Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/-qmefeVqIgKNMeCASR3JyOOh80M.roa
File:                     -qmefeVqIgKNMeCASR3JyOOh80M.roa (raw, json)
Hash identifier:          X5JGU37DVnDoY30TN7PVQIf0hbS97xSBvGS5q68ZVnI=
Subject key identifier:   FA:A9:9E:7D:E5:6A:22:02:8D:31:E0:80:49:1D:C9:C8:E3:A1:F3:43
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       03B1
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/-qmefeVqIgKNMeCASR3JyOOh80M.roa
Signing time:             Wed 01 Oct 2025 01:31:15 +0000
ROA not before:           Wed 01 Oct 2025 01:31:15 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     146979
IP address blocks:        103.180.131.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Oct 2025 06:03:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 945 (0x3b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Oct  1 01:31:15 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=FAA99E7DE56A22028D31E080491DC9C8E3A1F343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:3b:03:1d:0c:a1:57:51:98:8f:2c:da:2b:84:
                    b2:35:34:da:39:c8:d3:8d:2c:64:81:f1:73:5c:01:
                    d0:e0:9b:bf:9c:76:19:ce:18:8b:87:01:21:9c:5f:
                    33:8c:96:dc:ea:c1:39:8d:7a:e0:f8:c1:0e:31:72:
                    d4:1c:15:9a:1c:a8:df:94:05:e3:af:1d:d6:54:c2:
                    15:72:57:07:a5:c8:f0:22:a7:8e:c1:78:8b:90:66:
                    65:c7:44:f5:13:8b:ee:9e:68:d2:34:8a:1c:94:22:
                    bc:9b:b8:57:ad:62:91:b4:a2:be:cd:57:bf:4e:48:
                    6a:a3:a2:85:d5:92:3d:a6:d7:16:45:39:eb:f6:a3:
                    50:0d:ff:83:a9:85:36:b7:73:99:46:db:eb:24:7b:
                    1a:b0:11:4e:7e:cc:df:0f:91:69:57:33:3a:39:f9:
                    d0:b2:97:d7:47:6a:43:e2:35:b3:68:cc:b0:7a:00:
                    11:df:02:c0:6a:9b:58:38:f2:fc:57:5c:c5:de:d7:
                    96:01:e7:29:7e:af:c7:95:7e:b6:e3:aa:df:dd:4c:
                    46:39:43:a1:95:ab:b1:4c:ab:d6:96:b7:63:42:8b:
                    bd:32:b9:0c:f8:71:7f:6a:5c:a9:4f:b3:bd:84:c6:
                    1f:b8:58:83:14:e9:0b:15:47:9a:f5:2c:9c:43:60:
                    16:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:A9:9E:7D:E5:6A:22:02:8D:31:E0:80:49:1D:C9:C8:E3:A1:F3:43
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/-qmefeVqIgKNMeCASR3JyOOh80M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:ce:15:c3:48:74:ad:0b:4e:24:9c:01:33:f8:12:44:dd:6a:
         3c:51:85:80:29:fc:07:19:7c:1f:2d:3f:ae:35:42:ad:23:54:
         2a:18:81:eb:96:84:e6:f4:bc:74:a0:6f:9c:51:52:7c:79:12:
         6b:64:ad:b2:bf:bc:41:81:85:30:43:da:8d:ad:f9:b3:84:d7:
         a7:15:2e:4c:ee:41:3c:b0:c9:bf:9d:76:5a:42:db:e7:7d:5d:
         40:ea:c0:d8:92:f2:6e:04:46:8c:5f:55:b4:f9:47:12:85:8a:
         c6:74:ce:ec:96:bc:69:ea:d4:66:74:83:f4:a7:c3:2d:2c:e3:
         77:9b:5b:5e:0a:1f:0f:4f:83:66:e7:86:33:49:6e:a0:f6:e5:
         36:fa:28:4e:18:d8:43:fa:63:b3:b6:78:60:9e:fe:8c:97:f5:
         33:0b:91:79:85:ec:08:32:29:0c:de:2b:f3:28:36:21:1b:3a:
         24:f5:78:8f:b9:4b:c3:3c:bb:79:d1:d4:59:44:31:3b:54:41:
         09:dd:44:b5:01:25:83:74:b2:15:48:cc:b7:75:1d:21:e5:48:
         c0:dd:20:e2:21:35:22:fc:ca:a3:5e:2d:2c:6c:fb:1a:c1:74:
         5c:3a:3a:79:36:af:e8:a2:f0:91:0d:01:99:a5:64:65:94:d0:
         99:e9:6f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 08:04:35 2025 by rpki-client