Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/731/dybSh32VnlxCR3ei19Dl8W90zyE.roa
File:                     dybSh32VnlxCR3ei19Dl8W90zyE.roa (raw, json)
Hash identifier:          aYY8kW/X9IWRlyqYvPBVyT38phE8lX1ujO1FQa3wk4k=
Subject key identifier:   77:26:D2:87:7D:95:9E:5C:42:47:77:A2:D7:D0:E5:F1:6F:74:CF:21
Certificate issuer:       /CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
Certificate serial:       AB
Authority key identifier: 91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/dybSh32VnlxCR3ei19Dl8W90zyE.roa
Signing time:             Tue 31 Mar 2026 07:33:03 +0000
ROA not before:           Tue 31 Mar 2026 07:33:03 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     18260
IP address blocks:        101.2.128.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171 (0xab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
        Validity
            Not Before: Mar 31 07:33:03 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=7726D2877D959E5C424777A2D7D0E5F16F74CF21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:1f:85:2a:3f:8d:fc:a6:4c:50:bb:3b:93:56:
                    f6:40:ee:d1:f8:fc:93:fa:99:48:63:b3:c7:e0:f3:
                    74:12:08:7a:3b:cc:42:15:08:46:80:9b:a6:b9:f4:
                    a1:2b:3b:d1:e0:eb:9a:76:57:8e:30:07:2a:e2:11:
                    94:e6:0f:bb:f5:89:97:23:90:2b:47:53:2c:05:01:
                    2d:28:b0:0a:b4:2e:bc:a4:9b:88:50:27:ff:8a:74:
                    f8:37:f7:ac:c9:2c:d7:d5:a0:fc:7b:a3:21:b2:f6:
                    c6:b6:a4:33:ed:0e:d9:63:49:d2:57:dc:09:9c:45:
                    7c:0d:33:6d:60:e5:70:82:33:74:b7:f9:14:8d:be:
                    8c:a1:94:73:cd:c0:4f:c6:0c:cd:1b:d7:ca:bd:4c:
                    2d:c4:7c:45:97:be:56:bf:4d:18:0d:ed:bd:99:24:
                    7a:ab:a7:50:51:8c:a9:9e:4a:bf:ea:8d:cc:7f:49:
                    78:42:69:1a:68:a3:9f:b0:d4:be:14:99:3a:1a:ad:
                    7c:dd:0a:a3:77:8a:2d:ab:4f:c4:60:82:27:8d:29:
                    77:ae:3b:f5:74:32:c0:14:cf:70:49:a7:57:b6:6a:
                    0e:76:e4:ca:62:77:b6:4e:49:42:9c:b6:57:16:24:
                    3f:38:1a:5c:f7:38:5a:ed:94:cf:f3:8e:37:a1:63:
                    ba:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:26:D2:87:7D:95:9E:5C:42:47:77:A2:D7:D0:E5:F1:6F:74:CF:21
            X509v3 Authority Key Identifier:
                keyid:91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/dybSh32VnlxCR3ei19Dl8W90zyE.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.2.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a4:a7:66:da:e1:72:a9:fe:74:9d:5a:49:92:09:78:11:7d:d2:
         22:7a:e3:87:28:88:22:42:03:7c:5e:84:ce:37:11:cf:18:ca:
         65:cb:fd:ca:e0:b6:e6:e1:1a:88:91:ed:f4:11:2f:e1:e1:68:
         6e:1a:19:79:27:1c:fb:eb:5b:33:7c:28:a2:08:ab:d4:49:5b:
         69:9c:bd:03:e6:8a:24:6d:c9:f7:e6:f9:4e:d8:a3:0a:08:c3:
         45:85:ba:f9:1a:3d:ff:66:eb:7e:dd:57:84:38:91:a8:27:29:
         6e:a9:7f:d7:c2:8a:7d:e5:24:ab:c7:c2:bc:f7:11:76:23:e6:
         e5:f3:52:c7:12:c9:ab:46:e7:f7:a1:54:18:f4:65:1f:e1:4b:
         40:d5:e1:26:18:09:a1:6e:19:97:d5:3d:66:60:9f:56:2f:10:
         8f:20:db:3a:aa:f2:06:e1:cd:79:01:30:e5:ff:7c:2d:ad:aa:
         37:89:77:52:48:9c:49:36:b8:99:27:1e:38:ae:e2:40:cf:00:
         ef:54:cb:5e:dc:3b:f8:0c:12:43:52:ad:a2:bb:3b:e7:18:e3:
         d9:db:98:41:5c:2a:ca:f2:c7:4c:ce:a4:29:67:06:a7:03:77:
         69:cf:35:fa:0a:ab:4b:d0:21:26:32:26:f9:d8:2d:65:5a:b1:
         d1:65:a6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:14:38 2026 by rpki-client