Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/X6ze81Enc8zGmedXXF9PmKB9b34.roa
File:                     X6ze81Enc8zGmedXXF9PmKB9b34.roa (raw, json)
Hash identifier:          UAqDjiYVM9CZ55b7EMuFwj8tG2LMv9Yzl6r73xYJofA=
Subject key identifier:   5F:AC:DE:F3:51:27:73:CC:C6:99:E7:57:5C:5F:4F:98:A0:7D:6F:7E
Certificate issuer:       /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial:       87
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/X6ze81Enc8zGmedXXF9PmKB9b34.roa
Signing time:             Wed 01 Oct 2025 01:31:05 +0000
ROA not before:           Wed 01 Oct 2025 01:31:05 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     2514
IP address blocks:        61.197.0.0/16 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 21:29:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135 (0x87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
        Validity
            Not Before: Oct  1 01:31:05 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=5FACDEF3512773CCC699E7575C5F4F98A07D6F7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:d7:30:b9:c3:e9:14:3e:61:5c:05:be:7c:ac:
                    18:3e:ff:8e:95:f3:be:97:52:19:8e:28:de:16:06:
                    fa:9a:bb:2c:d2:77:97:79:58:2d:6c:e7:e0:0e:97:
                    ff:14:50:6f:55:72:d7:7f:17:2d:f1:0d:5b:65:cb:
                    1e:29:ce:e9:50:6f:14:96:1f:1f:90:48:24:6f:98:
                    40:2d:99:70:dd:14:8b:cc:69:eb:da:a1:06:1c:58:
                    88:01:01:17:89:5b:7e:01:87:20:d9:7e:0e:68:2a:
                    9f:0c:a4:2b:1a:ad:ab:c2:07:a9:e2:a9:3c:34:cc:
                    c2:b7:86:f2:9d:b3:d7:22:83:c0:22:b7:63:f3:27:
                    95:d8:96:8c:48:be:57:df:92:96:10:08:26:ca:78:
                    46:27:35:2a:b5:44:48:35:2c:fc:eb:03:26:d0:30:
                    0b:be:f8:4c:05:61:a3:be:47:f8:14:0b:48:c3:94:
                    6c:eb:f6:aa:c7:14:bf:fb:11:79:c9:98:76:3e:53:
                    a0:13:0e:76:9d:8e:62:10:08:96:1f:2a:be:45:91:
                    90:6d:5b:a4:50:c1:ca:fa:5b:f4:2c:4e:13:33:26:
                    27:a6:a9:a6:a3:2a:e8:eb:0e:a9:d9:6e:40:63:0f:
                    a4:21:e2:fa:89:44:69:73:43:60:46:cd:ec:e5:4f:
                    b4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:AC:DE:F3:51:27:73:CC:C6:99:E7:57:5C:5F:4F:98:A0:7D:6F:7E
            X509v3 Authority Key Identifier:
                keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/X6ze81Enc8zGmedXXF9PmKB9b34.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.197.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6f:b3:b1:2a:c5:41:a2:9b:da:b9:1c:1d:bd:6a:aa:d8:ed:1d:
         00:48:07:93:a8:24:2b:3d:05:92:70:1d:b3:be:ef:05:64:9a:
         e4:3f:a1:ee:e8:07:39:d3:d2:39:ec:b8:39:43:9c:12:a7:a6:
         3a:58:d2:ad:7e:18:af:d2:73:d6:4c:99:5a:53:c6:8f:4d:00:
         36:5b:dc:27:41:fb:00:fd:71:64:98:c8:c3:c2:ba:ce:6c:f4:
         68:d8:0a:1b:07:13:25:75:ec:34:34:0d:85:9c:c1:1a:0f:03:
         6a:64:4a:38:6f:24:48:f2:37:74:f2:9e:c1:0b:eb:07:10:ae:
         f1:5d:ef:cb:b8:2b:7f:72:ff:57:d8:4c:86:da:77:db:a9:04:
         26:35:02:71:18:5a:29:5e:68:63:3c:11:69:1f:a9:86:f4:18:
         a3:b1:31:31:28:41:d4:70:88:27:00:38:d7:c6:c9:5c:06:c0:
         9d:ab:b0:19:3c:80:29:dc:7c:c1:55:18:38:16:61:d1:28:ac:
         85:ed:41:0b:06:49:3e:a8:ad:0c:03:ac:b5:07:cd:b2:2d:e9:
         e9:ec:09:ee:94:6c:77:c8:c4:57:ca:7a:0f:3e:0f:2d:a7:2c:
         95:b3:45:9a:7a:75:7f:17:12:16:9f:a7:8f:bb:a1:43:31:8c:
         8b:90:36:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:29:03 2025 by rpki-client