Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/554/E-DtW-aPRw5t2IjLtTR_VOtxyNQ.roa
File:                     E-DtW-aPRw5t2IjLtTR_VOtxyNQ.roa (raw, json)
Hash identifier:          SJrmTL8hxpUjnj2xOgv33WSrnAIm5r0OY0ryShxobls=
Subject key identifier:   13:E0:ED:5B:E6:8F:47:0E:6D:D8:88:CB:B5:34:7F:54:EB:71:C8:D4
Certificate issuer:       /CN=96D92CE24CF3FCC753285CEBAF3FEC1D72581A81
Certificate serial:       61
Authority key identifier: 96:D9:2C:E2:4C:F3:FC:C7:53:28:5C:EB:AF:3F:EC:1D:72:58:1A:81
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ltks4kzz_MdTKFzrrz_sHXJYGoE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/E-DtW-aPRw5t2IjLtTR_VOtxyNQ.roa
Signing time:             Tue 31 Mar 2026 07:52:09 +0000
ROA not before:           Tue 31 Mar 2026 07:52:09 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     131921
IP address blocks:        153.123.0.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/ltks4kzz_MdTKFzrrz_sHXJYGoE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/ltks4kzz_MdTKFzrrz_sHXJYGoE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ltks4kzz_MdTKFzrrz_sHXJYGoE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97 (0x61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96D92CE24CF3FCC753285CEBAF3FEC1D72581A81
        Validity
            Not Before: Mar 31 07:52:09 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=13E0ED5BE68F470E6DD888CBB5347F54EB71C8D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f7:81:68:39:50:99:b8:ca:fa:36:d5:e0:93:
                    68:9f:9e:fb:c2:8e:2f:ec:98:49:0c:8e:5d:85:bf:
                    9d:07:e8:84:c9:ce:26:80:9f:d4:39:9d:34:03:13:
                    9e:79:f4:bb:fb:2c:5d:35:2d:60:27:90:87:f1:28:
                    44:53:aa:c7:bb:ab:eb:b2:50:40:c3:57:c8:71:b9:
                    40:ea:0f:ba:36:be:2d:8c:83:78:ee:57:6d:e7:bb:
                    ac:39:06:47:10:d5:e0:87:b5:0e:c9:97:96:42:47:
                    b4:56:72:32:f9:ef:05:c7:49:ca:04:a5:5c:64:f5:
                    7f:7a:f6:2a:ed:65:d3:f8:5f:01:12:f5:37:5a:d2:
                    2e:0c:48:d8:8d:c6:9c:ad:b5:0c:f7:72:e9:27:6e:
                    74:a1:e7:b4:8b:dc:ae:05:0e:00:c5:6b:66:56:18:
                    ce:c3:51:41:08:50:5a:9a:73:10:aa:51:29:3a:c1:
                    fc:61:cf:84:ae:7a:cb:d9:86:ec:72:c9:bd:53:88:
                    3e:99:b0:32:e0:c4:c6:ff:7f:66:48:9b:14:33:21:
                    ef:90:a5:2d:be:0a:ce:c1:6e:4a:93:92:b5:ab:3b:
                    04:2d:2d:af:3b:69:6b:50:f5:06:d9:84:10:90:b4:
                    21:31:6c:a6:54:9f:70:89:d3:8c:e4:0c:06:fb:f3:
                    bd:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E0:ED:5B:E6:8F:47:0E:6D:D8:88:CB:B5:34:7F:54:EB:71:C8:D4
            X509v3 Authority Key Identifier:
                keyid:96:D9:2C:E2:4C:F3:FC:C7:53:28:5C:EB:AF:3F:EC:1D:72:58:1A:81

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/ltks4kzz_MdTKFzrrz_sHXJYGoE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ltks4kzz_MdTKFzrrz_sHXJYGoE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/E-DtW-aPRw5t2IjLtTR_VOtxyNQ.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.123.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ac:c7:32:2e:57:e6:b1:82:0f:c4:20:1c:fc:d9:d6:05:81:f1:
         f8:e7:e4:9b:c8:26:ad:cd:52:de:e6:c0:22:f8:4b:15:6c:0c:
         09:41:f2:69:10:90:9a:7c:29:a7:00:cc:98:76:29:a3:5c:69:
         51:ca:5b:ba:b6:96:9f:4f:e5:24:b3:6a:d3:39:07:7f:94:97:
         6c:4c:3f:ed:d2:47:57:df:fd:f8:da:07:35:d6:5e:cc:36:28:
         30:ed:38:1b:f2:bd:49:4d:07:5c:54:70:33:85:54:0f:ea:fc:
         11:a3:a5:9b:d0:f2:57:26:30:d0:f0:10:90:04:44:02:1a:8b:
         2d:c0:31:32:0e:bf:c9:ea:5c:f0:9f:d7:f0:8f:5a:a4:2f:a8:
         71:31:0b:84:59:ee:74:5d:d0:73:40:30:f5:2b:f0:aa:24:a6:
         bc:bc:89:be:d9:88:fd:b4:2c:ec:19:3b:13:5a:9b:a3:a0:ef:
         dd:29:f7:8a:4e:23:c4:a5:90:31:20:33:80:3c:b9:ca:60:db:
         72:d0:24:f2:8c:41:6f:73:d8:49:fb:e0:f1:5c:0f:30:da:d2:
         7b:c0:a0:af:ad:de:3e:e0:f5:c1:ff:07:28:af:db:19:7e:c1:
         61:9f:84:11:ab:f7:ea:7e:11:5b:6c:b7:cd:3e:61:36:94:3c:
         78:86:85:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:15:51 2026 by rpki-client