Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/u6LUL2ZDDcS17uvIzns9tltDkXo.roa
File:                     u6LUL2ZDDcS17uvIzns9tltDkXo.roa (raw, json)
Hash identifier:          OBOexhNCcvr/w4UNUImsPF2/3VtVCY678Uh3bsMRnjw=
Subject key identifier:   BB:A2:D4:2F:66:43:0D:C4:B5:EE:EB:C8:CE:7B:3D:B6:5B:43:91:7A
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       01A1
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/u6LUL2ZDDcS17uvIzns9tltDkXo.roa
Signing time:             Wed 01 Oct 2025 01:33:58 +0000
ROA not before:           Wed 01 Oct 2025 01:33:58 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     2527
IP address blocks:        123.198.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 17:27:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 417 (0x1a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Oct  1 01:33:58 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=BBA2D42F66430DC4B5EEEBC8CE7B3DB65B43917A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9d:73:98:1d:94:81:8b:ed:38:54:a6:91:9a:
                    7a:c7:b6:84:71:96:46:10:b8:b5:dc:a4:2c:84:da:
                    18:50:34:25:4f:eb:87:77:3c:a6:8a:0d:09:2e:65:
                    ba:e0:64:fd:79:5b:47:b3:4d:6b:11:b7:e7:70:4a:
                    5b:e1:db:bb:61:1e:4e:27:34:68:dc:e9:79:7b:8c:
                    a9:41:6a:be:dc:87:bc:6c:af:71:c6:b8:11:5d:84:
                    8c:59:8c:db:d7:41:9e:1f:8f:bc:7c:3e:94:ec:5a:
                    d7:84:9b:80:f4:89:b5:78:2e:ab:b6:e0:8c:79:9c:
                    d6:c2:43:2b:01:37:6d:ea:86:9c:82:89:e1:10:8d:
                    48:64:47:7e:7e:16:de:98:96:76:bb:db:77:7a:5a:
                    cf:7c:9c:30:3c:14:a2:9c:00:3f:a4:b0:5f:98:68:
                    af:70:77:76:9b:63:c5:14:6b:64:31:62:f3:7c:2e:
                    ab:aa:32:cc:d0:5a:06:61:17:58:c4:84:cf:2f:6c:
                    04:f6:a8:72:4c:ba:3e:54:e9:82:68:fe:54:a3:a5:
                    90:f7:c5:81:26:fb:b9:26:e2:38:27:bb:07:bf:64:
                    07:be:0b:f9:52:22:b0:14:84:09:74:6f:39:f4:88:
                    8e:ba:94:cc:cb:18:9e:ad:55:12:f9:ce:41:b3:f3:
                    97:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:A2:D4:2F:66:43:0D:C4:B5:EE:EB:C8:CE:7B:3D:B6:5B:43:91:7A
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/u6LUL2ZDDcS17uvIzns9tltDkXo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.198.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         af:9d:5b:76:51:0a:99:b0:4f:ef:72:df:2d:8d:c5:70:f3:45:
         13:b2:8e:bb:97:4c:d6:21:af:ab:ba:c7:93:7e:9f:37:6a:d4:
         32:86:01:89:8a:2e:5a:06:56:79:e5:fd:47:e7:6c:f9:fe:33:
         2c:a3:e6:07:4d:c3:24:8e:e2:b9:be:b2:6a:29:2e:c5:25:29:
         8b:d2:fa:3e:17:84:88:0e:37:b6:9d:65:11:12:0f:6d:45:63:
         28:7d:87:e1:7a:46:6a:11:88:10:fb:2e:84:29:64:a4:e9:ce:
         9b:78:d6:9d:04:10:32:bb:fd:20:86:a9:9a:5a:5c:0e:c2:99:
         de:17:4c:0d:6b:7a:4d:72:8b:73:44:dc:d6:f1:4e:47:26:cf:
         a0:f2:eb:b7:3f:cf:9c:b0:3e:da:f5:4b:3f:12:74:05:1d:08:
         ef:6b:6e:7c:09:86:d4:52:0e:42:14:53:08:1b:69:7d:90:80:
         62:19:f1:ac:44:89:ae:c7:fd:1e:fb:65:fe:eb:1f:bf:94:b1:
         69:0b:49:b0:7a:d7:97:93:26:7c:ad:b8:5b:66:f2:9e:07:a4:
         33:72:fb:a2:dd:15:16:60:46:1a:90:85:f0:3a:0c:bb:a3:4f:
         14:dc:12:de:a4:ed:8c:59:29:ac:0a:1a:35:b2:e9:6c:3d:68:
         9c:29:5d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:57:22 2025 by rpki-client