Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/FV3JTDfkcF6dRKUCcCO8mbclkgM.roa
File:                     FV3JTDfkcF6dRKUCcCO8mbclkgM.roa (raw, json)
Hash identifier:          VHmk/QDoexiM60HDBeLWO2N5GCFw8bPb0Rtd6blM7NE=
Subject key identifier:   15:5D:C9:4C:37:E4:70:5E:9D:44:A5:02:70:23:BC:99:B7:25:92:03
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       186E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/FV3JTDfkcF6dRKUCcCO8mbclkgM.roa
Signing time:             Tue 31 Mar 2026 08:05:58 +0000
ROA not before:           Tue 31 Mar 2026 08:05:58 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     9605
IP address blocks:        27.230.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6254 (0x186e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Mar 31 08:05:58 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=155DC94C37E4705E9D44A5027023BC99B7259203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e9:fb:c6:9c:f3:bc:66:94:74:98:0b:68:ad:
                    61:bf:95:d0:57:e4:50:f5:c0:aa:55:28:f2:31:a8:
                    9a:dd:e7:8f:02:55:a4:5f:a3:1f:db:e3:b2:a1:1d:
                    dd:04:fa:79:45:c4:90:9a:42:10:43:3c:af:d1:bc:
                    00:43:74:6c:ac:ff:02:d8:a6:7a:ca:60:48:a8:01:
                    ec:50:3c:5a:4e:67:97:09:b4:65:d8:31:cf:03:24:
                    e3:f8:02:89:0a:fe:05:bf:13:35:6d:a8:14:2e:27:
                    31:c8:87:19:45:68:fa:4b:a6:88:8f:b5:c5:36:ee:
                    b3:63:e3:eb:ab:37:78:83:32:e4:8d:c4:87:00:be:
                    b6:b1:6e:df:67:f0:05:60:67:1b:e9:43:cc:f1:c9:
                    97:c7:a1:6a:f5:c2:e6:98:86:d7:86:01:b8:bf:9a:
                    37:ca:92:75:ea:f2:a8:e9:6b:97:e2:61:25:3e:0e:
                    cc:16:34:0f:21:4f:b1:56:98:db:24:0b:89:97:c5:
                    b8:2d:d8:f3:5b:4b:ad:10:09:90:e7:2f:fa:74:b5:
                    81:5c:af:ac:4f:69:91:51:e4:fd:29:91:39:73:ad:
                    9c:9f:b0:99:ce:15:dc:29:4d:3a:88:11:e5:49:23:
                    24:c8:d5:b7:da:4b:da:fb:bb:3c:38:63:d0:3e:f8:
                    f7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:5D:C9:4C:37:E4:70:5E:9D:44:A5:02:70:23:BC:99:B7:25:92:03
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/FV3JTDfkcF6dRKUCcCO8mbclkgM.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.230.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2c:3a:52:fa:17:e9:14:75:2c:7d:28:38:91:c0:c2:6a:19:77:
         f7:85:4e:a5:6a:5e:63:15:4c:b0:2b:91:fa:c3:95:7f:4d:ed:
         6d:8c:36:4e:28:18:f0:f9:4f:12:c9:fd:98:69:61:04:f5:91:
         69:cc:92:be:ed:a0:e1:d0:83:f4:7a:42:f7:f5:45:cc:94:64:
         e4:23:55:23:d5:ee:9b:d1:48:ca:46:8a:cf:45:fd:27:05:17:
         12:cf:19:2f:6a:98:47:04:45:df:64:55:cf:16:d8:88:f4:ee:
         20:91:6c:d1:17:8f:ae:aa:42:29:30:8b:27:bf:5d:01:2d:8e:
         68:ec:d5:86:28:88:10:4c:21:55:86:2a:d8:eb:7a:56:cb:b4:
         d1:78:96:2c:a7:b6:98:80:47:be:4d:81:e4:26:1a:ac:ff:60:
         3c:6d:59:c8:06:60:be:b6:7b:50:5e:45:f4:f8:44:39:71:e8:
         bf:f7:17:6a:e2:cf:eb:85:e5:8d:47:93:8d:5e:f2:f5:a2:0e:
         29:87:dc:aa:27:a3:0f:1e:28:67:db:49:ec:4a:bd:73:59:c5:
         0f:d2:27:82:61:bb:bc:e1:0c:f4:5f:42:0a:44:de:49:09:d7:
         43:51:22:13:53:ca:2d:5f:23:ff:7d:ee:05:1d:9a:7a:c9:ed:
         13:cd:1c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:45:07 2026 by rpki-client