Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/731/FDyN_VQcCWJNMAb8Vsj9d_ksWWI.roa
File:                     FDyN_VQcCWJNMAb8Vsj9d_ksWWI.roa (raw, json)
Hash identifier:          m2BI3FyIYJSLPc3NpcIsMVUpGYLCVfRKFEXzxQG36TI=
Subject key identifier:   14:3C:8D:FD:54:1C:09:62:4D:30:06:FC:56:C8:FD:77:F9:2C:59:62
Certificate issuer:       /CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
Certificate serial:       A9
Authority key identifier: 91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/FDyN_VQcCWJNMAb8Vsj9d_ksWWI.roa
Signing time:             Tue 31 Mar 2026 07:33:02 +0000
ROA not before:           Tue 31 Mar 2026 07:33:02 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18260
IP address blocks:        27.106.224.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169 (0xa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
        Validity
            Not Before: Mar 31 07:33:02 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=143C8DFD541C09624D3006FC56C8FD77F92C5962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8d:0e:9e:ac:53:6a:4a:9a:ae:95:19:3a:00:
                    85:94:fc:75:ce:94:80:01:0c:67:69:be:21:14:95:
                    2d:97:a6:f5:5a:45:97:20:46:74:93:f2:70:7e:f9:
                    a7:ca:e9:d3:03:14:a6:69:f5:1b:1a:b8:6c:1f:93:
                    39:d0:d1:ec:4a:fa:10:b7:4c:bb:00:9c:54:48:80:
                    52:80:2e:75:be:e7:7a:a2:56:b8:83:29:12:bf:cb:
                    b1:d0:56:4f:89:d6:cd:4a:f9:ef:73:c0:cf:33:52:
                    42:f0:15:a3:98:a1:3d:33:a9:a9:28:2f:77:07:7b:
                    10:80:ad:c7:b7:e4:81:7e:a7:3e:ee:15:9d:c6:e4:
                    d1:c8:e1:2c:c4:4d:01:9a:ef:d8:54:34:72:a0:6d:
                    84:13:44:d2:df:9a:44:0f:80:d5:86:5f:96:79:60:
                    31:f8:0c:28:2e:5a:ec:a3:28:ca:9c:12:25:92:fb:
                    c4:2a:6d:92:3e:53:e1:6f:e9:85:eb:78:37:00:00:
                    32:40:05:53:65:ac:cd:bd:bf:c6:c8:3a:a5:43:8e:
                    83:35:5e:8e:75:e7:5c:0c:d4:20:48:d3:fb:c5:38:
                    61:a5:6f:03:20:e5:b0:31:e1:b1:96:9e:bc:19:cf:
                    aa:11:ac:41:ff:f8:02:40:0b:12:db:76:b5:d6:1e:
                    f9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:3C:8D:FD:54:1C:09:62:4D:30:06:FC:56:C8:FD:77:F9:2C:59:62
            X509v3 Authority Key Identifier:
                keyid:91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/FDyN_VQcCWJNMAb8Vsj9d_ksWWI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.106.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         15:a0:75:d4:f3:af:cd:ab:ba:70:e0:06:27:4d:ec:6b:45:0a:
         28:bd:9e:b6:7c:7f:ca:57:4a:4b:18:a1:85:95:36:d7:d0:e6:
         2c:71:02:a9:20:74:68:f3:4b:41:17:e4:1c:74:67:4c:4c:1e:
         97:c6:80:f7:0a:75:67:91:c6:ec:fc:ff:b3:57:af:e7:e9:4d:
         9b:7a:51:fb:2c:8d:19:23:c5:17:14:2c:bb:5b:23:1f:d5:c9:
         dd:d7:80:1f:a7:ae:85:1d:49:bd:c9:3d:92:51:52:56:29:76:
         c1:4f:e4:a0:9a:32:f0:d7:0f:b7:16:9e:c2:bf:01:a4:dd:ed:
         2e:2c:90:e1:15:f4:7f:d4:2a:78:2b:2b:a0:25:93:56:84:1f:
         04:59:ab:1e:8c:8c:7e:70:50:5a:55:ff:e6:fd:16:b6:fe:46:
         83:19:9e:47:fd:bc:f8:19:f1:0b:c8:89:be:55:00:a3:fa:69:
         a3:2f:5a:2f:ef:b6:d0:84:bf:1a:82:85:82:99:10:ee:62:8e:
         e5:0c:36:55:be:c6:26:1a:82:a6:85:5d:18:78:ed:b7:6a:4d:
         9b:b4:39:9c:f2:14:3b:00:16:a5:e5:47:bd:94:6d:ee:7a:a6:
         df:2d:ef:2a:b9:a3:23:19:f7:e7:e5:a1:fd:6f:57:ca:97:cd:
         f7:37:a5:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:48:37 2026 by rpki-client