Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/o1n1lEMwe7eJc9Y8a1-AVT3dcS8.roa
File:                     o1n1lEMwe7eJc9Y8a1-AVT3dcS8.roa (raw, json)
Hash identifier:          6lS9e7/2FBxdti6lmli9JrYsa7BmLn4oVimDTXo+B10=
Subject key identifier:   A3:59:F5:94:43:30:7B:B7:89:73:D6:3C:6B:5F:80:55:3D:DD:71:2F
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       019E
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/o1n1lEMwe7eJc9Y8a1-AVT3dcS8.roa
Signing time:             Wed 01 Oct 2025 01:33:55 +0000
ROA not before:           Wed 01 Oct 2025 01:33:55 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     2527
IP address blocks:        110.66.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 17:27:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 414 (0x19e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Oct  1 01:33:55 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=A359F59443307BB78973D63C6B5F80553DDD712F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6e:46:d9:6d:f1:00:ac:73:b0:a8:01:2d:63:
                    f9:b7:50:a3:f7:02:bb:50:78:af:77:ce:62:cb:9d:
                    2f:62:a3:f7:ba:6f:34:e7:b8:d3:61:a2:a8:a6:a0:
                    12:79:59:2f:82:76:87:b9:f3:c5:3e:9d:2b:ba:02:
                    de:dd:89:dd:93:65:6f:d0:00:e6:55:fe:16:c2:f6:
                    17:7d:e0:ef:22:00:e9:fb:84:41:63:d4:61:3c:ea:
                    d7:ac:fe:ed:60:0d:c6:ea:d7:1d:5c:fc:16:49:d8:
                    1f:2b:2b:e8:0e:48:3c:71:7a:c5:ca:fd:65:52:0f:
                    9c:99:5c:3f:fe:5b:2a:41:13:34:ee:9d:04:9e:aa:
                    46:d6:51:23:91:92:75:bc:2f:5e:a3:1f:3a:ee:ad:
                    8a:cf:1b:5d:b5:bd:e0:d0:47:3e:23:df:be:42:eb:
                    b7:e4:6c:44:10:cd:7b:17:8b:44:95:10:d2:d3:b6:
                    4f:df:d6:07:7a:af:57:ac:b7:fe:15:c0:a6:2a:7f:
                    d0:a7:96:48:59:8f:32:ba:7f:f0:53:58:25:e2:df:
                    e0:af:6b:20:d2:b1:2d:a8:20:c7:93:d9:45:98:88:
                    f1:17:20:cd:10:f4:18:8e:51:f3:5b:ad:32:3d:a2:
                    c2:d8:76:71:9e:6c:54:81:98:5d:eb:0c:c3:98:56:
                    55:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:59:F5:94:43:30:7B:B7:89:73:D6:3C:6B:5F:80:55:3D:DD:71:2F
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/o1n1lEMwe7eJc9Y8a1-AVT3dcS8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.66.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         0d:40:b5:b1:b0:5f:fd:15:79:04:94:75:69:21:9c:0a:a9:60:
         f9:d4:0e:11:5e:03:4b:99:56:17:70:49:60:18:f9:2e:12:aa:
         4d:31:8a:d4:ad:82:21:01:fe:00:8c:f0:66:55:bb:f9:eb:db:
         98:42:10:d9:f1:70:fa:5b:14:3c:58:47:16:78:87:85:0c:e1:
         bf:0e:d0:7d:31:14:5b:d5:3a:2e:ed:20:b8:75:ac:57:b0:aa:
         f6:4b:d8:e2:36:27:1e:42:71:9a:94:18:fa:03:2f:58:64:aa:
         20:01:17:8d:76:61:d1:cd:5f:94:fc:40:af:c0:97:bc:6f:75:
         0e:f4:d6:19:4c:eb:85:8b:61:08:60:a5:74:d2:52:6f:e2:bd:
         49:76:ee:4d:3b:5e:5e:9c:eb:31:81:6c:76:64:51:f1:fb:43:
         7f:2e:51:80:6a:a8:13:d2:cf:19:29:56:5a:56:7d:b6:cf:f6:
         e1:f5:bd:73:6c:f6:12:ff:28:e7:8c:6d:c8:48:88:51:b9:86:
         a5:6a:7a:0e:4c:29:dd:ec:37:99:05:c1:9a:80:21:8a:ef:87:
         37:55:f8:4c:ec:d3:40:6b:11:e4:ee:5c:d7:b8:cc:3a:e7:e5:
         e8:ba:a4:e5:47:92:80:8c:bc:48:0a:e2:59:37:29:6a:b5:ed:
         64:1b:e8:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:56:05 2025 by rpki-client