Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/Lnoim3i3uxd3UPo05Lz7vcIFwBM.roa
File:                     Lnoim3i3uxd3UPo05Lz7vcIFwBM.roa (raw, json)
Hash identifier:          0DjMeRGgnkTBsWV0a0Qh86t/FJj/8iP1eq108148I1w=
Subject key identifier:   2E:7A:22:9B:78:B7:BB:17:77:50:FA:34:E4:BC:FB:BD:C2:05:C0:13
Certificate issuer:       /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial:       88
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/Lnoim3i3uxd3UPo05Lz7vcIFwBM.roa
Signing time:             Wed 01 Oct 2025 01:31:06 +0000
ROA not before:           Wed 01 Oct 2025 01:31:06 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     2514
IP address blocks:        61.194.0.0/16 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 21:29:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136 (0x88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
        Validity
            Not Before: Oct  1 01:31:06 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=2E7A229B78B7BB177750FA34E4BCFBBDC205C013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:82:cb:7b:d1:a4:23:11:b2:c0:34:f2:79:db:
                    07:ab:49:8f:fe:14:fe:89:90:da:42:85:48:55:a3:
                    ab:60:cd:cb:2a:47:c9:97:2a:29:e7:7c:c8:be:2f:
                    16:8d:8d:4f:08:cf:c2:a5:ac:40:12:e7:67:12:16:
                    a4:dd:24:8c:ee:89:96:95:66:24:d3:cf:0c:2e:5b:
                    f6:c6:62:f8:83:e8:d8:e9:53:75:a4:98:57:fa:70:
                    d2:28:bf:7e:a6:9a:34:68:55:5d:4a:8f:26:85:3f:
                    ac:ed:6d:1c:7c:36:3b:20:fc:30:78:f1:84:28:47:
                    07:6d:8d:f7:50:95:cd:05:f3:fe:f9:e1:09:03:61:
                    29:02:99:58:84:37:ff:78:0f:4c:6e:06:5d:04:56:
                    a9:6d:14:df:68:ac:54:6c:f3:2a:dc:cf:6e:93:b0:
                    51:1a:5f:05:25:e5:f5:3d:10:0e:ea:e0:e6:c2:6a:
                    03:d7:b3:99:48:75:eb:ec:5b:bb:46:54:53:4a:8e:
                    77:fb:07:ad:7d:23:15:e4:7e:32:13:a0:87:01:27:
                    d7:f2:e1:9c:6d:48:60:72:43:96:19:5d:d3:4a:e3:
                    e9:bf:5f:0b:fd:88:c4:ae:31:dc:c7:7f:b8:bb:1c:
                    ea:97:39:3c:ce:d6:b1:82:60:4f:86:c8:89:82:21:
                    3b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:7A:22:9B:78:B7:BB:17:77:50:FA:34:E4:BC:FB:BD:C2:05:C0:13
            X509v3 Authority Key Identifier:
                keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/Lnoim3i3uxd3UPo05Lz7vcIFwBM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.194.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         64:43:bf:fd:1f:86:63:27:b2:bc:57:04:1f:d2:b9:db:91:96:
         5b:7d:c4:7c:9c:71:4a:b0:31:98:ac:ec:35:f3:48:e5:ca:88:
         61:3a:6a:fc:68:04:eb:34:f4:a6:56:df:e7:27:db:bd:46:01:
         ad:ae:f1:80:83:e1:c7:2b:4d:8a:ab:c6:a1:11:a7:74:54:49:
         ce:cc:6d:d9:5f:34:49:2a:ed:e0:98:b3:54:a1:cd:6e:8e:55:
         f5:51:b8:39:87:ac:36:4d:9c:39:ff:a6:75:53:dd:77:a4:e4:
         f1:81:d3:41:f9:53:6a:ae:d7:cb:54:13:5c:b7:14:09:cf:69:
         88:26:36:f6:62:26:cd:6c:e7:51:d2:12:c9:03:c1:7d:d6:3e:
         95:9b:e9:a2:01:24:8a:fd:4b:96:67:db:57:46:bb:d7:cf:ff:
         bc:2b:8d:4e:3c:de:e9:ee:48:7e:9f:77:54:3a:a6:8a:a0:e2:
         21:51:e6:a9:71:93:2c:f4:34:a7:6e:9b:02:c2:6a:6a:f0:69:
         47:a7:77:43:e2:ca:77:7f:8b:ce:3e:ea:8a:fc:07:fd:fd:ed:
         d0:ed:44:92:81:53:03:03:f4:b4:e2:44:99:10:90:52:c8:b7:
         3b:dd:d7:19:56:48:9d:32:01:62:4a:a9:3f:35:7e:e5:31:7a:
         46:9c:f7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:28:56 2025 by rpki-client