Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/731/lS2zz44HtzCeuKIcILK-k6GyPwY.roa
File:                     lS2zz44HtzCeuKIcILK-k6GyPwY.roa (raw, json)
Hash identifier:          n9A0s4kPkBaR1Zfv5lIvNTkkT3/0hCYAemOM74TNkCw=
Subject key identifier:   95:2D:B3:CF:8E:07:B7:30:9E:B8:A2:1C:20:B2:BE:93:A1:B2:3F:06
Certificate issuer:       /CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
Certificate serial:       91
Authority key identifier: 91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/lS2zz44HtzCeuKIcILK-k6GyPwY.roa
Signing time:             Wed 01 Oct 2025 01:33:36 +0000
ROA not before:           Wed 01 Oct 2025 01:33:36 +0000
ROA not after:            Tue 15 Sep 2026 01:30:02 +0000
asID:                     18260
IP address blocks:        119.30.14.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 18:23:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 145 (0x91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
        Validity
            Not Before: Oct  1 01:33:36 2025 GMT
            Not After : Sep 15 01:30:02 2026 GMT
        Subject: CN=952DB3CF8E07B7309EB8A21C20B2BE93A1B23F06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8d:e8:ae:a4:72:87:70:cf:c1:bb:56:67:3c:
                    fc:92:a8:48:89:7d:68:1d:4b:f6:45:4e:51:fc:5b:
                    23:12:25:88:7c:ba:a6:7e:64:65:25:0a:14:b0:15:
                    48:26:29:b1:0d:47:1e:be:2c:b0:e6:9c:4a:56:dd:
                    6c:b1:28:47:49:dc:72:b9:b5:0f:23:ff:4b:f1:e2:
                    64:7b:5a:02:6b:d6:f8:fb:08:90:2b:c1:f4:d8:17:
                    2d:ff:af:6a:f8:c6:db:3a:81:25:be:a7:30:67:05:
                    42:67:1f:cf:9d:0c:97:55:41:49:33:c3:c5:8d:7a:
                    4d:0d:da:63:8d:cc:f5:6d:ef:6b:2e:bc:6d:74:ef:
                    82:df:92:ae:34:3d:5d:0c:d0:6e:b3:31:3e:a3:8c:
                    92:20:7e:be:7b:d1:44:f2:cc:03:42:07:58:3f:b4:
                    67:f9:d3:d3:4a:00:fd:e6:be:69:65:44:a6:16:79:
                    38:dc:49:3b:8c:7a:b3:72:c2:78:4c:3b:b0:d4:d4:
                    ff:20:5d:fc:bf:be:d7:e3:89:5c:64:07:e8:4d:35:
                    7c:f5:3e:6f:e2:97:c1:00:9d:7d:83:61:82:ce:e6:
                    ad:cc:65:f9:8b:80:25:28:f5:47:b9:3d:a9:a3:fe:
                    37:b2:46:ac:7d:16:14:59:c2:48:5b:db:ac:20:18:
                    c5:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:2D:B3:CF:8E:07:B7:30:9E:B8:A2:1C:20:B2:BE:93:A1:B2:3F:06
            X509v3 Authority Key Identifier:
                keyid:91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/lS2zz44HtzCeuKIcILK-k6GyPwY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.30.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:7c:6b:79:41:15:93:ab:d0:49:26:de:2b:ba:32:3a:6a:98:
         12:24:f9:86:37:0c:a7:f9:91:2e:a8:33:29:27:3b:87:33:89:
         f4:ce:59:e3:91:1f:64:8b:9a:71:6d:4e:af:85:e6:8e:3e:b2:
         81:07:3f:de:74:22:02:5f:82:51:bf:a7:6f:83:8d:5c:c4:29:
         9b:5e:3a:6b:4b:03:3f:68:cf:c7:9f:b8:30:a1:50:ed:a1:3f:
         4f:4d:f3:ca:7b:f8:a4:14:c7:ce:57:a9:8b:87:71:a4:9c:e8:
         2a:17:cf:1e:25:c5:d3:58:bf:98:80:3e:d3:a1:b7:cb:97:d7:
         7d:71:0c:99:5c:27:2e:89:91:13:47:58:15:18:e4:34:55:d5:
         5e:30:a0:77:c6:5d:76:2b:19:76:22:84:78:7f:4d:ca:c7:82:
         f9:7a:ab:e7:1c:18:1f:e1:ab:06:1e:9e:f3:f8:37:de:26:7c:
         2a:82:6e:a5:f4:43:1c:fa:d9:91:da:48:be:ed:63:f9:38:5d:
         e3:d0:8d:1b:83:88:f1:c8:25:72:20:0d:c3:46:7e:8d:79:e8:
         28:04:ef:6e:b3:c9:3f:65:99:f3:50:fb:7f:e8:06:65:14:6b:
         80:72:f0:0b:4a:f4:31:26:64:e6:a4:cd:5e:27:b4:47:b8:a9:
         74:83:b3:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:52:29 2025 by rpki-client