Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/S7f2LWU3cUkManA1liSnEgbvXHU.roa
File:                     S7f2LWU3cUkManA1liSnEgbvXHU.roa (raw, json)
Hash identifier:          vECjCfjl7eT09uDRJ61b7oL/KgRAQ2sCTnjWWwTK1RY=
Subject key identifier:   4B:B7:F6:2D:65:37:71:49:0C:6A:70:35:96:24:A7:12:06:EF:5C:75
Certificate issuer:       /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial:       89
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/S7f2LWU3cUkManA1liSnEgbvXHU.roa
Signing time:             Wed 01 Oct 2025 01:31:06 +0000
ROA not before:           Wed 01 Oct 2025 01:31:06 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     2514
IP address blocks:        103.2.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 21:29:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 137 (0x89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
        Validity
            Not Before: Oct  1 01:31:06 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=4BB7F62D653771490C6A70359624A71206EF5C75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:65:25:c1:69:c1:26:48:d5:5d:ae:d8:08:78:
                    92:96:36:c2:b2:ed:25:68:e2:47:40:72:2e:9e:85:
                    c1:14:1a:9f:8b:3e:77:4b:01:ab:ab:8e:6c:fe:d1:
                    c3:be:08:78:72:11:88:9b:e1:97:f1:5a:84:75:1b:
                    5d:b5:88:98:d5:b4:09:14:a9:54:8b:2a:77:8f:ee:
                    d0:28:9d:63:e3:40:e0:9b:0e:79:4f:7b:be:59:d6:
                    ef:8e:2e:61:ca:5e:ce:b8:6c:17:50:d7:10:c2:13:
                    ff:86:b0:67:11:0c:36:28:dd:99:04:a8:41:e9:ed:
                    fd:9a:7e:1f:cd:f5:e3:d3:a3:66:fc:55:e8:fd:b1:
                    99:2c:c2:e1:42:d8:4f:a7:53:5a:76:a3:80:13:0a:
                    b4:be:7e:c3:38:4e:24:22:13:cb:47:a5:a2:38:3e:
                    a7:ca:9a:08:d0:9c:9a:c3:27:89:77:8d:d3:ab:82:
                    dd:6e:d9:f4:0c:14:f5:08:84:6d:1a:e9:d6:b0:df:
                    8b:38:bf:f3:00:85:cb:12:30:1b:e5:4f:2f:d4:6f:
                    56:91:29:af:3c:dd:d5:67:aa:e2:3c:78:c4:d4:bc:
                    43:c0:57:77:2f:1a:02:92:3c:7e:7c:b5:99:77:33:
                    28:a5:f5:ec:b7:8a:77:e8:85:13:0d:d2:be:d2:47:
                    41:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:B7:F6:2D:65:37:71:49:0C:6A:70:35:96:24:A7:12:06:EF:5C:75
            X509v3 Authority Key Identifier:
                keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/S7f2LWU3cUkManA1liSnEgbvXHU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:5d:11:c7:a6:53:c0:69:30:c7:9d:d8:8e:ef:04:24:cf:a2:
         0b:65:73:05:73:16:ec:ac:36:62:3d:ec:bc:63:06:2d:c8:b8:
         9d:86:aa:68:25:ab:c9:94:98:71:35:b8:62:71:84:ee:8c:54:
         39:fa:4f:97:2c:b5:89:6e:5b:5e:f1:6f:e8:9b:b9:4e:6f:33:
         5e:9b:e7:98:12:24:e8:5d:b4:90:6e:65:23:19:4d:ab:5d:36:
         fb:e3:e0:ff:70:49:00:af:48:44:70:1b:5d:9a:2e:28:09:86:
         f3:fa:e0:93:34:0c:51:77:64:91:9a:8c:aa:6c:da:a5:13:3e:
         9b:3d:09:d8:74:54:c1:85:15:c3:d8:1a:29:81:1a:66:aa:d1:
         ef:ec:3d:dd:f7:3b:42:a5:c0:65:11:d8:35:79:48:32:bc:02:
         eb:0e:75:c3:fe:21:07:00:c4:e4:91:4b:62:00:c0:61:ee:86:
         88:c2:a0:d3:9b:bd:38:f7:56:fd:c2:8a:77:1a:02:22:0e:87:
         c1:e2:60:dd:e2:f9:3a:f0:7c:5f:63:c3:22:18:71:8c:3e:17:
         f1:75:6b:94:63:18:86:96:08:c2:8a:4b:9c:02:01:86:66:83:
         7a:b8:a7:41:68:45:4e:7b:fd:20:d9:46:7f:7d:24:61:19:f5:
         0e:a3:c4:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:28:31 2025 by rpki-client