Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/539/LdowWaDK0WnK2JHp9HGSRDIdOG4.roa
File:                     LdowWaDK0WnK2JHp9HGSRDIdOG4.roa (raw, json)
Hash identifier:          JtTuzM+YPY5LuXZiLyTXAn0Ej6IpdbThgGHhv5Osz5s=
Subject key identifier:   2D:DA:30:59:A0:CA:D1:69:CA:D8:91:E9:F4:71:92:44:32:1D:38:6E
Certificate issuer:       /CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
Certificate serial:       A4
Authority key identifier: 5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/LdowWaDK0WnK2JHp9HGSRDIdOG4.roa
Signing time:             Tue 31 Mar 2026 07:37:16 +0000
ROA not before:           Tue 31 Mar 2026 07:37:16 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     55900
IP address blocks:        103.13.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164 (0xa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
        Validity
            Not Before: Mar 31 07:37:16 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=2DDA3059A0CAD169CAD891E9F4719244321D386E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:7c:76:ac:14:2c:da:b2:09:8e:7e:87:96:06:
                    8a:0c:ab:f4:11:43:80:5a:8f:ef:a1:00:12:e1:cd:
                    c0:4f:1e:f3:34:4d:b2:cd:77:21:76:b6:d7:4e:28:
                    4c:5f:8f:d7:80:16:16:4e:1d:b3:e3:ca:cb:13:45:
                    98:9f:7b:24:90:19:cd:e8:b1:c0:09:3f:56:39:e8:
                    ed:d4:f6:cd:e8:fb:3b:cd:18:81:ff:8a:a3:3c:b1:
                    52:2e:46:d4:7f:a8:59:a7:a2:93:47:1a:14:c9:25:
                    fd:d1:fe:0d:c7:29:15:c0:fc:ff:0f:88:6d:ff:60:
                    fd:13:38:b7:9d:96:58:91:dc:14:7a:53:8c:fb:0c:
                    7b:9e:3b:0a:e2:87:08:d4:58:63:c3:24:cc:19:18:
                    07:b6:43:63:18:f2:e7:c4:f7:f0:d2:e0:2c:29:ff:
                    97:e7:0c:cb:5f:90:11:fa:b7:5f:41:47:30:45:8c:
                    d9:65:2e:17:5c:ef:00:e7:b8:e4:76:5f:42:a2:de:
                    24:cd:6b:14:13:c9:13:2b:38:0b:5d:f9:45:82:36:
                    21:e0:42:cf:1e:b8:df:11:84:09:81:66:57:0d:4c:
                    3f:96:96:80:58:77:ce:ac:ee:e8:70:88:d3:96:41:
                    fd:00:8e:e0:4d:63:0d:91:be:ac:03:23:f1:ed:d9:
                    5a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:DA:30:59:A0:CA:D1:69:CA:D8:91:E9:F4:71:92:44:32:1D:38:6E
            X509v3 Authority Key Identifier:
                keyid:5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/LdowWaDK0WnK2JHp9HGSRDIdOG4.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.13.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:4b:76:9c:50:25:82:e5:7b:b6:15:30:42:72:27:7f:6c:62:
         13:dd:3b:b6:5b:4b:5a:a1:3f:bd:d5:2e:99:6c:38:8e:47:e8:
         7e:18:5a:83:10:d9:a2:39:70:50:6e:70:55:b9:31:8a:ab:d3:
         9c:86:bd:39:99:2d:99:29:3d:b5:14:03:69:d1:be:9b:6b:d9:
         ec:6d:b7:b4:68:2f:40:77:58:fd:6c:b3:22:33:5d:b9:53:dd:
         1c:fd:58:d2:36:a7:66:a2:e8:5c:ad:10:07:af:1e:a3:a7:27:
         35:0b:48:a7:49:61:e9:c0:c7:3a:b6:5c:9e:97:d8:fa:ef:5c:
         41:f2:ec:29:b0:d6:6f:56:19:7f:a5:88:7a:aa:b2:25:94:7e:
         99:8a:32:d5:10:85:23:6e:3c:85:3b:40:14:91:5a:c6:d5:57:
         2e:22:89:51:75:f7:07:d3:4a:0d:ad:2c:1c:a6:8a:d2:72:03:
         f7:1d:2d:fe:6b:c2:34:21:6a:35:0d:ce:ff:02:8b:64:93:19:
         ac:95:49:8c:9b:18:83:21:98:89:23:8a:cd:91:4d:14:ef:c0:
         92:87:04:83:27:4b:15:b3:6f:6f:bc:f3:25:1a:3b:1f:73:a4:
         0e:fd:0f:1f:a4:45:32:ab:b9:e0:58:43:16:80:f2:60:40:eb:
         cc:ed:de:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:44:33 2026 by rpki-client