:58:71:8C:3B:AD:82:09:B7:4C:C1:F2:5F:2A:93
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/kE62GAkGWHGMO62CCbdMwfJfKpM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.131.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0c:b6:4b:65:5d:54:20:81:02:ba:77:ec:ba:7c:0a:8e:44:69:
         f0:67:51:20:c7:d0:1c:5b:fd:f0:bf:f6:e2:36:cd:64:7e:8b:
         15:5e:25:26:5b:15:8d:7f:bb:03:78:a0:29:5b:63:2a:f1:c0:
         15:da:7f:ea:5b:e9:1f:f7:94:8e:01:d4:19:0d:58:89:e7:68:
         43:94:8b:d2:f7:10:b8:8b:5f:c8:09:c3:a8:ac:df:71:13:59:
         1f:53:c1:fd:4b:89:33:b9:fe:27:67:c6:b3:d4:8d:17:f1:3c:
         7c:bb:a1:97:fd:7f:dd:5d:49:da:cd:a3:03:41:2b:40:96:dd:
         71:b7:0f:0d:a8:6b:f0:1e:37:06:4c:f3:c9:8a:23:a4:85:8d:
         93:5f:cf:89:53:49:9f:aa:6b:4a:4d:e2:ba:d2:10:fe:c8:55:
         40:2e:fb:84:24:22:40:6b:bd:8d:e3:2a:86:fc:15:f5:e9:a0:
         b2:48:a8:a8:11:86:62:4c:62:21:76:50:ee:2a:ef:44:53:41:
         65:8f:3e:c0:b9:1e:a4:fe:4b:cf:04:cc:78:8c:21:e1:d8:aa:
         b2:b8:6a:ff:27:e2:1e:d5:d6:82:ad:65:6d:b6:f2:d6:ed:73:
         2c:1c:e9:57:44:64:ff:32:e9:6b:f9:9b:28:96:f4:80:8d:ad:
         5b:01:2c:30
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgICBgYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNjAzMzEw
ODIxMjBaFw0yNzAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDkwNEVCNjE4MDkwNjU4
NzE4QzNCQUQ4MjA5Qjc0Q0MxRjI1RjJBOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDQpCml4s5TKYFCpSOhT2t0deBp+/ik/mZhjbwc4bIYb0Nz9b2q
l95xLaAxu4LTDwLBYi+8KfqVcIiYOnLv1ocfO95Ecd6IriUIHsnuXBVWGGuGdZpc
LozSETu5onZ/hbq1P1XiSkFTcPhxsDEyB3manGjMlp2dSzHA4uWOavssfezC5a3w
KJfyVRyNJ4oRAL81ob2lrjDg0VQFu62TOJCwrFP00nuzf7pyXsKz2XZqIMATNI4P
P6oxX7mHn0H5a1HrmthSWrelMLlMrWTBbfMrGHr95XXjd8PO9Nwe6pJPXxaANVVL
g1TQGLFd6uWOrYZg4E7KeL9jRLvrWpxW3bvTAgMBAAGjggHZMIIB1TAdBgNVHQ4E
FgQUkE62GAkGWHGMO62CCbdMwfJfKpMwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDBxBggrBgEFBQcBCwRlMGMwYQYIKwYB
BQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFB
NzM4MTAwMDAvMzk0L2tFNjJHQWtHV0hHTU82MkNDYmRNd2ZKZktwTS5yb2EwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAO0g2AwDQYJKoZIhvcNAQELBQADggEB
AAy2S2VdVCCBArp37Lp8Co5EafBnUSDH0Bxb/fC/9uI2zWR+ixVeJSZbFY1/uwN4
oClbYyrxwBXaf+pb6R/3lI4B1BkNWInnaEOUi9L3ELiLX8gJw6is33ETWR9Twf1L
iTO5/idnxrPUjRfxPHy7oZf9f91dSdrNowNBK0CW3XG3Dw2oa/AeNwZM88mKI6SF
jZNfz4lTSZ+qa0pN4rrSEP7IVUAu+4QkIkBrvY3jKob8FfXpoLJIqKgRhmJMYiF2
UO4q70RTQWWPPsC5HqT+S88EzHiMIeHYqrK4av8n4h7V1oKtZW228tbtcywc6VdE
ZP8y6Wv5myiW9ICNrVsBLDA=
-----END CERTIFICATE-----
Generated at Fri Apr 17 02:20:25 2026 by rpki-client